Chromium CVE-2026-113280: Memory corruption
Chromium CVE-2026-113338: Use after free
Chromium CVE-2026-113058: Use after free
Chromium CVE-2026-113095: Out of bounds read
Chromium CVE-2026-113318: Memory corruption
Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Chromium CVE-2026-103623: Use after free
Chromium CVE-2026-93375: Incorrect reference resolution in Tracing
Chromium CVE-2026-110158: Use after free in Passwords
Chromium CVE-2026-91722: Use after free
Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Chromium CVE-2026-91737: Use after free
Chromium CVE-2026-91733: Improper state validation
Chromium CVE-2026-91734: Incorrect authorization
Chromium CVE-2026-91721: Use after free
Chromium CVE-2026-102326: Type confusion
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Chromium CVE-2026-87617: Use after free in DevTools
Chromium CVE-2026-87510: Improper input validation in FileAPI
Chromium CVE-2026-87533: Use after free in DevTools
Chromium CVE-2026-87505: Incorrect authorization in FileSystem
Chromium CVE-2026-87570: Incorrect authorization in SiteIsolation
Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions