Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113241
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113240
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113239
High · 8.8
CWE-118 Oct 20, 2026
Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47…
Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113238
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113236
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113234
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113233
High · 8.8
CWE-125 Oct 20, 2026
Out-of-bounds Read in Google Chrome
Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113232
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113231
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113230
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113229
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113228
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113227
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113226
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113221
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113220
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113219
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113218
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113217
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113216
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113215
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113214
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113213
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113210
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113208
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)