https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-121203/https://vulnfeed.org/cve/CVE-2026-121203/Tue, 03 Nov 2026 20:42:22 +0000Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)https://vulnfeed.org/cve/CVE-2026-76026/https://vulnfeed.org/cve/CVE-2026-76026/Fri, 30 Oct 2026 01:16:47 +0000Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-76028/https://vulnfeed.org/cve/CVE-2026-76028/Fri, 30 Oct 2026 01:16:47 +0000Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-76029/https://vulnfeed.org/cve/CVE-2026-76029/Fri, 30 Oct 2026 01:16:47 +0000Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-76030/https://vulnfeed.org/cve/CVE-2026-76030/Fri, 30 Oct 2026 01:16:47 +0000Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-76031/https://vulnfeed.org/cve/CVE-2026-76031/Fri, 30 Oct 2026 01:16:47 +0000Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119271/https://vulnfeed.org/cve/CVE-2026-119271/Fri, 30 Oct 2026 01:16:46 +0000Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-76025/https://vulnfeed.org/cve/CVE-2026-76025/Fri, 30 Oct 2026 01:16:46 +0000Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119263/https://vulnfeed.org/cve/CVE-2026-119263/Fri, 30 Oct 2026 01:16:45 +0000Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119264/https://vulnfeed.org/cve/CVE-2026-119264/Fri, 30 Oct 2026 01:16:45 +0000Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119265/https://vulnfeed.org/cve/CVE-2026-119265/Fri, 30 Oct 2026 01:16:45 +0000Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119266/https://vulnfeed.org/cve/CVE-2026-119266/Fri, 30 Oct 2026 01:16:45 +0000Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119267/https://vulnfeed.org/cve/CVE-2026-119267/Fri, 30 Oct 2026 01:16:45 +0000Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119268/https://vulnfeed.org/cve/CVE-2026-119268/Fri, 30 Oct 2026 01:16:45 +0000Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119269/https://vulnfeed.org/cve/CVE-2026-119269/Fri, 30 Oct 2026 01:16:45 +0000Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119270/https://vulnfeed.org/cve/CVE-2026-119270/Fri, 30 Oct 2026 01:16:45 +0000Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119260/https://vulnfeed.org/cve/CVE-2026-119260/Fri, 30 Oct 2026 01:16:44 +0000Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119261/https://vulnfeed.org/cve/CVE-2026-119261/Fri, 30 Oct 2026 01:16:44 +0000Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-119262/https://vulnfeed.org/cve/CVE-2026-119262/Fri, 30 Oct 2026 01:16:44 +0000Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118342/https://vulnfeed.org/cve/CVE-2026-118342/Tue, 27 Oct 2026 23:17:03 +0000Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118343/https://vulnfeed.org/cve/CVE-2026-118343/Tue, 27 Oct 2026 23:17:03 +0000Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118337/https://vulnfeed.org/cve/CVE-2026-118337/Tue, 27 Oct 2026 23:17:02 +0000Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118338/https://vulnfeed.org/cve/CVE-2026-118338/Tue, 27 Oct 2026 23:17:02 +0000Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-118340/https://vulnfeed.org/cve/CVE-2026-118340/Tue, 27 Oct 2026 23:17:02 +0000Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118333/https://vulnfeed.org/cve/CVE-2026-118333/Tue, 27 Oct 2026 23:17:01 +0000Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118335/https://vulnfeed.org/cve/CVE-2026-118335/Tue, 27 Oct 2026 23:17:01 +0000Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118328/https://vulnfeed.org/cve/CVE-2026-118328/Tue, 27 Oct 2026 23:17:01 +0000Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118329/https://vulnfeed.org/cve/CVE-2026-118329/Tue, 27 Oct 2026 23:17:01 +0000Uninitialized resource in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118330/https://vulnfeed.org/cve/CVE-2026-118330/Tue, 27 Oct 2026 23:17:01 +0000Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118331/https://vulnfeed.org/cve/CVE-2026-118331/Tue, 27 Oct 2026 23:17:01 +0000Use after free in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)https://vulnfeed.org/cve/CVE-2026-118332/https://vulnfeed.org/cve/CVE-2026-118332/Tue, 27 Oct 2026 23:17:01 +0000Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118336/https://vulnfeed.org/cve/CVE-2026-118336/Tue, 27 Oct 2026 23:17:01 +0000Race condition in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118315/https://vulnfeed.org/cve/CVE-2026-118315/Tue, 27 Oct 2026 23:17:00 +0000Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118316/https://vulnfeed.org/cve/CVE-2026-118316/Tue, 27 Oct 2026 23:17:00 +0000Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118317/https://vulnfeed.org/cve/CVE-2026-118317/Tue, 