# cve.now: Google Chrome

The newest entries affecting Google Chrome (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119272](https://cve.now/CVE-2026-119272.md): Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a c (medium (no CVSS), Google Chrome)
- [CVE-2026-119271](https://cve.now/CVE-2026-119271.md): Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (high (no CVSS), Google Chrome)
- [CVE-2026-119270](https://cve.now/CVE-2026-119270.md): Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary (high (no CVSS), Google Chrome)
- [CVE-2026-119269](https://cve.now/CVE-2026-119269.md): Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (high (no CVSS), Google Chrome)
- [CVE-2026-119268](https://cve.now/CVE-2026-119268.md): Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside t (high (no CVSS), Google Chrome)
- [CVE-2026-119267](https://cve.now/CVE-2026-119267.md): Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the (high (no CVSS), Google Chrome)
- [CVE-2026-119266](https://cve.now/CVE-2026-119266.md): Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the s (high (no CVSS), Google Chrome)
- [CVE-2026-119265](https://cve.now/CVE-2026-119265.md): Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside th (high (no CVSS), Google Chrome)
- [CVE-2026-119264](https://cve.now/CVE-2026-119264.md): Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the (high (no CVSS), Google Chrome)
- [CVE-2026-119263](https://cve.now/CVE-2026-119263.md): Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary co (high (no CVSS), Google Chrome)
- [CVE-2026-119262](https://cve.now/CVE-2026-119262.md): Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code insi (high (no CVSS), Google Chrome)
- [CVE-2026-119261](https://cve.now/CVE-2026-119261.md): Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code ou (high (no CVSS), Google Chrome)
- [CVE-2026-119260](https://cve.now/CVE-2026-119260.md): Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via (high (no CVSS), Google Chrome)
- [CVE-2026-76031](https://cve.now/CVE-2026-76031.md): Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a (high (no CVSS), Google Chrome)
- [CVE-2026-76030](https://cve.now/CVE-2026-76030.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code insi (high (no CVSS), Google Chrome)
- [CVE-2026-76029](https://cve.now/CVE-2026-76029.md): Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside (high (no CVSS), Google Chrome)
- [CVE-2026-76028](https://cve.now/CVE-2026-76028.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox (high (no CVSS), Google Chrome)
- [CVE-2026-76027](https://cve.now/CVE-2026-76027.md): Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory via a crafted HTML page. (high (no CVSS), Google Chrome)
- [CVE-2026-76026](https://cve.now/CVE-2026-76026.md): Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox (high (no CVSS), Google Chrome)
- [CVE-2026-76025](https://cve.now/CVE-2026-76025.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox (high (no CVSS), Google Chrome)
- [CVE-2026-76024](https://cve.now/CVE-2026-76024.md): Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the san (critical (no CVSS), Google Chrome)
- [CVE-2026-106484](https://cve.now/CVE-2026-106484.md): Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrar (CVSS 4.4, Google chrome-devtools-mcp)
- [CVE-2026-118338](https://cve.now/CVE-2026-118338.md): Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-118312](https://cve.now/CVE-2026-118312.md): Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside t (CVSS 9.6, Google Chrome)
- [CVE-2026-118319](https://cve.now/CVE-2026-118319.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox vi (CVSS 4.3, Google Chrome)
- [CVE-2026-118309](https://cve.now/CVE-2026-118309.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit (CVSS 9.6, Google Chrome)
- [CVE-2026-118356](https://cve.now/CVE-2026-118356.md): Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-118315](https://cve.now/CVE-2026-118315.md): Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-118330](https://cve.now/CVE-2026-118330.md): Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-118341](https://cve.now/CVE-2026-118341.md): Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-118347](https://cve.now/CVE-2026-118347.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-118314](https://cve.now/CVE-2026-118314.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome)
- [CVE-2026-118308](https://cve.now/CVE-2026-118308.md): Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-118335](https://cve.now/CVE-2026-118335.md): Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi (CVSS 8.8, Google Chrome)
- [CVE-2026-118310](https://cve.now/CVE-2026-118310.md): Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar (CVSS 9.6, Google Chrome)
- [CVE-2026-118342](https://cve.now/CVE-2026-118342.md): Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsi (CVSS 9.6, Google Chrome)
- [CVE-2026-118346](https://cve.now/CVE-2026-118346.md): Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118316](https://cve.now/CVE-2026-118316.md): Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs (CVSS 9.6, Google Chrome)
- [CVE-2026-118304](https://cve.now/CVE-2026-118304.md): Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-118345](https://cve.now/CVE-2026-118345.md): Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-118313](https://cve.now/CVE-2026-118313.md): Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-118332](https://cve.now/CVE-2026-118332.md): Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-118334](https://cve.now/CVE-2026-118334.md): Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome)
