CVE-2026-113237

A flaw was found in chromium-browser. A memory corruption vulnerability in the Chromoting component allows a remote attacker to read memory from within the browser sandbox an isolated execution environment via a crafted HTML page. Successful exploitation results in unauthorized information...

CVE-2026-113224

A flaw was found in the WebAppInstalls component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by convincing a user to open a crafted HTML page. Successful exploitation triggers memory corruption, enabling the attacker to read memory contents from within...

CVE-2026-113223

A flaw was found in the DevTools component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by tricking a user into loading a specially crafted HTML page. Successful exploitation could allow the attacker to read memory within the sandbox environment,...

CVE-2026-113178

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views component allows a remote attacker to cause information disclosure by convincing a user to open a specially crafted HTML page. Successful exploitation enables the attacker to read process memory from within the...

CVE-2026-113139

A flaw was found in the Chromium browser Autofill component. A remote attacker could exploit this memory corruption vulnerability by tricking a user into viewing a specially crafted HTML page. Successful exploitation could allow an attacker to read memory within the browser's sandbox environment,...

CVE-2026-112056

A flaw was found in wv. When parsing a Microsoft Word document containing malformed stylesheet data, the library fails to properly validate style indexes, leading to a heap-based out-of-bounds read. An attacker could exploit this vulnerability by enticing a user or automated service to open a...

CVE-2026-112054

A flaw was found in schroedinger. By tricking a user or application into processing a specially crafted Dirac video stream, an attacker can trigger a division-by-zero condition during the parsing of low-delay transform parameters. This failure causes the application to crash unexpectedly, resulti...

CVE-2026-112053

A flaw was found in schroedinger. This vulnerability allows an attacker to cause a Denial of Service DoS by crashing the decoding application. By tricking a user into opening a specially crafted Dirac video stream with invalid parameter values, an attacker can trigger an out-of-bounds read,...

CVE-2026-109765

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics: Text component...

CVE-2026-114406

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

CVE-2026-114136

A flaw was found in Django REST framework. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by exhausting server memory. The issue occurs because the JSON parser accepts arbitrary client-supplied charset encodings, including decompression codecs, rathe...

CVE-2026-114135

A flaw was found in jupyter-server. When configured with a gateway connection, the server validates user authentication but fails to verify whether the user has permission to run actions on computational kernels. A remote authenticated user with restricted privileges can exploit this flaw to open...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113342

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption issue in the Network component by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to bypass the security sandbox an isolated execution environment and execute...

CVE-2026-113337

A flaw was found in the Scroll component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated sandbox environment by convincing a user to visit a specially crafted HTML page. The issue stems from a memory corruption error during scroll...

CVE-2026-113336

A flaw was found in the Compositing component of Chromium. A remote attacker could execute arbitrary code outside the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. This issue stems from a memory corruption vulnerability during page compositing...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113330

A flaw was found in the CustomTabs component of Chromium on Android. A remote attacker could exploit a memory corruption issue by convincing a user to open a specially crafted HTML page. This flaw allows the attacker to execute arbitrary code within the browser's isolated security environment...

CVE-2026-113328

A flaw was found in Google Chrome's Privacy component. Due to improper input validation, a remote attacker could convince a user to visit a crafted HTML page to execute arbitrary code outside the browser's security sandbox an isolated execution environment. Successful exploitation could allow the...

CVE-2026-113306

A flaw was found in Chromium's Network component. A remote attacker could exploit improper input validation by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's sandbox, an isolated execution...

CVE-2026-113320

A flaw was found in Google Chrome's Navigation component on iOS. A remote attacker can exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113318

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the ServiceWorker component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environmen...

CVE-2026-113294

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to open a crafted HTML page. The vulnerability stems from improper input validation within the Loader component...

CVE-2026-113316

A flaw was found in the Views component of chromium-browser. Due to improper input validation, a remote attacker could execute arbitrary code within the browser sandbox environment by convincing a user to visit a specially crafted HTML page...

CVE-2026-113303

A flaw was found in the Web Real-Time Communication WebRTC component of chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page...

CVE-2026-113313

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbox...

CVE-2026-113312

A flaw was found in the Autofill component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated security sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...

CVE-2026-113307

A flaw was found in the Extensions component of Chromium. A remote attacker can exploit this memory corruption vulnerability by tricking a user into opening a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restricted sandbox...

CVE-2026-113299

A flaw was found in the WebProtect component of Chromium. A remote attacker could trigger memory corruption by convincing a user to open a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code inside the browser's sandbox environment...

CVE-2026-113283

A flaw was found in the Google Chrome CredentialProvider component. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code outside the restricted browser...

CVE-2026-113292

A flaw was found in Google Chrome's Omnibox component. A remote attacker could achieve arbitrary code execution within the browser's sandbox an isolated security environment by convincing a user to visit a specially crafted HTML page. This vulnerability stems from improper input validation when...

CVE-2026-113284

A flaw was found in chromium-browser. A remote attacker could potentially execute arbitrary code inside the application's restricted sandbox environment by tricking a user into viewing a specially crafted HTML page. This issue is caused by memory corruption during the processing of Extensible...

CVE-2026-113301

A flaw was found in the WebAppInstalls component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. This issue could allow the attacker to execute arbitrary code within the browser's...

CVE-2026-113291

A flaw was found in chromium-browser. This flaw allows a remote attacker to potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to open a specially crafted HTML page. The issue is caused by memory corruption in the FullScreen component when...

CVE-2026-113288

A flaw was found in chromium-browser. This memory corruption vulnerability in the Core component allows a remote attacker to execute arbitrary code within the application's restricted sandbox environment. To exploit this issue, an attacker must trick a user into viewing a specially crafted HTML...

CVE-2026-113286

A flaw was found in the Google Lens component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment by enticing a user to visit a specially crafted web page...

CVE-2026-113280

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a memory corruption condition within the Paint rendering component...

CVE-2026-113289

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. The issue stems from improper input validation within the PerformanceAPIs component...

CVE-2026-113265

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Back/Forward Cache BFCache, a browser feature that accelerates page navigation. A remote attacker could exploit this flaw by convincing a user to open a crafted HTML page, potentially allowing arbitrary code...

CVE-2026-113276

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This issue stems from a memory corruption vulnerability within the Passwords component...

CVE-2026-113260

A flaw was found in Chromium. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated security environment sandbox via a specially crafted HTML page. The vulnerability stems from memory corruption in the browser's Core component...

CVE-2026-113272

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser sandbox. By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption to execute untrusted...

CVE-2026-113269

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the BrowserTag component by enticing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113268

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the Navigation component when processing web content. A remote attacker could exploit this flaw by enticing a user to visit a crafted HTML page, potentially allowing arbitrary code execution within the browser sandb...

CVE-2026-113281

A flaw was found in the SiteIsolation component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page. The issue stems from memory corruption occurri...

CVE-2026-113279

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment. By enticing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption in the browser's...

CVE-2026-113264

A flaw was found in chromium-browser. Improper input validation in the Extensions component allows a remote attacker to potentially execute arbitrary code within the browser's isolated sandbox environment. An attacker could exploit this vulnerability by enticing a user to visit a specially crafte...

CVE-2026-113267

A flaw was found in the Chromium Video component. A remote attacker could execute arbitrary code within the restricted browser sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw that occurs when processing video content...

CVE-2026-113249

A flaw was found in chromium-browser. Improper input validation in the mobile browser component allows a remote attacker to potentially execute arbitrary code within the application's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiti...