CVE-2026-113197

Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113344

A use after free flaw exists in the Performance component of Google Chrome (prior to version 156.0.8078.47). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . No specific exploit details or information on in-the-wild ex...

CVE-2026-113221

A use after free vulnerability exists in Google Lens within Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page . While the technical details specify the vulnerability type as CWE-4...

CVE-2026-113344

Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. Chromium security severity: Medium...

CVE-2026-113344

Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. Chromium security severity: Medium...

CVE-2026-113221

Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113221

Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113221

Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113344

Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. Chromium security severity: Medium...

CVE-2026-113037

Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113037

A Use after free vulnerability in the WebSockets component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated via a crafted HTML page . While the Chromium security severity is rated as Medium, the ...

CVE-2026-113037

Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113037

Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113028

Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-113177

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113177

Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113028

Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. Chromium security severity: Medium...

CVE-2026-113028

A use after free vulnerability in the Media component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This attack can be initiated by a victim visiting a crafted HTML page . The vulnerability is assigned a Chromium security...

CVE-2026-113177

A use-after-free condition exists in the FileSystem component of Google Chrome (prior to version 156.0.8078.47). This vulnerability occurs when memory is improperly accessed after it has been released, potentially allowing a remote attacker to execute arbitrary code inside the browser sandbox by ...

CVE-2026-113028

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...