Threat database

4,983 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.6	EPSS 0.5%	CVE-2026-113014Chrome · Use after free Critical9.6EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113014 Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability Google	CVE Database V5	2026-10-20
Critical	9.6	EPSS 0.5%	CVE-2026-113283Chrome · Memory corruption Critical9.6EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113283 Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113275Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113275 Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113220Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113220 Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113105Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113105 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	–	EPSS 0.4%	CVE-2026-113264Chrome · Improper input validation MediumEPSS 0.4%2026-10-20CVE Database V5CVE-2026-113264 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.2%	CVE-2026-113129Chrome · Improper access control Medium6.5EPSS 0.2%2026-10-20CVE Database V5CVE-2026-113129 Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113127Chrome · Memory corruption High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113127 Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113337Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113337 Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113147Chrome · Improper input validation High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113147 Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113333Chrome · Memory corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113333 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113131Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113131 A memory corruption vulnerability exists in the Bluetooth component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue has been assigned CVE-2026-113131 and is rated with a high severity score of 8.8. A fix is available in Chrome version 156.0.8078.47. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113239Chrome · Range error High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113239 Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113164Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113164 A memory corruption vulnerability exists in the Voice component of Google Chrome on Android versions prior to 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113302Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113302 Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113026Chrome · Memory corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113026 Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113033Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113033 CVE-2026-113033 is a use-after-free vulnerability in the streaming component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by crafting a malicious HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. A fix is available in Chrome version 156.0.8078.47. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
Critical	9.6	EPSS 0.4%	CVE-2026-113078Chrome · Improper input validation Critical9.6EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113078 Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113311Chrome · Use after free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113311 Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113150Chrome · Memory corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113150 A memory corruption vulnerability exists in the Bindings component of Google Chrome prior to version 156.0.8078.47. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8. Google has published an advisory indicating a stable channel update addressing this issue. EPSS 0.4%Vulnerability Google	CVE Database V5	2026-10-20

Showing 241–260 of 4,983 results