27 Oct 2026 23:17:00 +0000Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118320/https://vulnfeed.org/cve/CVE-2026-118320/Tue, 27 Oct 2026 23:17:00 +0000Race condition in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118321/https://vulnfeed.org/cve/CVE-2026-118321/Tue, 27 Oct 2026 23:17:00 +0000Use after free in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118327/https://vulnfeed.org/cve/CVE-2026-118327/Tue, 27 Oct 2026 23:17:00 +0000Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118306/https://vulnfeed.org/cve/CVE-2026-118306/Tue, 27 Oct 2026 23:16:59 +0000Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)https://vulnfeed.org/cve/CVE-2026-118307/https://vulnfeed.org/cve/CVE-2026-118307/Tue, 27 Oct 2026 23:16:59 +0000Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118308/https://vulnfeed.org/cve/CVE-2026-118308/Tue, 27 Oct 2026 23:16:59 +0000Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118309/https://vulnfeed.org/cve/CVE-2026-118309/Tue, 27 Oct 2026 23:16:59 +0000Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118310/https://vulnfeed.org/cve/CVE-2026-118310/Tue, 27 Oct 2026 23:16:59 +0000Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118311/https://vulnfeed.org/cve/CVE-2026-118311/Tue, 27 Oct 2026 23:16:59 +0000Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118312/https://vulnfeed.org/cve/CVE-2026-118312/Tue, 27 Oct 2026 23:16:59 +0000Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-118313/https://vulnfeed.org/cve/CVE-2026-118313/Tue, 27 Oct 2026 23:16:59 +0000Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118314/https://vulnfeed.org/cve/CVE-2026-118314/Tue, 27 Oct 2026 23:16:59 +0000Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118304/https://vulnfeed.org/cve/CVE-2026-118304/Tue, 27 Oct 2026 23:16:58 +0000Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-118305/https://vulnfeed.org/cve/CVE-2026-118305/Tue, 27 Oct 2026 23:16:58 +0000Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113343/https://vulnfeed.org/cve/CVE-2026-113343/Tue, 20 Oct 2026 22:19:29 +0000Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113344/https://vulnfeed.org/cve/CVE-2026-113344/Tue, 20 Oct 2026 22:19:29 +0000Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113335/https://vulnfeed.org/cve/CVE-2026-113335/Tue, 20 Oct 2026 22:19:28 +0000Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113336/https://vulnfeed.org/cve/CVE-2026-113336/Tue, 20 Oct 2026 22:19:28 +0000Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113337/https://vulnfeed.org/cve/CVE-2026-113337/Tue, 20 Oct 2026 22:19:28 +0000Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113339/https://vulnfeed.org/cve/CVE-2026-113339/Tue, 20 Oct 2026 22:19:28 +0000Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113342/https://vulnfeed.org/cve/CVE-2026-113342/Tue, 20 Oct 2026 22:19:28 +0000Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113327/https://vulnfeed.org/cve/CVE-2026-113327/Tue, 20 Oct 2026 22:19:27 +0000Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113328/https://vulnfeed.org/cve/CVE-2026-113328/Tue, 20 Oct 2026 22:19:27 +0000Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113330/https://vulnfeed.org/cve/CVE-2026-113330/Tue, 20 Oct 2026 22:19:27 +0000Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to obtain cross-origin data via a co-installed app. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113331/https://vulnfeed.org/cve/CVE-2026-113331/Tue, 20 Oct 2026 22:19:27 +0000Observable discrepancy in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113332/https://vulnfeed.org/cve/CVE-2026-113332/Tue, 20 Oct 2026 22:19:27 +0000Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113334/https://vulnfeed.org/cve/CVE-2026-113334/Tue, 20 Oct 2026 22:19:27 +0000Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113317/https://vulnfeed.org/cve/CVE-2026-113317/Tue, 20 Oct 2026 22:19:26 +0000Use after free in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113318/https://vulnfeed.org/cve/CVE-2026-113318/Tue, 20 Oct 2026 22:19:26 +0000Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113319/https://vulnfeed.org/cve/CVE-2026-113319/Tue, 20 Oct 2026 22:19:26 +0000Missing authorization in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113320/https://vulnfeed.org/cve/CVE-2026-113320/Tue, 20 Oct 2026 22:19:26 +0000UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113321/https://vulnfeed.org/cve/CVE-2026-113321/Tue, 20 Oct 2026 22:19:26 +0000Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113323/https://vulnfeed.org/cve/CVE-2026-113323/Tue, 20 Oct 2026 22:19:26 +0000UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113324/https://vulnfeed.org/cve/CVE-2026-113324/Tue, 