Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-113344 | high | 8.8 | No | Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program... | 2026-11-03 |
| CVE-2026-113343 | high | 8.8 | No | Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces... | 2026-11-03 |
| CVE-2026-113342 | critical | 9.6 | No | Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web... | 2026-11-03 |
| CVE-2026-113341 | medium | 6.5 | No | Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the... | 2026-11-03 |
| CVE-2026-113340 | medium | 6.5 | No | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the s... | 2026-11-03 |
| CVE-2026-113339 | high | 8.8 | No | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san... | 2026-11-03 |
| CVE-2026-113337 | high | 8.8 | No | Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the... | 2026-11-03 |
| CVE-2026-113336 | critical | 9.6 | No | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox... | 2026-11-03 |
| CVE-2026-113335 | high | 8.8 | No | Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web o... | 2026-11-03 |
| CVE-2026-113334 | high | 8.8 | No | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside t... | 2026-11-03 |
| CVE-2026-113333 | medium | 6.5 | No | Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass syste... | 2026-11-03 |
| CVE-2026-113332 | high | 8.8 | No | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-113331 | high | 8.8 | No | Observable discrepancy in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain... | 2026-11-03 |
| CVE-2026-113330 | high | 8.8 | No | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to obtain cross-origin... | 2026-11-03 |
| CVE-2026-113329 | medium | 6.5 | No | Race condition in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a local attacker to execute arbitrary code outside the... | 2026-11-03 |
| CVE-2026-113328 | critical | 9.6 | No | Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a cr... | 2026-11-03 |
| CVE-2026-113327 | high | 8.8 | No | Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proce... | 2026-11-03 |
| CVE-2026-113326 | medium | 6.5 | No | Improper input validation in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the re... | 2026-11-03 |
| CVE-2026-113325 | medium | 6.5 | No | Missing authorization in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrict... | 2026-11-03 |
| CVE-2026-113324 | high | 8.8 | No | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |