Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113290
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113287
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113282
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113278
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113275
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113274
High · 8.8
CWE-416 Oct 20, 2026
Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113271
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-113270
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113263
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113262
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113261
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113259
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113256
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113255
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113253
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113251
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113250
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113240
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113236
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113229
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113228
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113227
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113222
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113221
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113218
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)