20 Oct 2026 22:19:26 +0000Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113308/https://vulnfeed.org/cve/CVE-2026-113308/Tue, 20 Oct 2026 22:19:25 +0000Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113311/https://vulnfeed.org/cve/CVE-2026-113311/Tue, 20 Oct 2026 22:19:25 +0000Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113312/https://vulnfeed.org/cve/CVE-2026-113312/Tue, 20 Oct 2026 22:19:25 +0000UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113313/https://vulnfeed.org/cve/CVE-2026-113313/Tue, 20 Oct 2026 22:19:25 +0000Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113314/https://vulnfeed.org/cve/CVE-2026-113314/Tue, 20 Oct 2026 22:19:25 +0000Observable discrepancy in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113315/https://vulnfeed.org/cve/CVE-2026-113315/Tue, 20 Oct 2026 22:19:25 +0000Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113316/https://vulnfeed.org/cve/CVE-2026-113316/Tue, 20 Oct 2026 22:19:25 +0000Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113299/https://vulnfeed.org/cve/CVE-2026-113299/Tue, 20 Oct 2026 22:19:24 +0000Incorrect authorization in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113300/https://vulnfeed.org/cve/CVE-2026-113300/Tue, 20 Oct 2026 22:19:24 +0000Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113301/https://vulnfeed.org/cve/CVE-2026-113301/Tue, 20 Oct 2026 22:19:24 +0000Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113302/https://vulnfeed.org/cve/CVE-2026-113302/Tue, 20 Oct 2026 22:19:24 +0000Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113303/https://vulnfeed.org/cve/CVE-2026-113303/Tue, 20 Oct 2026 22:19:24 +0000Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)https://vulnfeed.org/cve/CVE-2026-113305/https://vulnfeed.org/cve/CVE-2026-113305/Tue, 20 Oct 2026 22:19:24 +0000Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113306/https://vulnfeed.org/cve/CVE-2026-113306/Tue, 20 Oct 2026 22:19:24 +0000Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted file. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113307/https://vulnfeed.org/cve/CVE-2026-113307/Tue, 20 Oct 2026 22:19:24 +0000UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113290/https://vulnfeed.org/cve/CVE-2026-113290/Tue, 20 Oct 2026 22:19:23 +0000Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113291/https://vulnfeed.org/cve/CVE-2026-113291/Tue, 20 Oct 2026 22:19:23 +0000UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113292/https://vulnfeed.org/cve/CVE-2026-113292/Tue, 20 Oct 2026 22:19:23 +0000UI misrepresentation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113293/https://vulnfeed.org/cve/CVE-2026-113293/Tue, 20 Oct 2026 22:19:23 +0000Out of bounds write in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113294/https://vulnfeed.org/cve/CVE-2026-113294/Tue, 20 Oct 2026 22:19:23 +0000Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113298/https://vulnfeed.org/cve/CVE-2026-113298/Tue, 20 Oct 2026 22:19:23 +0000UI misrepresentation in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113281/https://vulnfeed.org/cve/CVE-2026-113281/Tue, 20 Oct 2026 22:19:22 +0000Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113282/https://vulnfeed.org/cve/CVE-2026-113282/Tue, 20 Oct 2026 22:19:22 +0000Race condition in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113283/https://vulnfeed.org/cve/CVE-2026-113283/Tue, 20 Oct 2026 22:19:22 +0000Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the sandbox via physical access. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113284/https://vulnfeed.org/cve/CVE-2026-113284/Tue, 20 Oct 2026 22:19:22 +0000Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113285/https://vulnfeed.org/cve/CVE-2026-113285/Tue, 20 Oct 2026 22:19:22 +0000Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)https://vulnfeed.org/cve/CVE-2026-113286/https://vulnfeed.org/cve/CVE-2026-113286/Tue, 20 Oct 2026 22:19:22 +0000Missing authorization in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113287/https://vulnfeed.org/cve/CVE-2026-113287/Tue, 20 Oct 2026 22:19:22 +0000Incorrect authorization in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113288/https://vulnfeed.org/cve/CVE-2026-113288/Tue, 20 Oct 2026 22:19:22 +0000Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)https://vulnfeed.org/cve/CVE-2026-113289/https://vulnfeed.org/cve/CVE-2026-113289/Tue, 20 Oct 2026 22:19:22 +0000Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)https://vulnfeed.org/cve/CVE-2026-113272/https://vulnfeed.org/cve/CVE-2026-113272/Tue, 20 Oct 2026 22:19:21 +0000Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)