98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,151–7,200 of 98,920 · page 144 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-87632 | CVE-2026-87632 CVSS 4.3google | Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Ch… |
| CVE-2026-87631 | CVE-2026-87631 CVSS 6.5google | Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML pag… |
| CVE-2026-87630 | CVE-2026-87630 CVSS 4.3google | Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromi… |
| CVE-2026-8763 | CVE-2026-8763 CVSS 9.1bouncycastle | In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS befor… |
| CVE-2026-87629 | CVE-2026-87629 CVSS 6.5google | Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive informatio… |
| CVE-2026-87628 | CVE-2026-87628 CVSS 8.3google | Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via craft… |
| CVE-2026-87627 | CVE-2026-87627 CVSS 6.5google | Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass sys… |
| CVE-2026-87626 | CVE-2026-87626 CVSS 6.5google | Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via craf… |
| CVE-2026-87625 | CVE-2026-87625 CVSS 8.8google | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandb… |
| CVE-2026-87624 | CVE-2026-87624 CVSS 4.2google | UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to s… |
| CVE-2026-87623 | CVE-2026-87623 CVSS 6.5google | Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information v… |
| CVE-2026-87622 | CVE-2026-87622 CVSS 4.3google | Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium… |
| CVE-2026-87621 | CVE-2026-87621 CVSS 9.6google | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the … |
| CVE-2026-87620 | CVE-2026-87620 CVSS 6.5google | Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chrom… |
| CVE-2026-8762 | CVE-2026-8762 | Rejected reason: After analysis, the originally reported behaviour was determined not to constitute a security vulnerability. The findings were parser-strictne… |
| CVE-2026-87619 | CVE-2026-87619 CVSS 4.3google | Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromi… |
| CVE-2026-87618 | CVE-2026-87618 CVSS 8.3google | Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proc… |
| CVE-2026-87617 | CVE-2026-87617 CVSS 8.8google | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the… |
| CVE-2026-87616 | CVE-2026-87616 CVSS 8.3google | Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and l… |
| CVE-2026-87615 | CVE-2026-87615 CVSS 5.4google | Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H… |
| CVE-2026-87614 | CVE-2026-87614 CVSS 3.1google | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass w… |
| CVE-2026-87613 | CVE-2026-87613 CVSS 9.0google | Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside th… |
| CVE-2026-87612 | CVE-2026-87612 CVSS 8.8google | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
| CVE-2026-87611 | CVE-2026-87611 CVSS 3.1google | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-… |
| CVE-2026-87610 | CVE-2026-87610 CVSS 6.5google | Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged pag… |
| CVE-2026-8761 | CVE-2026-8761 CVSS 8.8 | The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check … |
| CVE-2026-87609 | CVE-2026-87609 CVSS 9.6google | Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… |
| CVE-2026-87608 | CVE-2026-87608 CVSS 7.5google | Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin p… |
| CVE-2026-87607 | CVE-2026-87607 CVSS 9.6google | Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox … |
| CVE-2026-87606 | CVE-2026-87606 CVSS 8.1google | Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass sit… |
| CVE-2026-87605 | CVE-2026-87605 CVSS 5.3google | Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged soci… |
| CVE-2026-87604 | CVE-2026-87604 CVSS 8.3google | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute a… |
| CVE-2026-87603 | CVE-2026-87603 CVSS 6.5google | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML p… |
| CVE-2026-87602 | CVE-2026-87602 CVSS 4.7google | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via … |
| CVE-2026-87601 | CVE-2026-87601 CVSS 7.5google | Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
| CVE-2026-87600 | CVE-2026-87600 CVSS 6.5google | Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypa… |
| CVE-2026-87599 | CVE-2026-87599 CVSS 5.4google | Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chr… |
| CVE-2026-87598 | CVE-2026-87598 CVSS 4.3google | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page.… |
| CVE-2026-87597 | CVE-2026-87597 CVSS 4.8google | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app.… |
| CVE-2026-87596 | CVE-2026-87596 CVSS 4.3google | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chro… |
| CVE-2026-87595 | CVE-2026-87595 CVSS 9.8google | Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access r… |
| CVE-2026-87594 | CVE-2026-87594 CVSS 5.3google | Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain se… |
| CVE-2026-87593 | CVE-2026-87593 CVSS 6.5google | Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromiu… |
| CVE-2026-87592 | CVE-2026-87592 CVSS 4.3google | Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML p… |
| CVE-2026-87591 | CVE-2026-87591 CVSS 6.5google | Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chro… |
| CVE-2026-87590 | CVE-2026-87590 CVSS 5.9google | Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted … |
| CVE-2026-87589 | CVE-2026-87589 CVSS 6.5google | Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass s… |
| CVE-2026-87588 | CVE-2026-87588 CVSS 8.8google | Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML … |
| CVE-2026-87587 | CVE-2026-87587 CVSS 8.8google | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
| CVE-2026-87586 | CVE-2026-87586 CVSS 4.3google | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chro… |