Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113314
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113313
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113312
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113311
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113310
Medium · 6.5
CWE-125 Oct 20, 2026
Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113309
Medium · 6.5
CWE-125 Oct 20, 2026
Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113308
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113307
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113306
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113305
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113304
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113303
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-113302
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113301
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113300
Critical · 9.6
CWE-787 Oct 20, 2026
Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113299
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113298
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113297
Medium · 6.5
CWE-284 Oct 20, 2026
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113296
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113295
Medium · 6.5
CWE-125 Oct 20, 2026
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a...
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113294
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113293
High · 8.8
CWE-416 Oct 20, 2026
Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...
Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113292
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47...
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113291
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113290
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)