Threat database

4,983 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2026-113278Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113278 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113071Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113071 A use-after-free vulnerability exists in the Notifications component of Google Chrome on Android versions prior to 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113009Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113009 Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113307Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113307 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113045Chrome · Out of bounds read Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113045 Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113115Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113115 CVE-2026-113115 is a use-after-free vulnerability in the Transactions Platform component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an update to address this issue. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113060Chrome · Improper input validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113060 Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Critical	9.6	EPSS 0.5%	CVE-2026-113189Chrome · Use after free Critical9.6EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113189 Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113194Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113194 A memory corruption vulnerability exists in the Core component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113238Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113238 Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113208Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113208 Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113137Chrome · Memory corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113137 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113059Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113059 A memory corruption vulnerability exists in the Sensor component of Google Chrome prior to version 156.0.8078.47. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released an update to address this issue. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113321Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113321 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113112Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113112 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113272Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113272 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113249Chrome · Improper input validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113249 Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-112999Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-112999 Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113327Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113327 Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113232Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113232 Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20

Showing 201–220 of 4,983 results