Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)
Chromium CVE-2026-93385: Information leak in Paint
Chromium CVE-2026-93383: Information leak in Permissions
Chromium CVE-2026-93387: Improper state validation in Skia
Chromium CVE-2026-93375: Incorrect reference resolution in Tracing
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Chromium CVE-2026-91722: Use after free
Chromium CVE-2026-91725: Observable discrepancy
Chromium CVE-2026-91738: Improper input validation
Chromium CVE-2026-91714: Observable discrepancy
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Chromium CVE-2026-91729: Use after free
Chromium CVE-2026-91737: Use after free
Chromium CVE-2026-91718: Use after free
Chromium CVE-2026-91716: Use after free
Chromium CVE-2026-91717: Missing authorization
Chromium CVE-2026-91733: Improper state validation
Chromium CVE-2026-91744: Race condition
Chromium CVE-2026-91734: Incorrect authorization
Chromium CVE-2026-91721: Use after free
Chromium CVE-2026-91749: Use after free
Chromium CVE-2026-110146: Information leak