- [CVE-2026-118311](https://cve.now/CVE-2026-118311.md): Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118343](https://cve.now/CVE-2026-118343.md): Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome)
- [CVE-2026-118359](https://cve.now/CVE-2026-118359.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118327](https://cve.now/CVE-2026-118327.md): Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118349](https://cve.now/CVE-2026-118349.md): Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-118353](https://cve.now/CVE-2026-118353.md): Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-118358](https://cve.now/CVE-2026-118358.md): Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118336](https://cve.now/CVE-2026-118336.md): Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary cod (CVSS 8.8, Google Chrome)
- [CVE-2026-118333](https://cve.now/CVE-2026-118333.md): Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted H (no CVSS, Google Chrome)
- [CVE-2026-118328](https://cve.now/CVE-2026-118328.md): Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-118351](https://cve.now/CVE-2026-118351.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-118307](https://cve.now/CVE-2026-118307.md): Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118355](https://cve.now/CVE-2026-118355.md): Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-118352](https://cve.now/CVE-2026-118352.md): Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118337](https://cve.now/CVE-2026-118337.md): Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted (no CVSS, Google Chrome)
- [CVE-2026-118321](https://cve.now/CVE-2026-118321.md): Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arb (CVSS 9.6, Google Chrome)
- [CVE-2026-118340](https://cve.now/CVE-2026-118340.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-118354](https://cve.now/CVE-2026-118354.md): Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome)
- [CVE-2026-118329](https://cve.now/CVE-2026-118329.md): Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-118322](https://cve.now/CVE-2026-118322.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox v (CVSS 4.3, Google Chrome)
- [CVE-2026-118320](https://cve.now/CVE-2026-118320.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118317](https://cve.now/CVE-2026-118317.md): Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-118305](https://cve.now/CVE-2026-118305.md): Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsid (CVSS 9.6, Google Chrome)
- [CVE-2026-118339](https://cve.now/CVE-2026-118339.md): Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-118350](https://cve.now/CVE-2026-118350.md): Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-118318](https://cve.now/CVE-2026-118318.md): Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome)
- [CVE-2026-118357](https://cve.now/CVE-2026-118357.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118344](https://cve.now/CVE-2026-118344.md): Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-118348](https://cve.now/CVE-2026-118348.md): Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome)
- [CVE-2026-118331](https://cve.now/CVE-2026-118331.md): Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-118306](https://cve.now/CVE-2026-118306.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs (CVSS 9.6, Google Chrome)
- [CVE-2026-113274](https://cve.now/CVE-2026-113274.md): Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113039](https://cve.now/CVE-2026-113039.md): Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-113125](https://cve.now/CVE-2026-113125.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113013](https://cve.now/CVE-2026-113013.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113088](https://cve.now/CVE-2026-113088.md): Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome)
- [CVE-2026-113083](https://cve.now/CVE-2026-113083.md): Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113286](https://cve.now/CVE-2026-113286.md): Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-113227](https://cve.now/CVE-2026-113227.md): Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113122](https://cve.now/CVE-2026-113122.md): Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox (CVSS 6.5, Google Chrome)
- [CVE-2026-112996](https://cve.now/CVE-2026-112996.md): Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-113294](https://cve.now/CVE-2026-113294.md): Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-113130](https://cve.now/CVE-2026-113130.md): Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113074](https://cve.now/CVE-2026-113074.md): Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-113067](https://cve.now/CVE-2026-113067.md): Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113046](https://cve.now/CVE-2026-113046.md): Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 8.8, Google Chrome)
- [CVE-2026-113182](https://cve.now/CVE-2026-113182.md): Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome)
- [CVE-2026-113331](https://cve.now/CVE-2026-113331.md): Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113237](https://cve.now/CVE-2026-113237.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cr (CVSS 6.5, Google Chrome)
- [CVE-2026-113314](https://cve.now/CVE-2026-113314.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-112994](https://cve.now/CVE-2026-112994.md): Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113063](https://cve.now/CVE-2026-113063.md): Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome)
- [CVE-2026-113254](https://cve.now/CVE-2026-113254.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113169](https://cve.now/CVE-2026-113169.md): Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod (CVSS 9.6, Google Chrome)
