Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113179
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113177
High · 8.8
CWE-416 Oct 20, 2026
Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113176
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113175
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113174
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113173
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113172
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113170
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113168
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113167
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113166
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113165
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...
Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113164
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113163
High · 8.8
CWE-416 Oct 20, 2026
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113162
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113161
High · 8.8
CWE-416 Oct 20, 2026
Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113160
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113158
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113156
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113155
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113154
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113153
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113152
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113150
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113149
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)