Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113092
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113091
High · 8.8
CWE-416 Oct 20, 2026
Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113090
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113088
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113087
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113086
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113085
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113083
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113081
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113080
High · 8.8
CWE-416 Oct 20, 2026
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113079
High · 8.8
CWE-416 Oct 20, 2026
Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113076
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113075
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113074
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...
Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113073
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113071
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113069
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113068
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113067
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113063
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113065
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113064
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113062
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113061
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113060
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)