CWE-416
CVEs classified under CWE-416, newest first.
2351 CVEsRSS
CVE-2026-113236High· 8.8Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113141High· 8.8PoCUse after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113044High· 8.8Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113305High· 8.8Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113293High· 8.8chromium-browser: angle: Use after free in ANGLE (CVE-2026-113293)
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/562040486
CVE-2026-113324High· 8.8Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113210High· 8.8chromium-browser: angle: Use after free in ANGLE (CVE-2026-113210)
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bug(s): https://issues.chromium.org/issues/563354824
CVE-2026-113222Critical· 9.6Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113338High· 8.8chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in Turbolev (CVE-2026-113338)
A flaw was found in the Turbolev component of chromium-browser. By convincing a user to visit a specially crafted HTML page, a remote attacker can trigger a use-after-free memory error. This vulnerability allows the attacker to execute arb…
CVE-2026-113250High· 8.8Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113217High· 8.8chromium-browser: chromium-browser: Use after free in WebAppInstalls (CVE-2026-113217)
An use after free flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=568900845 https://code.google.com/p/chromium/issues/detail?id=113217
CVE-2026-113181High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Navigation (CVE-2026-113181)
A flaw was found in the Navigation component of Chromium. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to open a specially crafted web page. The issue stems from a use-…
CVE-2026-113160High· 8.8chromium-browser: chromium-browser: Arbitrary code execution inside the sandbox via a crafted HTML page (CVE-2026-113160)
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by enticing a victim to visit a specially crafted HTML page. This vulnerability stems from a use-after-free condition in the Turb…
CVE-2026-113019High· 8.8Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-113179High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Paint (CVE-2026-113179)
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free memory error in the Paint …
CVE-2026-113068High· 8.8Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-112993High· 8.8chromium-browser: chromium-browser: Use after free in Input (CVE-2026-112993)
An use after free flaw was found in the Input component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=572893186 https://code.google.com/p/chromium/issues/detail?id=112993
CVE-2026-113191High· 8.8Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113174High· 8.8Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113113High· 8.8Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113079High· 8.8Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113263Critical· 9.6Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113240High· 8.8chromium-browser: Google Chrome: Arbitrary code execution via crafted HTML page (CVE-2026-113240)
A flaw was found in the Chromecast component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed aft…
CVE-2026-113198High· 8.8chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page (CVE-2026-113198)
A flaw was found in chromium-browser. A use-after-free memory flaw exists within the Extensions subsystem, where memory is improperly accessed after it has been freed. By enticing a user to visit a specially crafted HTML page, a remote att…
CVE-2026-113011High· 8.8chromium-browser: chromium-browser: Use after free in CredentialProvider (CVE-2026-113011)
An use after free flaw was found in the CredentialProvider component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=498843754 https://code.google.com/p/chromium/issues/detail?id=113011
CVE-2026-113311High· 8.8Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113033High· 8.8chromium-browser: chromium-browser: Use after free in Streaming (CVE-2026-113033)
An use after free flaw was found in the Streaming component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=499869964 https://code.google.com/p/chromium/issues/detail?id=113033
CVE-2026-113302High· 8.8chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page (CVE-2026-113302)
A flaw was found in chromium-browser. A remote attacker can exploit a use-after-free issue—where memory is accessed after it has been released—within the Extensions component by convincing a user to visit a specially crafted HTML page. Suc…
CVE-2026-113275High· 8.8Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113105High· 8.8Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)