Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113149
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113148
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113146
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113145
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113144
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113143
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113142
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113139
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113138
Critical · 9.6
CWE-119 Oct 20, 2026
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113137
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113136
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113135
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113134
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113133
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113132
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113131
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113127
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113126
Critical · 9.6
CWE-119 Oct 20, 2026
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113125
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113124
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113122
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113121
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113118
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113110
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113109
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)