chromium-bin

Version: 155.0.8059.84

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

Install package

min add chromium-bin

Toolautomationchromechromium

Updated 3 days ago

OpenSSF Score

Last scored on 2026-08-24

What is "chromium-bin"?

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

How to use this package

Quick install

Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.

min add chromium-bin

Declare as a task dependency in minimal.toml

Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.

[tasks.dev]
packages = ["chromium-bin"]

Build-time vs runtime

Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.

min add --build chromium-bin
min add --runtime chromium-bin

Compare versions

Dependencies (35)

Dependencies
Name	Version	Kind
alsa-lib CVE:3	1.2.16.1	runtime
at-spi2-core	2.60.6	runtime
atk	2.38.0	runtime
base	—	build
bash	5.3	runtime
cairo	1.18.4	runtime
chromium-policies	—	runtime
cups CVE:5	2.4.20	runtime
dbus	1.16.2	runtime
eudev	3.2.14	runtime
expat	2.9.0	runtime
fontconfig	2.18.3	runtime
freetype	2.15.0	runtime
fribidi	1.0.16	runtime
gcc	15.2.0	runtime
glib	2.88.4	runtime
glibc	2.44	runtime
harfbuzz CVE:1	14.5.0	runtime
libdrm	2.4.134	runtime
liberation-fonts	2.1.5	runtime
libx11	1.8.14	runtime
libxcb	1.17.0	runtime
libxcomposite	0.4.7	runtime
libxdamage	1.1.7	runtime
libxext	1.3.7	runtime
libxfixes	6.0.2	runtime
libxkbcommon	1.13.2	runtime
libxrandr	1.5.5	runtime
libxrender	0.9.13	runtime
libxshmfence	1.3.3	runtime
libxtst	1.2.6	runtime
mesa	26.2.0	runtime
nspr	4.40	runtime
nss	3.132	runtime
pango	1.58.2	runtime

Dependency changes

No dependants

No other packages in the registry depend on this one.

chromium-bin v155.0.8059.844d147db
Diff
Lines:+239 / -90Deps:35(+1 / -1)CVE:322
Released: 3 days ago
chromium-bin v153.0.8010.1218b2cfb
Diff
Lines:+6 / -6Deps:35
Released: last month
chromium-bin v152.0.7977.8094a134
Diff
Lines:+14 / -6Deps:35
Released: 3 months ago
chromium-bin v151.0.7922.346f5a478
Diff
Lines:+4 / -4Deps:35
Released: 3 months ago
chromium-bin v151.0.7922.1923a2fb4
Diff
Lines:+8 / -6Deps:35(+1)
Released: 3 months ago
chromium-bin v147.0.7727.1518aa69e
Diff
Lines:+320 / -22Deps:34
Released: 3 months ago
1. 18aa69e
  Diff
  Lines:+37 / -22Deps:34
  Released: 3 months ago
2. 1975757
  Diff
  Lines:+1Deps:34
  Released: 5 months ago
3. ebcee4f
  Diff
  Lines:+282Deps:34(+34)
  Released: 6 months ago
chromium-bin v150.0.7871.465ab6fd7
Diff
Lines:+2 / -2Deps:34(+34)
Released: 4 months ago

Include transitive

Showing 335 advisories, 13 of which are transitive via chromium-bin's dependencies

