CVE-2026-113262

A Use after free vulnerability exists in the Extensions component of Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by navigating to a crafted HTML page. While the Chromium security severity is rated as M...

CVE-2026-113278

UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113071

Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112995

Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112995

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113190

A Use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit details or links are provided in the documents, ...

CVE-2026-113071

Google Chrome on Android is vulnerable to a Use after free flaw in the Notifications component. This issue affects versions prior to 156.0.8078.47 and allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page. Exploitation details are not provided in the...

CVE-2026-113190

Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112995

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113071

Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113071

Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113190

Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113278

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113190

Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113278

UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113278

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free flaw within the Extensions component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page. No specific exploit details or in-the-wild exploitatio...

CVE-2026-112995

A use after free vulnerability exists in the Animation component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this flaw by interacting with a crafted HTML page to achieve arbitrary code execution within the sandbox. No specific exploit links or additional remedi...

CVE-2026-113115

Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113115

Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113115

Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...