CVE-2026-113202

A use-after-free vulnerability exists in the BrowserTag component of Google Chrome (prior to version 156.0.8078.47 ) and chromium-browser . The flaw occurs when the application attempts to access memory that has already been released, allowing a remote attacker to execute arbitrary code inside th...

CVE-2026-113202

Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113202

Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113041

A use-after-free flaw in the Actor component of Google Chrome (prior to version 156.0.8078.47) allows a remote attacker to execute arbitrary code inside the browser's sandbox. The vulnerability is triggered by tricking a user into visiting a crafted HTML page , which causes the application to acc...

CVE-2026-113041

Race condition in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113073

Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113043

Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113073

Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113043

A use after free vulnerability exists in the iOSWeb component of Google Chrome on iOS versions prior to 156.0.8078.47 . A remote attacker can exploit this flaw by using a crafted HTML page to execute arbitrary code within the sandbox. While the Chromium security severity is rated as Medium , the ...

CVE-2026-113043

Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113043

Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113073

A use after free vulnerability in the Google Chrome browser (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This exploit can be triggered by a victim viewing a crafted HTML page . While the Chromium security severity is listed as Medium , ...

CVE-2026-113073

Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113308

Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113076

Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113076

Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113308

Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113076

Google Chrome on Android is vulnerable to a Use after free flaw in the Toolbar component in versions prior to 156.0.8078.47 . A remote attacker can exploit this vulnerability by having a victim navigate to a crafted HTML page to achieve arbitrary code execution inside the sandbox. While the Chrom...

CVE-2026-113308

A use after free vulnerability in the Core component of Google Chrome (prior to version 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the sandbox. This attack can be initiated by hosting a crafted HTML page . No specific exploit details or in-the-wild exploitation data...

CVE-2026-113076

Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...