CVE-2026-113177

Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113270

Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113270

Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113270

A Use after free vulnerability in the Internals component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code outside the sandbox by interacting with a crafted HTML page. The Chromium security severity for this issue is rated as Medium . Specific...

CVE-2026-113216

A Use after free vulnerability in the Navigation component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This execution is triggered by visiting a crafted HTML page . The vulnerability has a Chromium security severity of...

CVE-2026-113270

Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113216

Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113087

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113087

A use-after-free vulnerability exists in the Actor component of Google Chrome prior to version 156.0.8078.47 . The flaw occurs when memory is accessed after it has already been released, potentially allowing a remote attacker to execute arbitrary code inside the browser sandbox by enticing a user...

CVE-2026-113216

Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113087

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113087

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113216

Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113259

Missing authorization in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113187

Missing authorization in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113228

Incorrect authorization in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113075

A Use after free vulnerability exists in the DevTools component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could exploit this flaw by using a crafted HTML page to execute arbitrary code inside the sandbox. Remediation is available in version 156.0.8078.47 or later. Specif...

CVE-2026-113259

Missing authorization in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113228

A use-after-free vulnerability exists in the Network component of Google Chrome (specifically in chromium-browser ) prior to version 156.0.8078.47 . The flaw occurs when the browser accesses memory that has already been released. A remote attacker could exploit this by enticing a user to open a s...

CVE-2026-113259

A use-after-free vulnerability exists in the Frames component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by tricking a user into visiting a specially crafted HTML page, which triggers memory access after it has been released. Successful exploitation ...