CVE-2026-113247

A flaw was found in chromium-browser. A memory corruption vulnerability in Developer Tools DevTools allows a remote attacker to achieve arbitrary code execution within the browser's sandbox. By convincing a user to open a specially crafted HTML page, an attacker can exploit this issue to execute...

CVE-2026-113245

A flaw was found in Chromium DevTools. A remote attacker could exploit a memory corruption vulnerability to achieve arbitrary code execution within the browser's sandbox an isolated security environment by enticing a user to load a specially crafted HTML page...

CVE-2026-113239

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. The issue stems from a range validation error in the SiteIsolation...

CVE-2026-113230

A flaw was found in Google Chrome. Improper input validation allows a remote attacker to execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. Although the execution is confined to the sandbox isolation layer,...

CVE-2026-113241

A flaw was found in the Toolbar component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a crafted HTML webpage. This could allow the attacker to execute arbitrary code within the application's restricted sandbox environment...

CVE-2026-113235

A flaw was found in the Passwords component of chromium-browser. An improper input validation vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must trick a user...

CVE-2026-113238

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption vulnerability in the CustomTabs feature by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code within the isolated browser sandbo...

CVE-2026-113213

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by tricking a user into loading a specially crafted HTML page. This vulnerability is caused by memory corruption within the DevTools component when processing untrusted web content...

CVE-2026-113226

A flaw was found in chromium-browser. A memory corruption issue in the Model component allows a remote attacker to execute arbitrary code within the browser's isolated security environment sandbox. To exploit this vulnerability, an attacker must persuade a user to visit or load a specially crafte...

CVE-2026-113231

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code inside the browser sandbox environment by convincing a user to visit a crafted HTML page...

CVE-2026-113220

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the Extensions component by tricking a user into visiting a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox. While execution is confined to th...

CVE-2026-113219

A flaw was found in the Contacts component of Google Chrome. A remote attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113211

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code outside the browser sandbox an isolated security environment by exploiting a memory corruption vulnerability in the ServiceWorker component. To exploit this flaw, an attacker must convince a user to visit a...

CVE-2026-113232

A flaw was found in Chromium's Search component. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's sandbox environment...

CVE-2026-113192

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox environment by exploiting a memory corruption vulnerability in the V8 JavaScript engine. To trigger this flaw, the attacker must convince a user to visit a specially crafted web page...

CVE-2026-113214

A flaw was found in Google Chrome's FullScreen component. Due to improper input validation, a remote attacker could convince a user to open a specially crafted HTML page to execute arbitrary code within the browser's restricted sandbox environment...

CVE-2026-113188

A flaw was found in the Graphics Processing Unit GPU component of chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to view a specially crafted HTML page,...

CVE-2026-113206

A flaw was found in the Omnibox component of Google Chrome. A remote attacker could exploit this memory corruption vulnerability by tricking a user into visiting a specially crafted webpage. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted...

CVE-2026-113194

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's sandbox, an isolated execution environment. An attacker can exploit this issue by convincing a user to open a specially crafted HTML page, triggering memory corruption ...

CVE-2026-113204

A flaw was found in the Trusted Web Activities component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted HTML page, triggering a use-after-free condition where the application references memory that has already been...

CVE-2026-113186

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML webpage. This vulnerability is caused by a memory corruption error in the Developer Tools DevTools component. If...

CVE-2026-113185

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page...

CVE-2026-113176

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a crafted HTML page. Successful exploitation causes memory corruption in the browser address bar Omnibox, which may allow the attacker to execute arbitrary code within the restrict...

CVE-2026-113183

A flaw was found in the Federated Credential Management FedCM component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox by convincing a user to visit a crafted HTML page. Successful exploitation...

CVE-2026-113184

A flaw was found in the Scheduling component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code within the browser sandbox an...

CVE-2026-113182

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory corruption within the Passwords component...

CVE-2026-113180

A flaw was found in the ContentCapture component of Google Chrome on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a victim to open a specially crafted HTML page...

CVE-2026-113173

A flaw was found in Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox an isolated security environment by convincing a user to visit a crafted HTML page. The issue is caused by improper input validation in the user interface UI component...

CVE-2026-113172

A flaw was found in chromium-browser. A memory corruption vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation compromises the browser's isolated...

CVE-2026-113169

A flaw was found in the WebAppInstalls component of Google Chrome on Android. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. Successful exploitation allows the attacker to execute arbitrary code outside o...

CVE-2026-113175

A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the...

CVE-2026-113146

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment due to a memory corruption vulnerability in the Performance Application Programming Interfaces APIs. Exploitation is achieved by convincing a user to visit a...

CVE-2026-113171

A flaw was found in the Prompts component of Google Chrome. This vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser's restricted security environment sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory...

CVE-2026-113167

A flaw was found in the Chromium Network component. This vulnerability allows a remote attacker to potentially execute arbitrary code within the browser's restricted sandbox environment. By convincing a victim to load a specially crafted HTML page, an attacker can trigger a memory corruption...

CVE-2026-113118

A flaw was found in chromium-browser. A memory corruption vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within the browser's sandbox an isolated security environment. An attacker could exploit this vulnerability by convincing a user to view a special...

CVE-2026-109732

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Streams component...

CVE-2026-109726

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...

CVE-2026-109727

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

CVE-2026-109719

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics: CanvasWebGL component...

CVE-2026-109717

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Bindings WebIDL component...

CVE-2026-109707

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Networking component...

CVE-2026-109706

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Storage: IndexedDB component...

CVE-2026-109705

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component...

CVE-2026-19630

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System DNS protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious reque...

CVE-2026-98651

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the s390 architecture. This vulnerability occurs when memory management routines fail to properly validate an empty pointer reference during storage key operations. A local attacker could exploit this flaw to...

CVE-2026-98649

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem on s390 architectures. A local attacker can exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering a race condition during guest memory page destruction. This issue occurs...

CVE-2026-98648

A flaw was found in the Linux kernel's IBM s390 Ultravisor subsystem. When searching stored secrets on systems holding more than 85 secrets, the kernel incorrectly references the total secret count instead of the number of items stored in the current memory page. A local user can exploit this...

CVE-2026-83381

A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this vulnerability over a network by supplying crafted input to Application Programming Interfaces APIs within the Security component. Successful exploitation can result in unauthorized read and modification access to a...

CVE-2026-113066

A flaw was found in the font handling component of Chromium. A remote attacker can exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering memory corruption. Successful exploitation can lead to information disclosure, allowing the attacker to read memory...

CVE-2026-113030

A flaw was found in chromium-browser. Due to improper access control within the V8 JavaScript engine, a remote attacker can bypass the web origin policy by convincing a user to visit a crafted HTML page. The web origin policy is a foundational security boundary designed to isolate different...