CVE Explorer

Search and explore known software vulnerabilities.
34,283 matching CVE records · Page 21 of 1372
CVE-2026-118352 NOT SCORED No CVSS score available

Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:04.263000 Updated: 2026-10-27 23:17:04.263000
CVE-2026-118351 NOT SCORED No CVSS score available

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:04.157000 Updated: 2026-10-27 23:17:04.157000
CVE-2026-118350 NOT SCORED No CVSS score available

Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:04.050000 Updated: 2026-10-27 23:17:04.050000
CVE-2026-118349 NOT SCORED No CVSS score available

Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.943000 Updated: 2026-10-27 23:17:03.943000
CVE-2026-118348 NOT SCORED No CVSS score available

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Published: 2026-10-27 23:17:03.833000 Updated: 2026-10-27 23:17:03.833000
CVE-2026-118347 NOT SCORED No CVSS score available

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.723000 Updated: 2026-10-27 23:17:03.723000
CVE-2026-118346 NOT SCORED No CVSS score available

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.613000 Updated: 2026-10-27 23:17:03.613000
CVE-2026-118345 NOT SCORED No CVSS score available

Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.503000 Updated: 2026-10-27 23:17:03.503000
CVE-2026-118344 NOT SCORED No CVSS score available

Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Published: 2026-10-27 23:17:03.393000 Updated: 2026-10-27 23:17:03.393000
CVE-2026-118343 NOT SCORED No CVSS score available

Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.283000 Updated: 2026-10-27 23:17:03.283000
CVE-2026-118342 NOT SCORED No CVSS score available

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.180000 Updated: 2026-10-27 23:17:03.180000
CVE-2026-118341 NOT SCORED No CVSS score available

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:03.077000 Updated: 2026-10-27 23:17:03.077000
CVE-2026-118340 NOT SCORED No CVSS score available

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:02.973000 Updated: 2026-10-27 23:17:02.973000
CVE-2026-118339 NOT SCORED No CVSS score available

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:02.863000 Updated: 2026-10-27 23:17:02.863000
CVE-2026-118338 NOT SCORED No CVSS score available

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Published: 2026-10-27 23:17:02.753000 Updated: 2026-10-27 23:17:02.753000
CVE-2026-118337 NOT SCORED No CVSS score available

Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:02.067000 Updated: 2026-10-27 23:17:02.067000
CVE-2026-118336 NOT SCORED No CVSS score available

Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.907000 Updated: 2026-10-27 23:17:01.907000
CVE-2026-118335 NOT SCORED No CVSS score available

Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.790000 Updated: 2026-10-27 23:17:01.790000
CVE-2026-118334 NOT SCORED No CVSS score available

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.687000 Updated: 2026-10-27 23:17:01.687000
CVE-2026-118333 NOT SCORED No CVSS score available

Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.580000 Updated: 2026-10-27 23:17:01.580000
CVE-2026-118332 NOT SCORED No CVSS score available

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.477000 Updated: 2026-10-27 23:17:01.477000
CVE-2026-118331 NOT SCORED No CVSS score available

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Published: 2026-10-27 23:17:01.370000 Updated: 2026-10-27 23:17:01.370000
CVE-2026-118330 NOT SCORED No CVSS score available

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.267000 Updated: 2026-10-27 23:17:01.267000
CVE-2026-118329 NOT SCORED No CVSS score available

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.157000 Updated: 2026-10-27 23:17:01.157000
CVE-2026-118328 NOT SCORED No CVSS score available

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Published: 2026-10-27 23:17:01.053000 Updated: 2026-10-27 23:17:01.053000