Security advisories for this package
	Status	IDs	Package	Version	Severity	Published
Critical (28)
	Under investigation	CVE-2026-113342	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113336	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113328	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113300	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113283	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113270	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113263	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113261	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113252	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113235	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113222	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113211	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113189	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113186	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113171	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113169	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113138	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113126	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113116	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113089	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113084	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113072	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113056	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113023	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113020	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113014	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-113007	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
	Under investigation	CVE-2026-112992	chromium-bin	152.0.7977.8 – 155.0.8059.84	Critical: 9.6	4 days ago
Summary Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
High (254)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-113344	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113343	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113339	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113338	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113337	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113335	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113334	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113332	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113331	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113330	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113327	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113324	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113323	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113321	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113320	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113319	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113318	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113317	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113316	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113315	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113314	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113313	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113312	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113311	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113308	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113307	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113306	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113305	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113303	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113302	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113301	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113299	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113298	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113294	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113293	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113292	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113291	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113290	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113289	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113288	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113287	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113286	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113285	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113284	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113282	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113281	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113280	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113279	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113278	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113276	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113275	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113274	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113273	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113272	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113271	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113269	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113268	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113267	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113266	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113265	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113264	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113262	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113260	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113259	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113258	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113257	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113256	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113255	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113254	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113253	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113251	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113250	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113249	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113248	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113247	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113245	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113244	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113243	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113242	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113241	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113240	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113239	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113238	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113236	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113234	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113233	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113232	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113231	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113230	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113229	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113228	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113227	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113226	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113221	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113219	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113218	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113216	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113215	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113214	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113213	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113208	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113206	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113205	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113204	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113203	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113202	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113200	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113198	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113197	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113195	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113194	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113192	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113191	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113190	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113188	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113187	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113185	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113184	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113183	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113182	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113181	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113179	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113177	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113176	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113175	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113174	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113173	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113172	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113168	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113167	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113166	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113165	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113162	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113161	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113160	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113158	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113155	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113154	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113153	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113152	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113150	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113149	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113148	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113147	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113146	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113143	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113141	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113140	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113137	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113136	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113135	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113133	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113132	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113131	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113130	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113128	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113127	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113125	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113124	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113123	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113120	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113118	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113115	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113114	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113113	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113112	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113111	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113110	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113109	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113108	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113106	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113105	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113104	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113103	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113101	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113100	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113097	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113095	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113094	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113093	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113090	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113087	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113086	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113085	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113081	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113075	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113074	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113073	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113071	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113069	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113068	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113067	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113065	