98,920 indexed

CVECVE vulnerabilities

98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 7,201–7,250 of 98,920 · page 145 of 1979

IDTitleSummary
CVE-2026-87585CVE-2026-87585
CVSS 8.8google
Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox …
CVE-2026-87584CVE-2026-87584
CVSS 6.5google
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page …
CVE-2026-87583CVE-2026-87583
CVSS 5.4google
UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page.…
CVE-2026-87582CVE-2026-87582
CVSS 8.3google
Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execu…
CVE-2026-87581CVE-2026-87581
CVSS 9.6google
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod…
CVE-2026-87580CVE-2026-87580
CVSS 6.5google
Incorrect authorization in WebAppInstalls in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and levera…
CVE-2026-87579CVE-2026-87579
CVSS 8.8google
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag…
CVE-2026-87578CVE-2026-87578
CVSS 8.3google
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted netwo…
CVE-2026-87577CVE-2026-87577
CVSS 4.3google
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via a …
CVE-2026-87576CVE-2026-87576
CVSS 3.4google
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read …
CVE-2026-87575CVE-2026-87575
CVSS 5.4google
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restr…
CVE-2026-87574CVE-2026-87574
CVSS 4.3google
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chrom…
CVE-2026-87573CVE-2026-87573
CVSS 4.3google
Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Ch…
CVE-2026-87572CVE-2026-87572
CVSS 8.3google
Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra…
CVE-2026-87571CVE-2026-87571
CVSS 5.4google
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin …
CVE-2026-87570CVE-2026-87570
CVSS 8.8google
Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leverag…
CVE-2026-8757CVE-2026-8757
CVSS 7.3adenhq
A vulnerability was found in adenhq hive up to 0.11.0. This affects the function _read_events_tail of the file core/framework/server/routes_sessions.py of the …
CVE-2026-87569CVE-2026-87569
CVSS 8.8google
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrict…
CVE-2026-87568CVE-2026-87568
CVSS 4.3google
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI el…
CVE-2026-87567CVE-2026-87567
CVSS 4.3google
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via …
CVE-2026-87566CVE-2026-87566
CVSS 5.3google
Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chro…
CVE-2026-87565CVE-2026-87565
CVSS 6.5google
Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML …
CVE-2026-87564CVE-2026-87564
CVSS 4.3google
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium sec…
CVE-2026-87563CVE-2026-87563
CVSS 4.3google
Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromi…
CVE-2026-87562CVE-2026-87562
CVSS 4.3google
Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements vi…
CVE-2026-87561CVE-2026-87561
CVSS 4.3google
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrom…
CVE-2026-87560CVE-2026-87560
CVSS 4.3google
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page…
CVE-2026-87559CVE-2026-87559
CVSS 4.2google
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H…
CVE-2026-87558CVE-2026-87558
CVSS 9.6google
Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf…
CVE-2026-87557CVE-2026-87557
CVSS 4.3google
Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypas…
CVE-2026-87556CVE-2026-87556
CVSS 4.3google
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page…
CVE-2026-87555CVE-2026-87555
CVSS 4.7google
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted …
CVE-2026-87554CVE-2026-87554
CVSS 8.1google
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a…
CVE-2026-87553CVE-2026-87553
CVSS 8.3google
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potent…
CVE-2026-87552CVE-2026-87552
CVSS 5.5google
Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information vi…
CVE-2026-87551CVE-2026-87551
CVSS 4.3google
Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin po…
CVE-2026-87550CVE-2026-87550
CVSS 4.3google
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a …
CVE-2026-87549CVE-2026-87549
CVSS 6.5google
Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restric…
CVE-2026-87548CVE-2026-87548
CVSS 4.3google
Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTM…
CVE-2026-87547CVE-2026-87547
CVSS 9.6google
Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially exe…
CVE-2026-87546CVE-2026-87546
CVSS 4.3google
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restricti…
CVE-2026-87545CVE-2026-87545
CVSS 6.5google
Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak sensitive informat…
CVE-2026-87544CVE-2026-87544
CVSS 9.8google
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged …
CVE-2026-87543CVE-2026-87543
CVSS 4.3google
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolati…
CVE-2026-87542CVE-2026-87542
CVSS 8.8google
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
CVE-2026-87541CVE-2026-87541
CVSS 6.5google
Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolat…
CVE-2026-87540CVE-2026-87540
CVSS 5.4google
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium s…
CVE-2026-87539CVE-2026-87539
CVSS 3.1google
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chrom…
CVE-2026-87538CVE-2026-87538
CVSS 4.2google
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineeri…
CVE-2026-87537CVE-2026-87537
CVSS 8.1google
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially e…
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.