Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-106358
Critical · 9.6
CWE-416 Oct 6, 2026
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-106357
High · 8.8
CWE-416 Oct 6, 2026
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106349
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106347
High · 8.8
CWE-416 Oct 6, 2026
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-106335
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106318
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106315
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106298
Critical · 9.6
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106291
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106283
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106281
Critical · 9.6
CWE-416 Oct 6, 2026
Google Chrome Use-After-Free in Tint Component (CVE-2026-106281)
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106278
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106269
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106268
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106257
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106248
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106235
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106234
Critical · 9.6
CWE-416 Oct 6, 2026
Google Chrome Use-After-Free in Network Component
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-106233
High · 8.3
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106227
Critical · 9.6
CWE-416 Oct 6, 2026
Google Chrome Core Use-After-Free (CWE-416)
Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106211
Critical · 9.6
CWE-416 Oct 6, 2026
Google Chrome TabStrip Use-After-Free (CVE-2026-106211)
Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106204
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-106200
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-106197
Critical · 9.6
CWE-416 Oct 6, 2026
Google Chrome Browser Use-After-Free Vulnerability
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-106193
High · 8.8
CWE-416 Oct 6, 2026
Use After Free in Google Chrome
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)