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113064	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113063	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113062	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113061	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113060	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113059	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113058	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113057	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113055	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113053	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113052	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113049	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113048	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113046	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113044	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113043	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113042	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113041	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113040	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113039	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113037	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113036	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113034	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113033	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113032	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113031	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113030	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113029	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113028	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113027	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113025	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113024	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113022	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113021	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113019	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113018	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113017	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113016	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113015	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113013	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113012	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113011	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113009	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113008	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113006	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113005	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113004	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113003	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113001	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-113000	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112999	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112998	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112997	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112996	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112995	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112994	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Under investigation	CVE-2026-112993	chromium-bin	152.0.7977.8 – 155.0.8059.84	High: 8.8	4 days ago
Summary Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
	Affected: 1.3.2	CVE-2026-85091	zlib	1.3.2	High	2 months ago
Summary zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate Via gcc zlib Affected ranges 1.3.2 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/85xxx/CVE-2026-85091.json, https://nvd.nist.gov/vuln/detail/CVE-2026-85091, https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate Evidence: https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 PACKAGE: https://github.com/madler/zlib ARTICLE: https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393
	Under investigation	GHSA-g84c-rxfj-3j2c CVE-2026-76844	zlib	1.3 – 1.3.2	High	2 months ago
Summary zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write Via gcc zlib Affected ranges 1.3 – 1.3.2 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/76xxx/CVE-2026-76844.json, https://nvd.nist.gov/vuln/detail/CVE-2026-76844, https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate Fix: https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148 Evidence: https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490 PACKAGE: https://github.com/madler/zlib ARTICLE: https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393
	Under investigation	GHSA-6fg3-hvw7-2fwq GHSA-8rgw-6xp9-2fg3 CVE-2025-9611	chromium-bin	152.0.7977.8 – 155.0.8059.84	High	10 months ago
Summary Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation Affected ranges 152.0.7977.8 – 155.0.8059.84 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9611.json, https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-8rgw-6xp9-2fg3, https://nvd.nist.gov/vuln/detail/CVE-2025-9611, https://www.vulncheck.com/advisories/microsoft-playwright-mcp-server-dns-rebinding-via-missing-origin-header-validation Fix: https://github.com/microsoft/playwright/commit/1313fbd PACKAGE: https://github.com/microsoft/playwright
	Affected: 2.15.4	GHSA-pf6m-fxpq-fg8v CVE-2017-5029	libxml2	2.15.1 – 2.15.4	High: 8.8	10 years ago
Summary No summary published for this advisory. Via libxkbcommon libxml2 Affected ranges 2.15.1 – 2.15.4 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H References Advisory: http://rhn.redhat.com/errata/RHSA-2017-0499.html, http://www.debian.org/security/2017/dsa-3810 Web: https://crbug.com/676623, https://git.gnome.org/browse/libxslt/commit/?id=08ab2774b870de1c7b5a48693df75e8154addae5, http://www.securityfocus.com/bid/96767, http://www.securitytracker.com/id/1038157 ARTICLE: https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html
Medium (47)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	CVE-2026-113341	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113340	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113333	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113329	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113326	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113325	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113322	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113310	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113309	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113304	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113297	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113296	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113295	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113277	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113246	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113237	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113225	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113223	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113201	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113199	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113193	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113178	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113159	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113151	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113144	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113142	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113139	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113129	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113122	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113102	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113098	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113070	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113066	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113054	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113051	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113050	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113047	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113045	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113038	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113035	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113026	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Under investigation	CVE-2026-113010	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
	Under investigation	CVE-2026-113002	chromium-bin	152.0.7977.8 – 155.0.8059.84	Medium: 6.5	4 days ago
Summary Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affected ranges 152.0.7977.8 – 155.0.8059.84 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
	Affected: 1.2.16.1	CVE-2026-96675	alsa-lib	1.2.15.3 – 1.2.16.1	Medium	last month
Summary alsa-lib through 1.2.16.1 Denial of Service via pcm_multi Via alsa-lib Affected ranges 1.2.15.3 – 1.2.16.1 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96675.json, https://nvd.nist.gov/vuln/detail/CVE-2026-96675, https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-denial-of-service-via-pcm-multi Fix: https://github.com/alsa-project/alsa-lib/pull/527 PACKAGE: https://github.com/alsa-project/alsa-lib ARTICLE: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/pcm/pcm_multi.c#L1122-L1131
	Affected: 1.2.16.1	CVE-2026-96674	alsa-lib	1.2.15.3 – 1.2.16.1	Medium	last month
Summary alsa-lib through 1.2.16.1 Integer Overflow via Topology File Via alsa-lib Affected ranges 1.2.15.3 – 1.2.16.1 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96674.json, https://nvd.nist.gov/vuln/detail/CVE-2026-96674, https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file Fix: https://github.com/alsa-project/alsa-lib/pull/527 PACKAGE: https://github.com/alsa-project/alsa-lib ARTICLE: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326, https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430, https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521
	Affected: 1.2.16.1	CVE-2026-90781	alsa-lib	1.2.15.3 – 1.2.16.1	Medium	last month
Summary alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse() Via alsa-lib Affected ranges 1.2.15.3 – 1.2.16.1 References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90781.json, https://nvd.nist.gov/vuln/detail/CVE-2026-90781, https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse Fix: https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020 PACKAGE: https://github.com/alsa-project/alsa-lib ARTICLE: https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241, https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/
	Under investigation	GHSA-c4v6-gxrq-6g2x CVE-2026-40930	libpng	1.6.53 – 1.6.59	Medium: 5.4	5 months ago
Summary LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body Via cairo libpng Affected ranges 1.6.53 – 1.6.59 CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L References Advisory: https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40930.json, https://github.com/pnggroup/libpng/security/advisories/GHSA-c4v6-gxrq-6g2x, https://nvd.nist.gov/vuln/detail/CVE-2026-40930 Fix: https://github.com/pnggroup/libpng/commit/faf06924688b62d7c1654b5ceddedbde66ffadb4 Web: http://www.openwall.com/lists/oss-security/2026/05/15/21
Low (5)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	GHSA-p6cf-j6h3-rcf7	cups	2.4.18 – 2.4.20	Low: 3.3	4 days ago
Summary CUPS cupsd vulnerable to denial of service through improper IPP attribute validation Via cups Affected ranges 2.4.18 – 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-p6cf-j6h3-rcf7
	Under investigation	GHSA-f33q-qc2j-585m	cups	2.4.18 – 2.4.20	Low: 3.3	4 days ago
Summary cupsd local certificates come from random(), which cupsd re-seeds with time(NULL) when a job's saved authentication data is removed (2.4.x and master without arc4random) Via cups Affected ranges 2.4.18 – 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-f33q-qc2j-585m
	Under investigation	GHSA-8q78-mrwh-rm85	cups	2.4.18 – 2.4.20	Low: 2.5	10 days ago
Summary CUPS cupsd local authentication leaks the root certificate token, granting cupsd administrator privileges Via cups Affected ranges 2.4.18 – 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-8q78-mrwh-rm85
	Affected: 2.4.20	GHSA-5cpc-rwrw-jp83	cups	2.4.20	Low: 2.0	10 days ago
Summary CUPS: SNMP marker-levels formatting overflows a stack buffer in backendSNMPSupplies() of the network backends (ANT-2026-JRXF4QFG) Via cups Affected ranges 2.4.20 CVSS vector CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-5cpc-rwrw-jp83
	Affected: 2.4.20	GHSA-56v5-mj3w-4f59	cups	2.4.20	Low: 3.3	10 days ago
Summary CUPS: Print-Job with many INT_MIN resolution values overflows the get_options() heap buffer in cupsd (ANT-2026-AS9CM0E9) Via cups Affected ranges 2.4.20 CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L References Web: https://github.com/OpenPrinting/cups/security/advisories/GHSA-56v5-mj3w-4f59
Unknown (1)
	Status	IDs	Package	Version	Severity	Published
	Under investigation	GHSA-r62p-jr5f-3mjm	harfbuzz	14.3.1 – 14.5.0	Unknown	2 days ago
Summary Out-of-bounds read in subsetter feature-substitution parameter handling Via harfbuzz Affected ranges 14.3.1 – 14.5.0 References Web: https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-r62p-jr5f-3mjm

