Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-113268
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113267
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113266
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113265
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113264
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...
Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113263
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113262
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113261
Critical · 9.6
CWE-416 Oct 20, 2026
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113260
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113259
High · 8.8
CWE-416 Oct 20, 2026
Use After Free in Google Chrome
Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113258
High · 8.8
CWE-119 Oct 20, 2026
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Google Chrome
Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113257
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113256
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113255
High · 8.8
CWE-416 Oct 20, 2026
Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...
Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113254
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113253
High · 8.8
CWE-416 Oct 20, 2026
Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113252
Critical · 9.6
CWE-20 Oct 20, 2026
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed...
Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113251
High · 8.8
CWE-416 Oct 20, 2026
Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113250
High · 8.8
CWE-416 Oct 20, 2026
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113249
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...
Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113248
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113247
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113246
Medium · 6.5
CWE-119 Oct 20, 2026
Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...
Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113245
High · 8.8
CWE-119 Oct 20, 2026
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113244
High · 8.8
CWE-20 Oct 20, 2026
Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...
Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)