CVE-2026-113275

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113275

Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113105

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113105

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113275

A Use after free vulnerability exists in the API of Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . While the Chromium security severity is rated as Medium, the CVSS 3.1 score is...

CVE-2026-113302

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113033

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113033

A Use after free vulnerability exists in the Streaming component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. No specific exploit details or remediation steps are provided...

CVE-2026-113302

A Use after free vulnerability exists in the Extensions component of Google Chrome versions prior to 156.0.8078.47 . A remote attacker can exploit this flaw by hosting a crafted HTML page to execute arbitrary code within the sandbox . No specific exploit links or in-the-wild exploitation details ...

CVE-2026-113302

Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113033

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113302

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113033

Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-113311

Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113311

Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113311

A use-after-free memory corruption condition in the ServiceWorker component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to execute arbitrary code inside the browser sandbox. The vulnerability is triggered by enticing a user to visit a specially crafted HTML page, ...

CVE-2026-113311

Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113198

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113011

Google Chrome on Windows, version prior to 156.0.8078.47 , is vulnerable to an incorrect authorization flaw in the CredentialProvider component. A local attacker who has compromised the renderer process can exploit this to execute arbitrary code outside the sandbox via a local program. This vulne...

CVE-2026-113011

Incorrect authorization in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...