Build provenance

For the signed record of what the build used, see the Provenance tab.

100 components

Software Bill of Materials — every package this build depends on
Packages	Version	Repository	License
chromium-binROOT	155.0.8059.84	github.com/microsoft/playwright	BSD-3-Clause
acl	2.4.0	https://storage.googleapis.com/minimal-staging-archives/acl-2.4.0.tar.xzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
alsa-lib	1.2.16.1	github.com/alsa-project/alsa-lib	LGPL-2.1-only
at-spi2-core	2.60.6	https://storage.googleapis.com/minimal-staging-archives/at-spi2-core-2.60.6.tar.xzMIRROR	LGPL-2.1-only
atk	2.38.0	https://storage.googleapis.com/minimal-staging-archives/atk-2.38.0.tar.xzMIRROR	LGPL-2.0-only
attr	2.6.0	https://storage.googleapis.com/minimal-staging-archives/attr-2.6.0.tar.gzMIRROR	(GPL-2.0-only AND LGPL-2.1-only)
autoconf	2.73	www.gnu.org/software/autoconf	GPL-3.0-or-later WITH Autoconf-exception-3.0
automake	1.18.1	www.gnu.org/software/automake	GPL-2.0-only
bash	5.3	www.gnu.org/software/bash	GPL-3.0-only
bash-bootstrap	5.3	www.gnu.org/software/bash	GPL-3.0-only
binutils	2.47	www.gnu.org/software/binutils	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.0-only)
bison	3.8.2	www.gnu.org/software/bison	GPL-3.0-only
bzip2	1.0.8	github.com/libarchive/bzip2	bzip2-1.0.6
cairo	1.18.4	https://storage.googleapis.com/minimal-staging-archives/cairo-1.18.4.tar.xzMIRROR	LGPL-2.1-only OR MPL-1.1
chromium-policies		—	Apache-2.0
cmake	4.4.4	github.com/Kitware/CMake	BSD-3-Clause
coreutils	9.12	www.gnu.org/software/coreutils	GPL-3.0-only
cups	2.4.20	github.com/OpenPrinting/cups	Apache-2.0
curl	8.23.0	github.com/curl/curl	curl
dbus	1.16.2	https://storage.googleapis.com/minimal-staging-archives/dbus-1.16.2.tar.xzMIRROR	(AFL-2.1 OR GPL-2.0-or-later) AND GPL-2.0-or-later
diffutils	3.12	www.gnu.org/software/diffutils	GPL-3.0-only
eudev	3.2.14	github.com/eudev-project/eudev	LGPL-2.1-or-later
expat	2.9.0	github.com/libexpat/libexpat	MIT
file	5.48	https://storage.googleapis.com/minimal-staging-archives/file-5.48.tar.gzMIRROR	BSD-2-Clause-Darwin
findutils	4.11.0	www.gnu.org/software/findutils	GPL-3.0-only
flex	2.6.4	github.com/westes/flex	BSD-3-Clause-flex
fontconfig	2.18.3	https://storage.googleapis.com/minimal-staging-archives/fontconfig-2.18.3.tar.xzMIRROR	HPND-sell-variant
freetype	2.15.0	https://storage.googleapis.com/minimal-staging-archives/freetype-2.15.0.tar.xzMIRROR	FTL OR GPL-2.0-or-later
fribidi	1.0.16	github.com/fribidi/fribidi	LGPL-2.1-or-later
gawk	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gawk-bootstrap	5.4.1	www.gnu.org/software/gawk	GPL-3.0-only
gcc	15.2.0	www.gnu.org/software/gcc	(GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
gdbm	1.26	www.gnu.org/software/gdbm	GPL-3.0-only
