Threats affecting pkg:deb/google/chrome

A memory corruption vulnerability exists in the HTML component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The issue has been fixed in version 156.0.8078.73.

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

An improper access control vulnerability in DevTools of Google Chrome versions prior to 156.0.8078.47 could allow a remote attacker to leak sensitive information by tricking a user into visiting a crafted HTML page. The vulnerability has a medium severity rating and does not impact integrity or availability.

A medium severity vulnerability (CVE-2026-113129) in Google Chrome extensions prior to version 156.0.8078.47 allows a remote attacker to potentially leak sensitive information by exploiting improper access control via a crafted HTML page. The vulnerability does not impact integrity or availability but can lead to confidentiality loss.

Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

A memory corruption vulnerability exists in the ANGLE component of Google Chrome prior to version 156.0.8078.47. This flaw allows a remote attacker to read memory by tricking a user into visiting a crafted HTML page. The issue has been assigned a medium severity rating and was fixed in Chrome version 156.0.8078.47.

A memory corruption vulnerability in the Permissions component of Google Chrome prior to version 156.0.8078.47 could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. This vulnerability has a high CVSS score of 9.6 and is classified as critical severity. The issue was fixed in Chrome version 156.0.8078.47.