Search: 20.chromium

2,833 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-113326Google Chrome · Memory Corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113326 Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113243Google Chrome · Memory Corruption High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113243 Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113136Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113136 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113277Google Chrome · Out-of-bounds Read Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113277 Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113123Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113123 Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113054Google Chrome · Out-of-bounds Read Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113054 Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113144Google Chrome · Memory Corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113144 Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113204Google Chrome · Use After Free High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113204 Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113032Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113032 Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113049Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113049 Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113139Google Chrome · Memory Corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113139 A memory corruption vulnerability exists in the Autofill component of Google Chrome prior to version 156.0.8078.47. This flaw could allow a remote attacker to read memory inside the sandbox by crafting a malicious HTML page. The issue has been assigned a medium severity rating by Chromium security. EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113081Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113081 Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113031Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113031 Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113041Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113041 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113246Google Chrome · Memory Corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113246 Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113016Google Chrome · Improper Input Validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113016 Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.6%	CVE-2026-113202Google Chrome · Use After Free High8.8EPSS 0.6%2026-10-20CVE Database V5CVE-2026-113202 Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.6%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113043Google Chrome · Use After Free High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113043 Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113329Google Chrome · Out-of-bounds Read Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113329 Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113265Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113265 Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20

Page 16 of 160