CVE-2026-113111

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113111

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113200

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113111

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113200

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a use after free vulnerability within the ANGLE component. A remote attacker can exploit this by serving a crafted HTML page to execute arbitrary code within the sandbox. Remediation is available in version 156.0.8078.47 or later. No...

CVE-2026-113203

Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113170

Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113203

A use-after-free memory corruption issue in the Cascading Style Sheets (CSS) engine of Google Chrome (prior to version 156.0.8078.47 ) and chromium-browser allows a remote attacker to potentially execute arbitrary code inside the browser sandbox. This attack can be initiated by convincing a user ...

CVE-2026-113203

Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113170

A use-after-free vulnerability in the Autofill component of Google Chrome on Android (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the browser sandbox. This is achieved by enticing a user to visit a specially crafted HTML page . The root cause is the ...

CVE-2026-113203

Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113170

UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113170

UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113065

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-113197

A use after free vulnerability exists in the Forms component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by leveraging a crafted HTML page to achieve arbitrary code execution within the sandbox. While the Chromium security severity is rated as Medium,...

CVE-2026-113197

Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113065

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-113065

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-113065

A use-after-free vulnerability exists in the Media component of Google Chrome (and chromium-browser ) prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by enticing a user to load a specially crafted HTML page , potentially leading to arbitrary code execution inside the brow...

CVE-2026-113197

Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...