glib	2.88.4	github.com/GNOME/glib	LGPL-2.1-or-later
glibc	2.44	www.gnu.org/software/glibc	(GPL-2.0-only AND LGPL-2.1-only)
gmp	6.3.0	www.gnu.org/software/gmp	LGPL-3.0-or-later OR GPL-2.0-or-later
gperf	3.3	www.gnu.org/software/gperf	GPL-3.0-only
grep	3.12	www.gnu.org/software/grep	GPL-3.0-only
gzip	1.15	www.gnu.org/software/gzip	GPL-3.0-only
harfbuzz	14.5.0	github.com/harfbuzz/harfbuzz	MIT-Modern-Variant
icu	78.3	github.com/unicode-org/icu	Unicode-3.0
jq	1.8.2	github.com/jqlang/jq	MIT
libcap	2.78	https://storage.googleapis.com/minimal-staging-archives/libcap-2.78.tar.xzMIRROR	BSD-3-Clause OR GPL-2.0-only
libdrm	2.4.134	https://storage.googleapis.com/minimal-staging-archives/libdrm-2.4.134.tar.xzMIRROR	MIT
liberation-fonts	2.1.5	github.com/liberationfonts/liberation-fonts	OFL-1.1
libffi	3.8.0	github.com/libffi/libffi	MIT
libidn2	2.3.8	www.gnu.org/software/libidn2	GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)
libpng	1.6.59	github.com/pnggroup/libpng	libpng-2.0
libpsl	0.23.3	github.com/rockdaboot/libpsl	MIT
libtool	2.6.2	www.gnu.org/software/libtool	GPL-2.0-only
libunistring	1.4.2	www.gnu.org/software/libunistring	GPL-3.0-only
libuv	1.53.0	github.com/libuv/libuv	MIT
libx11	1.8.14	https://storage.googleapis.com/minimal-staging-archives/libX11-1.8.14.tar.xzMIRROR	MIT
libxau	1.0.12	https://storage.googleapis.com/minimal-staging-archives/libXau-1.0.12.tar.xzMIRROR	MIT-open-group
libxcb	1.17.0	https://storage.googleapis.com/minimal-staging-archives/libxcb-1.17.0.tar.xzMIRROR	X11-swapped
libxcomposite	0.4.7	https://storage.googleapis.com/minimal-staging-archives/libXcomposite-0.4.7.tar.xzMIRROR	MIT
libxdamage	1.1.7	https://storage.googleapis.com/minimal-staging-archives/libXdamage-1.1.7.tar.xzMIRROR	HPND-sell-variant
libxdmcp	1.1.5	https://storage.googleapis.com/minimal-staging-archives/libXdmcp-1.1.5.tar.xzMIRROR	MIT-open-group
libxext	1.3.7	https://storage.googleapis.com/minimal-staging-archives/libXext-1.3.7.tar.xzMIRROR	MIT
libxfixes	6.0.2	https://storage.googleapis.com/minimal-staging-archives/libXfixes-6.0.2.tar.xzMIRROR	MIT
libxi	1.8.4	https://storage.googleapis.com/minimal-staging-archives/libXi-1.8.4.tar.xzMIRROR	MIT
libxkbcommon	1.13.2	github.com/xkbcommon/libxkbcommon	MIT
libxml2	2.15.4	github.com/GNOME/libxml2	MIT
libxrandr	1.5.5	https://storage.googleapis.com/minimal-staging-archives/libXrandr-1.5.5.tar.xzMIRROR	MIT
libxrender	0.9.13	https://storage.googleapis.com/minimal-staging-archives/libXrender-0.9.13.tar.xzMIRROR	MIT
libxshmfence	1.3.3	https://storage.googleapis.com/minimal-staging-archives/libxshmfence-1.3.3.tar.xzMIRROR	HPND-sell-variant
libxtst	1.2.6	https://storage.googleapis.com/minimal-staging-archives/libXtst-1.2.6.tar.xzMIRROR	MIT
linux_headers	6.12.43	github.com/torvalds/linux	GPL-2.0-only WITH Linux-syscall-note
lz4	1.10.0	github.com/lz4/lz4	BSD-2-Clause AND GPL-2.0-or-later
m4	1.4.21	www.gnu.org/software/m4	GPL-3.0-only
make	4.4.1	www.gnu.org/software/make	GPL-3.0-only
mesa	26.2.0	https://storage.googleapis.com/minimal-staging-archives/mesa-26.2.0.tar.xzMIRROR	MIT AND SGI-B-2.0
meson	1.12.0	github.com/mesonbuild/meson	Apache-2.0
mpc	1.4.1	www.gnu.org/software/mpc	LGPL-3.0-or-later
mpfr	4.2.2	www.gnu.org/software/mpfr	GPL-3.0-only
ncurses	6.6	www.gnu.org/software/ncurses	X11-distribute-modifications-variant
ninja	1.13.2	github.com/ninja-build/ninja	Apache-2.0
nspr	4.40	https://storage.googleapis.com/minimal-staging-archives/nspr-4.40.tar.gzMIRROR	MPL-2.0
nss	3.132	https://storage.googleapis.com/minimal-staging-archives/nss-3.132.tar.gzMIRROR	MPL-2.0
openssl	3.6.5	github.com/openssl/openssl	Apache-2.0
pango	1.58.2	https://storage.googleapis.com/minimal-staging-archives/pango-1.58.2.tar.xzMIRROR	LGPL-2.0-only
patch	2.8	www.gnu.org/software/patch	GPL-3.0-only
pcre2	10.49	github.com/PCRE2Project/pcre2	BSD-3-Clause WITH PCRE2-exception
perl	5.44.0	github.com/Perl/perl5	Artistic-1.0-Perl OR GPL-1.0-or-later
pixman	0.46.4	https://storage.googleapis.com/minimal-staging-archives/pixman-0.46.4.tar.gzMIRROR	MIT
pkgconf	3.0.5	github.com/pkgconf/pkgconf	ISC
python	3.14.9	github.com/python/cpython	Python-2.0.1
readline	8.3	www.gnu.org/software/readline	GPL-3.0-only
sed	4.10	www.gnu.org/software/sed	GPL-3.0-only
setuptools	84.2.1	github.com/pypa/setuptools	MIT
sqlite	3.54.0	github.com/sqlite/sqlite	blessing
tar	1.35	www.gnu.org/software/tar	GPL-3.0-only
tzdata	2026e	github.com/eggert/tz	LicenseRef-Public-Domain
util-linux	2.42.4	github.com/util-linux/util-linux	GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause
xcb-proto	1.17.0	https://storage.googleapis.com/minimal-staging-archives/xcb-proto-1.17.0.tar.xzMIRROR	X11-swapped
xorgproto	2026.1	https://storage.googleapis.com/minimal-staging-archives/xorgproto-2026.1.tar.xzMIRROR	BSD-2-Clause AND HPND AND HPND-sell-variant AND ICU AND MIT AND MIT-open-group AND SGI-B-2.0 AND SMLNJ AND X11 AND X11-distribute-modifications-variant
xtrans	1.6.0	https://storage.googleapis.com/minimal-staging-archives/xtrans-1.6.0.tar.xzMIRROR	X11
xz	5.8.4	github.com/tukaani-project/xz	(0BSD AND GPL-2.0-only AND GPL-3.0-only AND LGPL-2.1-only)
zlib	1.3.2	github.com/madler/zlib	Zlib
zstd	1.5.7	github.com/facebook/zstd	BSD-3-Clause OR GPL-2.0-only

chromium-bin

Install package

OpenSSF Score

What is "chromium-bin"?

How to use this package

Quick install

Declare as a task dependency in minimal.toml

Build-time vs runtime

Dependencies (35)

Dependency changes

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary

Affected ranges

CVSS vector

Summary