CH
Browser
Chrome
On CISA KEVExploited in the wildRansomware-linked
7,406
CVEs
77
On KEV
10.0
Max CVSS
850
New 30D
Severity mix
Critical 438High 56Medium 6Low 0
Watch
Add Chrome to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113169 | 9.6 | Oct 20 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113116 | 9.6 | Oct 20 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113186 | 9.6 | Oct 20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113023 | 9.6 | Oct 20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113300 | 9.6 | Oct 20 | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113056 | 9.6 | Oct 20 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113089 | 9.6 | Oct 20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113235 | 9.6 | Oct 20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113342 | 9.6 | Oct 20 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113138 | 9.6 | Oct 20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113270 | 9.6 | Oct 20 | Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113007 | 9.6 | Oct 20 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113126 | 9.6 | Oct 20 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113084 | 9.6 | Oct 20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113328 | 9.6 | Oct 20 | Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113171 | 9.6 | Oct 20 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113261 | 9.6 | Oct 20 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-112992 | 9.6 | Oct 20 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113189 | 9.6 | Oct 20 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113014 | 9.6 | Oct 20 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113283 | 9.6 | Oct 20 | Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113078 | 9.6 | Oct 20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113211 | 9.6 | Oct 20 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113263 | 9.6 | Oct 20 | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113336 | 9.6 | Oct 20 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113222 | 9.6 | Oct 20 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113020 | 9.6 | Oct 20 | Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113252 | 9.6 | Oct 20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-113072 | 9.6 | Oct 20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 156.0.8078.47 before 156.0.8078.47 |
| CVE-2026-110916 | 9.6 | Oct 15 | Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 155.0.8059.84 before 155.0.8059.84 |
| CVE-2026-110142 | 9.6 | Oct 13 | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110159 | 9.6 | Oct 13 | Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110165 | 9.6 | Oct 13 | Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110161 | 9.6 | Oct 13 | Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110136 | 9.6 | Oct 13 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110149 | 9.6 | Oct 13 | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-110152 | 9.6 | Oct 13 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 155.0.8059.79 before 155.0.8059.79 |
| CVE-2026-106234 | 9.6 | Oct 6 | Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106237 | 9.6 | Oct 6 | Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106417 | 9.6 | Oct 6 | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106372 | 9.6 | Oct 6 | Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106401 | 9.6 | Oct 6 | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106375 | 9.6 | Oct 6 | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106414 | 9.6 | Oct 6 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106241 | 9.6 | Oct 6 | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106329 | 9.6 | Oct 6 | Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106211 | 9.6 | Oct 6 | Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106227 | 9.6 | Oct 6 | Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106298 | 9.6 | Oct 6 | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Affected: 155.0.8059.39 before 155.0.8059.39 |
| CVE-2026-106281 | 9.6 | Oct 6 | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page Affected: 155.0.8059.39 before 155.0.8059.39 |
The 500 most important CVEs for this product (exploited first, then by severity)
