CVE-2026-113290

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113155

Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113290

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113155

A use-after-free memory corruption condition exists in the Glic component of Google Chrome (prior to version 156.0.8078.47 ), specifically within the chromium-browser . This flaw allows a remote attacker to achieve arbitrary code execution within the application sandbox by tricking a user into vi...

CVE-2026-113290

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free flaw in Input . This vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . Remediation is available in version 156.0.8078.47 or later. Specif...

CVE-2026-113014

Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113319

Missing authorization in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113108

Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113319

A use after free vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . A remote attacker can leverage this flaw to execute arbitrary code inside the sandbox by viewing a crafted HTML page . Remediation is available in version 156.0.8078.47 and subse...

CVE-2026-113014

A use-after-free vulnerability exists in the PerformanceAPIs component of Google Chrome (specifically in chromium-browser ) prior to version 156.0.8078.47 . The flaw occurs when memory is accessed after it has already been released. A remote attacker could exploit this by enticing a user to view ...

CVE-2026-113108

Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113014

Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113014

Missing authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113319

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113108

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a use-after-free condition within the Script component. A remote attacker can exploit this memory corruption by enticing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary ...

CVE-2026-113319

Missing authorization in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113108

Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113275

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113105

A use-after-free vulnerability exists in the Extensions component of Google Chrome prior to version 156.0.8078.47 . This flaw occurs when memory is improperly accessed after being deallocated, allowing a remote attacker to achieve arbitrary code execution inside the browser sandbox. The attack ca...

CVE-2026-113105

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...