- [CVE-2026-113132](https://cve.now/CVE-2026-113132.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113287](https://cve.now/CVE-2026-113287.md): Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113121](https://cve.now/CVE-2026-113121.md): Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbi (CVSS 8.8, Google Chrome)
- [CVE-2026-113066](https://cve.now/CVE-2026-113066.md): Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted (CVSS 6.5, Google Chrome)
- [CVE-2026-113107](https://cve.now/CVE-2026-113107.md): Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-113085](https://cve.now/CVE-2026-113085.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113288](https://cve.now/CVE-2026-113288.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113248](https://cve.now/CVE-2026-113248.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113061](https://cve.now/CVE-2026-113061.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113313](https://cve.now/CVE-2026-113313.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113038](https://cve.now/CVE-2026-113038.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbo (CVSS 6.5, Google Chrome)
- [CVE-2026-113268](https://cve.now/CVE-2026-113268.md): Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113036](https://cve.now/CVE-2026-113036.md): Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-113269](https://cve.now/CVE-2026-113269.md): Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113260](https://cve.now/CVE-2026-113260.md): Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-113173](https://cve.now/CVE-2026-113173.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome)
- [CVE-2026-113047](https://cve.now/CVE-2026-113047.md): Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sand (CVSS 6.5, Google Chrome)
- [CVE-2026-113116](https://cve.now/CVE-2026-113116.md): Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside t (CVSS 9.6, Google Chrome)
- [CVE-2026-113156](https://cve.now/CVE-2026-113156.md): Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113292](https://cve.now/CVE-2026-113292.md): Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute (CVSS 8.8, Google Chrome)
- [CVE-2026-113145](https://cve.now/CVE-2026-113145.md): Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitra (CVSS 8.8, Google Chrome)
- [CVE-2026-113021](https://cve.now/CVE-2026-113021.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-112998](https://cve.now/CVE-2026-112998.md): Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-113017](https://cve.now/CVE-2026-113017.md): Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113184](https://cve.now/CVE-2026-113184.md): Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113140](https://cve.now/CVE-2026-113140.md): Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113180](https://cve.now/CVE-2026-113180.md): Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary cod (CVSS 8.8, Google Chrome)
- [CVE-2026-113186](https://cve.now/CVE-2026-113186.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbo (CVSS 9.6, Google Chrome)
- [CVE-2026-113080](https://cve.now/CVE-2026-113080.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-113025](https://cve.now/CVE-2026-113025.md): Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113024](https://cve.now/CVE-2026-113024.md): Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-113299](https://cve.now/CVE-2026-113299.md): Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113245](https://cve.now/CVE-2026-113245.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113306](https://cve.now/CVE-2026-113306.md): Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-113296](https://cve.now/CVE-2026-113296.md): Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox v (CVSS 6.5, Google Chrome)
- [CVE-2026-113029](https://cve.now/CVE-2026-113029.md): Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-113152](https://cve.now/CVE-2026-113152.md): Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-113226](https://cve.now/CVE-2026-113226.md): Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-113330](https://cve.now/CVE-2026-113330.md): Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome)
- [CVE-2026-113023](https://cve.now/CVE-2026-113023.md): Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 9.6, Google Chrome)
- [CVE-2026-113247](https://cve.now/CVE-2026-113247.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113048](https://cve.now/CVE-2026-113048.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113244](https://cve.now/CVE-2026-113244.md): Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113241](https://cve.now/CVE-2026-113241.md): Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-113291](https://cve.now/CVE-2026-113291.md): Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113223](https://cve.now/CVE-2026-113223.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbo (CVSS 6.5, Google Chrome)
- [CVE-2026-113167](https://cve.now/CVE-2026-113167.md): Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113213](https://cve.now/CVE-2026-113213.md): Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113300](https://cve.now/CVE-2026-113300.md): Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside (CVSS 9.6, Google Chrome)
- [CVE-2026-113004](https://cve.now/CVE-2026-113004.md): Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113214](https://cve.now/CVE-2026-113214.md): Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome)
- [CVE-2026-113027](https://cve.now/CVE-2026-113027.md): Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113201](https://cve.now/CVE-2026-113201.md): Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the san (CVSS 6.5, Google Chrome)
