Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113244
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113235
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113231
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113230
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113214
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113195
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113175
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113173
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113162
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113147
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113120
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113117
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113099
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113084
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113089
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a...
Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113086
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113078
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113063
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113062
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113060
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113046
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113040
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113023
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113020
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113016
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)