CVE-2026-113158

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113001

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113001

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113001

A Use after free vulnerability in the Workers component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated via a crafted HTML page . No specific exploit details or in-the-wild exploitation links are...

CVE-2026-113001

Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113204

UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113204

UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113204

Google Chrome on Android versions prior to 156.0.8078.47 is vulnerable to a Use after free flaw within the TrustedWebActivities component. A remote attacker can exploit this vulnerability by leveraging a crafted HTML page to potentially execute arbitrary code inside the sandbox. No specific detai...

CVE-2026-113123

A use-after-free flaw exists in the GPU (Graphics Processing Unit) component of Google Chrome (prior to version 156.0.8078.47 ). This vulnerability allows for improper memory access after it has been released. A remote attacker can exploit this by enticing a user to visit a specially crafted HTML...

CVE-2026-113204

UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113123

Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113123

Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113123

Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113081

Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113081

Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113081

A use after free flaw exists in the Compositing component of Google Chrome (prior to version 156.0.8078.47 ). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by delivering a crafted HTML page . Exploitation details are not provided in the documents. Remedi...

CVE-2026-113081

Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113041

Race condition in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113202

Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113041

Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...