Where
-Infinity
0
Severity
7
Input Validation

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

First published (updated )
Severity
9.6
Buffer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-113336: Memory corruption

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113095: Out of bounds read

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113280: Memory corruption

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113338: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113058: Use after free

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-113318: Memory corruption

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-118314: Incorrect reference resolution

1 / 4
Source: Microsoft
First published (updated )
Severity
9.6
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2026-118316 Improper input validation in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118346 Use after free in Compositing

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118335 Improper input validation in Metrics

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118304 Improper input validation in SVG

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Input Validation, Race Condition
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118336 Improper input validation in Headless

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118358 Memory corruption in WebAudio

1 / 4
Source: Microsoft
First published (updated )
Severity
1

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. (Chromium security severity: Low)

First published (updated )
Severity
7

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

First published (updated )
Severity
9.6
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2026-118355 Improper input validation in Command

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-118354 Improper input validation in Skia

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

1 / 3
Source: MITRE
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-103623: Use after free

1 / 3
Source: Microsoft
First published (updated )
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Chromium CVE-2026-102329: Cross-site scripting

1 / 3
Source: Microsoft
First published (updated )
Severity
6.5
EPSS
0.31%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Chromium CVE-2026-93385: Information leak in Paint

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
EPSS
0.25%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-93383: Information leak in Permissions

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
EPSS
0.25%
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-93387: Improper state validation in Skia

1 / 3
Source: Microsoft
First published (updated )
Severity
8.1
EPSS
0.10%
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium CVE-2026-93375: Incorrect reference resolution in Tracing

1 / 3
Source: Microsoft
First published (updated )
Severity
8.3
Use After Free
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium CVE-2026-110158: Use after free in Passwords

1 / 3
Source: Microsoft
First published (updated )
Severity
7

Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

First published (updated )
Severity
4
Use After Free

Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

First published (updated )
Severity
7
Input Validation

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

First published (updated )
Severity
8.8
EPSS
0.24%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-91722: Use after free

1 / 3
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203