Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

52 records

Priority LOW 39

Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-203
Priority MEDIUM 42

Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0023 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-203
TI-2026-81596 CVE-2026-118319 · GHSA-7fhq-w778-673v

Integer overflow in Google Chrome

Priority LOW 19

Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00209 Published 2026-10-27 Partial fix · 156.0.8078.73 CWE-190
Priority MEDIUM 42

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00251 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-706
Priority MEDIUM 40

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00288 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-843
Priority MEDIUM 40

Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00334 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
TI-2026-81620 CVE-2026-118347 · GHSA-667v-g7j3-w898

Use after free in FileSystem in Google Chrome

Priority MEDIUM 40

Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority LOW 39

Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0017 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-706
Priority MEDIUM 43

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00307 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Out of bounds write in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00244 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-787
Priority MEDIUM 43

Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00307 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 43

Use after free in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00295 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority LOW 39

Out of bounds read in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a craft…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-125
Priority MEDIUM 43

Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00295 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Buffer overflow in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00273 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-122
Priority MEDIUM 40

Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-787
Priority MEDIUM 43

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00295 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority MEDIUM 40

Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00283 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-416
Priority LOW 39

Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00221 Published 2026-10-27 Fixed in 156.0.8078.73 CWE-863
Load more