Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-113100 Use of uninitialized variable in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113159 Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker… 6.5 Medium Oct 20, 2026
CVE-2026-113221 Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113342 Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 9.6 Critical Oct 20, 2026
CVE-2026-113344 Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory… 8.8 High Oct 20, 2026
CVE-2026-112997 Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive… 8.8 High Oct 20, 2026
CVE-2026-113030 Use of uninitialized variable in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute… 8.8 High Oct 20, 2026
CVE-2026-113037 Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute… 8.8 High Oct 20, 2026
CVE-2026-113138 UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 9.6 Critical Oct 20, 2026
CVE-2026-113153 Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113028 Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113120 Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113151 Missing authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 6.5 Medium Oct 20, 2026
CVE-2026-113177 Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113304 Uninitialized resource in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read… 6.5 Medium Oct 20, 2026
CVE-2026-113099 Confused deputy in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113087 Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113216 Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113270 Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 9.6 Critical Oct 20, 2026
CVE-2026-113267 Uninitialized resource in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory… 8.8 High Oct 20, 2026
CVE-2026-113007 Incorrect calculation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass… 9.6 Critical Oct 20, 2026
CVE-2026-113075 Origin validation error in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113110 Missing authorization in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web… 8.8 High Oct 20, 2026
CVE-2026-113187 Missing authorization in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin… 8.8 High Oct 20, 2026
CVE-2026-113228 Incorrect authorization in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026

Other Google products