Skip to content
Heist/ feed

Security feed

Unrated

CVE-2026-113022

Type: advisorySource: Official CVE List

Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113022
Unrated

CVE-2026-112995

Type: advisorySource: Official CVE List

Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-112995
Unrated

CVE-2026-112994

Type: advisorySource: Official CVE List

Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Products: ChromeCVEs: CVE-2026-112994
Unrated

CVE-2026-113342

Type: advisorySource: Official CVE List

Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113342
Unrated

CVE-2026-113336

Type: advisorySource: Official CVE List

Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Products: ChromeCVEs: CVE-2026-113336
Unrated

CVE-2026-113331

Type: advisorySource: Official CVE List

Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Products: ChromeCVEs: CVE-2026-113331
Unrated

CVE-2026-113328

Type: advisorySource: Official CVE List

Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Me…

Products: ChromeCVEs: CVE-2026-113328
Unrated

CVE-2026-113283

Type: advisorySource: Official CVE List

Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu…

Products: ChromeCVEs: CVE-2026-113283
Unrated

CVE-2026-113300

Type: advisorySource: Official CVE List

Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Products: ChromeCVEs: CVE-2026-113300
Unrated

CVE-2026-113270

Type: advisorySource: Official CVE List

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113270
Unrated

CVE-2026-113263

Type: advisorySource: Official CVE List

Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Me…

Products: ChromeCVEs: CVE-2026-113263
Unrated

CVE-2026-113252

Type: advisorySource: Official CVE List

Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security…

Products: ChromeCVEs: CVE-2026-113252
Unrated

CVE-2026-113261

Type: advisorySource: Official CVE List

Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113261
Unrated

CVE-2026-113235

Type: advisorySource: Official CVE List

Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:…

Products: ChromeCVEs: CVE-2026-113235
Unrated

CVE-2026-113189

Type: advisorySource: Official CVE List

Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113189
Unrated

CVE-2026-113222

Type: advisorySource: Official CVE List

Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Products: ChromeCVEs: CVE-2026-113222
Unrated

CVE-2026-113186

Type: advisorySource: Official CVE List

Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Products: ChromeCVEs: CVE-2026-113186
Unrated

CVE-2026-113211

Type: advisorySource: Official CVE List

Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Products: ChromeCVEs: CVE-2026-113211
Unrated

CVE-2026-113171

Type: advisorySource: Official CVE List

Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severi…

Products: ChromeCVEs: CVE-2026-113171
Unrated

CVE-2026-113169

Type: advisorySource: Official CVE List

Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Products: ChromeCVEs: CVE-2026-113169