- [CVE-2026-113056](https://cve.now/CVE-2026-113056.md): Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-113103](https://cve.now/CVE-2026-113103.md): Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113256](https://cve.now/CVE-2026-113256.md): Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113229](https://cve.now/CVE-2026-113229.md): Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113168](https://cve.now/CVE-2026-113168.md): Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113091](https://cve.now/CVE-2026-113091.md): Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-113015](https://cve.now/CVE-2026-113015.md): Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113114](https://cve.now/CVE-2026-113114.md): Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-113323](https://cve.now/CVE-2026-113323.md): Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-113312](https://cve.now/CVE-2026-113312.md): Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary c (CVSS 8.8, Google Chrome)
- [CVE-2026-113053](https://cve.now/CVE-2026-113053.md): Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-113215](https://cve.now/CVE-2026-113215.md): Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113251](https://cve.now/CVE-2026-113251.md): Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-113086](https://cve.now/CVE-2026-113086.md): Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome)
- [CVE-2026-113133](https://cve.now/CVE-2026-113133.md): Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113052](https://cve.now/CVE-2026-113052.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113340](https://cve.now/CVE-2026-113340.md): Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside (CVSS 6.5, Google Chrome)
- [CVE-2026-113089](https://cve.now/CVE-2026-113089.md): Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-113235](https://cve.now/CVE-2026-113235.md): Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary co (CVSS 9.6, Google Chrome)
- [CVE-2026-113157](https://cve.now/CVE-2026-113157.md): Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via (CVSS 6.5, Google Chrome)
- [CVE-2026-113143](https://cve.now/CVE-2026-113143.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome)
- [CVE-2026-113200](https://cve.now/CVE-2026-113200.md): Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113111](https://cve.now/CVE-2026-113111.md): Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113008](https://cve.now/CVE-2026-113008.md): Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar (CVSS 8.8, Google Chrome)
- [CVE-2026-113050](https://cve.now/CVE-2026-113050.md): Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted (CVSS 6.5, Google Chrome)
- [CVE-2026-113096](https://cve.now/CVE-2026-113096.md): Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-113062](https://cve.now/CVE-2026-113062.md): Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-113297](https://cve.now/CVE-2026-113297.md): Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a craft (CVSS 6.5, Google Chrome)
- [CVE-2026-113258](https://cve.now/CVE-2026-113258.md): Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi (CVSS 8.8, Google Chrome)
- [CVE-2026-113170](https://cve.now/CVE-2026-113170.md): Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-113203](https://cve.now/CVE-2026-113203.md): Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san (CVSS 8.8, Google Chrome)
- [CVE-2026-113197](https://cve.now/CVE-2026-113197.md): Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113199](https://cve.now/CVE-2026-113199.md): Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cra (CVSS 6.5, Google Chrome)
- [CVE-2026-113002](https://cve.now/CVE-2026-113002.md): Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory insi (CVSS 6.5, Google Chrome)
- [CVE-2026-113065](https://cve.now/CVE-2026-113065.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113233](https://cve.now/CVE-2026-113233.md): Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome)
- [CVE-2026-113159](https://cve.now/CVE-2026-113159.md): Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive informat (CVSS 6.5, Google Chrome)
- [CVE-2026-113342](https://cve.now/CVE-2026-113342.md): Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox (CVSS 9.6, Google Chrome)
- [CVE-2026-113344](https://cve.now/CVE-2026-113344.md): Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113221](https://cve.now/CVE-2026-113221.md): Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-113100](https://cve.now/CVE-2026-113100.md): Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-113030](https://cve.now/CVE-2026-113030.md): Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via (no CVSS, Google Chrome)
- [CVE-2026-113138](https://cve.now/CVE-2026-113138.md): Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-113153](https://cve.now/CVE-2026-113153.md): Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome)
- [CVE-2026-113037](https://cve.now/CVE-2026-113037.md): Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-112997](https://cve.now/CVE-2026-112997.md): Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-113120](https://cve.now/CVE-2026-113120.md): Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code i (CVSS 8.8, Google Chrome)
- [CVE-2026-113028](https://cve.now/CVE-2026-113028.md): Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-113151](https://cve.now/CVE-2026-113151.md): Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafte (CVSS 6.5, Google Chrome)
- [CVE-2026-113177](https://cve.now/CVE-2026-113177.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/chrome
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.