CWE-416
CVEs classified under CWE-416, newest first.
2381 CVEsRSS
CVE-2026-113075High· 8.8Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113259High· 8.8Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113228High· 8.8Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113216High· 8.8Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113087High· 8.8Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113177High· 8.8chromium-browser: chromium-browser: Arbitrary code execution in FileSystem via crafted HTML page (CVE-2026-113177)
A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is caused by a use-after-free c…
CVE-2026-113028High· 8.8chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page (CVE-2026-113028)
A flaw was found in the Media component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue occ…
CVE-2026-113037High· 8.8chromium-browser: chromium-browser: Use after free in WebSockets (CVE-2026-113037)
An use after free flaw was found in the WebSockets component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=560939312 https://code.google.com/p/chromium/issues/detail?id=113037
CVE-2026-113344High· 8.8chromium-browser: chromium-browser: Use after free in Performance (CVE-2026-113344)
An use after free flaw was found in the Performance component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=561926123 https://code.google.com/p/chromium/issues/detail?id=113344
CVE-2026-113221High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Google Lens (CVE-2026-113221)
A flaw was found in the Google Lens component of chromium-browser. This issue is caused by a use-after-free vulnerability, which occurs when memory is accessed after it has been released. A remote attacker could exploit this flaw by entici…
CVE-2026-113197High· 8.8chromium-browser: chromium-browser: arbitrary code execution inside the sandbox via use-after-free in Forms (CVE-2026-113197)
A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by tricking a user into visiting a specially crafted HTML page. The issue is caused by a use-a…
CVE-2026-113065High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Media component (CVE-2026-113065)
A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by enticing a user to load a specially crafted HTML page. The issue is caused by a use-after-free condit…
CVE-2026-113203High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in CSS (CVE-2026-113203)
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free memory corruption…
CVE-2026-113170High· 8.8Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113111High· 8.8Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113200High· 8.8Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-113251High· 8.8Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113053High· 8.8Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113323High· 8.8chromium-browser: chromium-browser: Use after free in Chrome for iOS (CVE-2026-113323)
An use after free flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=480153486 https://code.google.com/p/chromium/issues/detail?id=113323
CVE-2026-113215High· 8.8Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113168High· 8.8chromium-browser: chromium-browser: arbitrary code execution via use-after-free in Permissions (CVE-2026-113168)
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser's sandbox environment by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free mem…
CVE-2026-113114High· 8.8chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page (CVE-2026-113114)
A flaw was found in chromium-browser. The SignIn component is vulnerable to a use-after-free condition, where memory is accessed after it has been released. By enticing a user to visit a specially crafted HTML page, a remote attacker could…
CVE-2026-113256High· 8.8chromium-browser: chromium-browser: arbitrary code execution inside sandbox via crafted HTML page (CVE-2026-113256)
A flaw was found in chromium-browser. A use-after-free vulnerability in the Permissions component allows a remote attacker to execute arbitrary code within the browser's sandbox. An attacker could exploit this flaw by enticing a user to vi…
CVE-2026-113091High· 8.8Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113229High· 8.8chromium-browser: chromium-browser: arbitrary code execution via crafted HTML page (CVE-2026-113229)
A flaw was found in the Loader component of chromium-browser. A remote attacker can exploit a use-after-free memory vulnerability by enticing a user to open a specially crafted HTML page. Successful exploitation allows an attacker to execu…
CVE-2026-113103High· 8.8chromium-browser: chromium-browser: arbitrary code execution in WebProtect via crafted HTML page (CVE-2026-113103)
A flaw was found in chromium-browser. A remote attacker can exploit a use-after-free vulnerability, where released memory is improperly accessed, in the WebProtect component to achieve arbitrary code execution inside the browser sandbox. T…
CVE-2026-113015High· 8.8chromium-browser: chromium-browser: arbitrary code execution in Workers via crafted HTML page (CVE-2026-113015)
A flaw was found in chromium-browser. Due to improper memory handling (a use-after-free condition) within the Workers component, a remote attacker can execute arbitrary code inside the browser's sandbox environment. To exploit this vulnera…
CVE-2026-113025High· 8.8Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113024High· 8.8Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-113080High· 8.8Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)