p PatchFirst

PatchFirst · Latest vulnerabilities

Operating systems stack vulnerabilities · Page 127

Vulnerabilities published for Operating systems in the last 30 days: 6571. Listed in the KEV catalogue: 4.

Filter vulnerabilities
Operating systems

Vulnerabilities: 160576

  1. CVE-2026-113004

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113004

    Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  2. CVE-2026-113214

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113214

    Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  3. CVE-2026-113027

    High · CVSS 8.8EPSS 0.56%Fix available

    CVE-2026-113027

    Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  4. CVE-2026-113201

    Medium · CVSS 6.5EPSS 0.32%Fix available

    CVE-2026-113201

    Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  5. CVE-2026-113056

    Critical · CVSS 9.6EPSS 0.47%Fix available

    CVE-2026-113056

    Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  6. CVE-2026-113103

    High · CVSS 8.8EPSS 0.53%Fix available

    CVE-2026-113103

    Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  7. CVE-2026-113256

    High · CVSS 8.8EPSS 0.43%Fix available

    CVE-2026-113256

    Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  8. CVE-2026-113229

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113229

    Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  9. CVE-2026-113168

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113168

    Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  10. CVE-2026-113091

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113091

    Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  11. CVE-2026-113015

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113015

    Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  12. CVE-2026-113114

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113114

    Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  13. CVE-2026-113323

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113323

    Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  14. CVE-2026-113312

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113312

    Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  15. CVE-2026-113053

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113053

    Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  16. CVE-2026-113215

    High · CVSS 8.8EPSS 0.44%Fix available

    CVE-2026-113215

    Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  17. CVE-2026-113251

    High · CVSS 8.8EPSS 0.4%Fix available

    CVE-2026-113251

    Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  18. CVE-2026-113086

    High · CVSS 8.8EPSS 0.37%Fix available

    CVE-2026-113086

    Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  19. CVE-2026-113133

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113133

    Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated
  20. CVE-2026-113052

    High · CVSS 8.8EPSS 0.42%Fix available

    CVE-2026-113052

    Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    • Update to 156.0.8078.47-1
    • Update to 156.0.8078.47-1~deb12u1
    • Update to 156.0.8078.47-1~deb13u1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →