Google Chrome vulnerabilities
3,552 known CVE vulnerabilities in Google Chrome, translated and rated.
- CVE-2026-113262High
Use after free in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113260High
Memory corruption in the Core component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113259High
Use after free in the Frames component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113258High
Memory corruption in the Chromoting component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113212Unknown
Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page.
- CVE-2026-113144Unknown
A memory corruption issue exists in the Speech component of Google Chrome prior to 156.0.8078.47. A remote attacker could read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113142Unknown
Memory corruption in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113140High
Use after free in the ANGLE component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113139Unknown
Memory corruption in the Autofill component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113137Unknown
Memory corruption in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113136High
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113135High
Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113133High
Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113132High
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113131High
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113130High
Use after free in Actor in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113129Unknown
Improper access control in the Extensions component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially leak sensitive information via a crafted HTML page.
- CVE-2026-113127High
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113125High
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113124High
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113123High
Use-after-free vulnerability in the GPU component of Google Chrome prior to 156.0.8078.47. A remote attacker could exploit a crafted HTML page to execute arbitrary code inside the sandbox.
- CVE-2026-113122Unknown
Memory corruption in the Loader component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113120High
Improper input validation vulnerability in the Media component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113115High
Use-after-free vulnerability in the Transactions Platform component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113114High
Use-after-free vulnerability in the SignIn component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113097High
Use-after-free vulnerability in the FileSystem component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113095High
Out-of-bounds read vulnerability in the Focus component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113094High
Memory corruption vulnerability in the API component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113093High
Memory corruption in the DisplayLocking component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113090High
Memory corruption in the Interstitials component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113074High
Use-after-free vulnerability in the Media component of Google Chrome on Windows prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low.
- CVE-2026-113071High
Use-after-free vulnerability in the Notifications component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium.
- CVE-2026-113070Unknown
An out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113069High
Memory corruption vulnerability in the Compositing component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium.
- CVE-2026-113068High
Use-after-free vulnerability in the Input component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium.
- CVE-2026-113067High
Use-after-free vulnerability in the Chromoting component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low.
- CVE-2026-113066Unknown
Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113065High
Use-after-free vulnerability in the Media component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113064High
Memory corruption in the OptimizationGuide component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113063High
Improper input validation in the Chromoting component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113062High
Improper input validation in the API component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113061High
Memory corruption in the Chromoting component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113055High
Type confusion in the FullScreen component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113053High
Use-after-free vulnerability in the Cookies component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113045Unknown
An out of bounds read in Offline in Google Chrome on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113043High
Use after free in the iOSWeb component in Google Chrome on iOS prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113039High
Use after free in the Bookmarks component in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113038Unknown
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page.
- CVE-2026-113037High
Use-after-free vulnerability in WebSockets in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
- CVE-2026-113036High
Memory corruption vulnerability in HTML in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS