Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2026-113206 UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements… 8.8 High Oct 20, 2026
CVE-2026-113276 Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker… 8.8 High Oct 20, 2026
CVE-2026-113149 UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof address… 8.8 High Oct 20, 2026
CVE-2026-113172 Missing authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 8.8 High Oct 20, 2026
CVE-2026-113261 Improper input validation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 9.6 Critical Oct 20, 2026
CVE-2026-113262 Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 8.8 High Oct 20, 2026
CVE-2026-113332 Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised… 8.8 High Oct 20, 2026
CVE-2026-112992 Observable discrepancy in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak… 9.6 Critical Oct 20, 2026
CVE-2026-112995 Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain… 8.8 High Oct 20, 2026
CVE-2026-113071 Use of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a… 8.8 High Oct 20, 2026
CVE-2026-113190 Confused deputy in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113278 UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113009 UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker… 8.8 High Oct 20, 2026
CVE-2026-113060 UI misrepresentation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113045 Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 6.5 Medium Oct 20, 2026
CVE-2026-113115 Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113307 UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI… 8.8 High Oct 20, 2026
CVE-2026-113137 Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging… 6.5 Medium Oct 20, 2026
CVE-2026-113189 Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 9.6 Critical Oct 20, 2026
CVE-2026-113194 Improper input validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026
CVE-2026-113208 Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113238 Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 8.8 High Oct 20, 2026
CVE-2026-113059 Race condition in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the… 8.8 High Oct 20, 2026
CVE-2026-113112 Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social… 8.8 High Oct 20, 2026
CVE-2026-113272 Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had… 8.8 High Oct 20, 2026

Other Google products