Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-113023 Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system… 9.6 Critical Oct 20, 2026
CVE-2026-113247 Confused deputy in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113330 Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker… 8.8 High Oct 20, 2026
CVE-2026-113167 Observable discrepancy in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin… 8.8 High Oct 20, 2026
CVE-2026-113213 Injection in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to… 8.8 High Oct 20, 2026
CVE-2026-113241 UI misrepresentation in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof… 8.8 High Oct 20, 2026
CVE-2026-113223 Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker… 6.5 Medium Oct 20, 2026
CVE-2026-113244 Missing authorization in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113291 UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI… 8.8 High Oct 20, 2026
CVE-2026-113004 Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the… 8.8 High Oct 20, 2026
CVE-2026-113027 Type confusion in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… 8.8 High Oct 20, 2026
CVE-2026-113201 Information leak in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 6.5 Medium Oct 20, 2026
CVE-2026-113214 Incorrect authorization in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113300 Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 9.6 Critical Oct 20, 2026
CVE-2026-113056 Observable discrepancy in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak… 9.6 Critical Oct 20, 2026
CVE-2026-113103 Race condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113168 Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113229 Improper signature verification in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass… 8.8 High Oct 20, 2026
CVE-2026-113256 Improper privilege management in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker… 8.8 High Oct 20, 2026
CVE-2026-113015 Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113091 Information leak in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113114 Incorrect authorization in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113312 UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI… 8.8 High Oct 20, 2026
CVE-2026-113323 UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113052 Race condition in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… 8.8 High Oct 20, 2026

Other Google products