CVE-2026-113191

UI misrepresentation in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113250

A Use after free vulnerability exists in the ANGLE component of Google Chrome versions prior to 156.0.8078.47 . This flaw allows a remote attacker to potentially execute arbitrary code inside the sandbox by navigating to a crafted HTML page. No specific exploit details or in-the-wild exploitation...

CVE-2026-113113

A use after free vulnerability exists in the Extensions component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page. While specific exploit details are not provided in the document...

CVE-2026-113113

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-113250

Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113079

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free flaw in the SiteIsolation component. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The Chromium security severity for th...

CVE-2026-113250

Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113191

A use-after-free vulnerability exists in the Internals component of Google Chrome on Mac (prior to version 156.0.8078.47 ). A remote attacker can trigger memory corruption to execute arbitrary code inside the browser sandbox by tricking a user into visiting a specially crafted HTML page . No spec...

CVE-2026-113068

UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113174

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113068

UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113174

A use-after-free vulnerability exists in the Extensions component of Google Chrome prior to version 156.0.8078.47 . The flaw occurs when the application attempts to access memory after it has been released. A remote attacker could exploit this by tricking a user into visiting a specially crafted ...

CVE-2026-113174

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113068

Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113068

Google Chrome versions prior to 156.0.8078.47 are vulnerable to a Use after free flaw within the Input component. This security issue allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The vulnerability has been addressed in version 156.0....

CVE-2026-113174

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113160

Out of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-113179

Missing authorization in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-113160

Out of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-112993

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...