Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113292
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47...
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113291
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113290
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113289
High · 8.8
CWE-20 Oct 20, 2026
Improper Input Validation in Google Chrome
Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113288
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113287
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113286
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote...
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113285
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113284
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113283
Critical · 9.6
CWE-119 Oct 20, 2026
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47...
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113282
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...
Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113281
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113280
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-113279
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-113278
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113277
Medium · 6.5
CWE-125 Oct 20, 2026
Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113276
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113275
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113274
High · 8.8
CWE-416 Oct 20, 2026
Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113273
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113272
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113271
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-113270
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113269
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113268
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)