Threat database

4,983 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2026-113118Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113118 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113162Chrome · Improper input validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113162 Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113205Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113205 Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113207Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113207 Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113146Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113146 Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113289Chrome · Improper input validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113289 Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113183Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113183 A memory corruption vulnerability exists in the FedCM component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released a stable channel update addressing this issue. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113290Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113290 Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113155Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113155 CVE-2026-113155 is a use-after-free vulnerability in the Glic component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has released a stable channel update to address this issue. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113003Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113003 A memory corruption vulnerability exists in the Human Interface Device (HID) component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. It affects Chrome desktop versions before 156.0.8078.47. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	–	EPSS 0.2%	CVE-2026-113196Chrome · Improper access control MediumEPSS 0.2%2026-10-20CVE Database V5CVE-2026-113196 An improper access control vulnerability exists in Google Chrome on iOS versions prior to 156.0.8078.47. This flaw allows a remote attacker to bypass the web origin policy via a crafted HTML page. The vulnerability has been assigned a medium severity by Chromium security. EPSS 0.2%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.2%	CVE-2026-113051Chrome · Memory corruption Medium6.5EPSS 0.2%2026-10-20CVE Database V5CVE-2026-113051 Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113166Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113166 A memory corruption vulnerability exists in the History component of Google Chrome on Android versions prior to 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113209Chrome · Memory corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113209 Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113005Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113005 A memory corruption vulnerability exists in the Bluetooth component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113219Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113219 Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	–	EPSS 0.3%	CVE-2026-113057Chrome · Improper access control MediumEPSS 0.3%2026-10-20CVE Database V5CVE-2026-113057 An improper access control vulnerability exists in the ComputePressure component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to bypass the web origin policy by using a crafted HTML page. The vulnerability has been assigned a medium severity by Chromium security. A fix is available in Chrome version 156.0.8078.47. EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113319Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113319 Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113343Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113343 Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113108Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113108 Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20

Showing 221–240 of 4,983 results