CVE-2026-113112

A use-after-free vulnerability exists in the Extensions component of Google Chrome (and chromium-browser ) prior to version 156.0.8078.47 . A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page , potentially leading to arbitrary code execution within t...

CVE-2026-113327

Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112999

Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113327

Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112999

Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113327

Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-112999

Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113327

A Use after free vulnerability exists in the Chromecast component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can exploit this issue by leveraging a crafted HTML page to execute arbitrary code within the sandbox. The vulnerability is associated with CWE-416 and carries a C...

CVE-2026-112999

A use after free vulnerability in an API in Google Chrome versions prior to 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit details or mitigation steps are provided beyond t...

CVE-2026-113205

Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113205

Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113205

Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113207

Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113207

Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113207

Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113207

A use after free flaw exists in the SiteIsolation component of Google Chrome on Android prior to version 156.0.8078.47 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by presenting a crafted HTML page. While the Chromium security severity is rated as Med...

CVE-2026-113205

A use-after-free memory management error in the Variations component of Google Chrome (prior to version 156.0.8078.47) allows a remote attacker to execute arbitrary code inside the browser sandbox. The attack can be initiated by convincing a user to visit a specially crafted HTML page . Specific ...

CVE-2026-113155

Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113155

Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113290

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...