CVE-2026-113009

A use-after-free memory condition exists in the WindowControlsOverlay component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page , potentially leading to the execution of arbitrary code within the brows...

CVE-2026-113009

UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113009

UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113009

UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113115

A Use after free vulnerability exists in the Transactions Platform of Google Chrome prior to version 156.0.8078.47 . A remote attacker can leverage this flaw by using a crafted HTML page to execute arbitrary code within the browser's sandbox. No specific exploit details or in-the-wild exploitatio...

CVE-2026-113208

Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113208

Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113189

Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113189

Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113208

Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113189

Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113208

A use-after-free vulnerability exists in the ContextualSearch component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page , potentially leading to arbitrary code execution within the browser s...

CVE-2026-113189

A Use after free vulnerability exists in the Core component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by viewing a crafted HTML page. The vulnerability is assigned a CRITICAL CVSS 3.1 score of 9.6 . No specif...

CVE-2026-113112

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113321

A Use after free vulnerability in the Extensions component of Google Chrome prior to version 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated via a crafted HTML page . No specific exploit details or in-the-wild exploitation informati...

CVE-2026-113112

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113321

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113112

Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113321

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113321

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...