Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113148
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113147
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113146
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113145
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113143
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113141
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote...
Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113140
High · 8.8
CWE-416 Oct 20, 2026
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113137
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113136
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113135
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113134
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113133
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113132
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113131
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113130
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113128
High · 8.8
CWE-862 Oct 20, 2026
Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote...
Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113127
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113125
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113124
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113123
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113121
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113120
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113119
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...
Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113118
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113117
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a...
Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)