Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-113139 Incorrect authorization in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 6.5 Medium Oct 20, 2026
CVE-2026-113126 Improper resource exposure in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to… 9.6 Critical Oct 20, 2026
CVE-2026-113041 Race condition in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113016 Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113202 Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113246 Missing authorization in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to spoof… 6.5 Medium Oct 20, 2026
CVE-2026-113010 Incomplete cleanup in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 6.5 Medium Oct 20, 2026
CVE-2026-113043 Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute… 8.8 High Oct 20, 2026
CVE-2026-113073 Incomplete cleanup in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin… 8.8 High Oct 20, 2026
CVE-2026-113265 Missing authorization in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113329 Race condition in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a local attacker to execute… 6.5 Medium Oct 20, 2026
CVE-2026-113076 Race condition in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113084 Incorrect authorization in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 9.6 Critical Oct 20, 2026
CVE-2026-113148 Incorrect authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-113224 UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker… 6.5 Medium Oct 20, 2026
CVE-2026-113308 Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113325 Missing authorization in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass… 6.5 Medium Oct 20, 2026
CVE-2026-113195 Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113218 Race condition in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113255 Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113328 Improper resource exposure in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web… 9.6 Critical Oct 20, 2026
CVE-2026-113335 Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113042 Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113171 UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker… 9.6 Critical Oct 20, 2026
CVE-2026-113185 Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 8.8 High Oct 20, 2026

Other Google products