98,920 indexed
CVECVE vulnerabilities
98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 7,251–7,300 of 98,920 · page 146 of 1979
| ID | Title | Summary |
|---|---|---|
| CVE-2026-87536 | CVE-2026-87536 CVSS 8.8google | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
| CVE-2026-87535 | CVE-2026-87535 CVSS 6.5google | Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions v… |
| CVE-2026-87534 | CVE-2026-87534 CVSS 9.8google | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system… |
| CVE-2026-87533 | CVE-2026-87533 CVSS 8.1google | Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. … |
| CVE-2026-87532 | CVE-2026-87532 CVSS 6.5google | Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted … |
| CVE-2026-87531 | CVE-2026-87531 CVSS 3.1google | Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data… |
| CVE-2026-87530 | CVE-2026-87530 CVSS 8.1google | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code… |
| CVE-2026-87529 | CVE-2026-87529 CVSS 9.6google | Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v… |
| CVE-2026-87528 | CVE-2026-87528 CVSS 9.6google | Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbo… |
| CVE-2026-87527 | CVE-2026-87527 CVSS 9.6google | Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
| CVE-2026-87526 | CVE-2026-87526 CVSS 9.6google | Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co… |
| CVE-2026-87525 | CVE-2026-87525 CVSS 2.7google | Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local … |
| CVE-2026-87524 | CVE-2026-87524 CVSS 8.3google | Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially … |
| CVE-2026-87523 | CVE-2026-87523 CVSS 5.3google | Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information … |
| CVE-2026-87522 | CVE-2026-87522 CVSS 6.5google | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially b… |
| CVE-2026-87521 | CVE-2026-87521 CVSS 3.1google | Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin da… |
| CVE-2026-87520 | CVE-2026-87520 CVSS 9.6google | Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf… |
| CVE-2026-8752 | CVE-2026-8752 CVSS 5.3h2o | A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-core/src/main/java/water/rapids/ast/prim… |
| CVE-2026-87519 | CVE-2026-87519 CVSS 6.5google | Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access… |
| CVE-2026-87518 | CVE-2026-87518 CVSS 5.3google | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to … |
| CVE-2026-87517 | CVE-2026-87517 CVSS 3.1google | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy … |
| CVE-2026-87516 | CVE-2026-87516 CVSS 4.3google | Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro… |
| CVE-2026-87515 | CVE-2026-87515 CVSS 6.5google | Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access rest… |
| CVE-2026-87514 | CVE-2026-87514 CVSS 8.1google | Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Ch… |
| CVE-2026-87513 | CVE-2026-87513 CVSS 6.5google | Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system acces… |
| CVE-2026-87512 | CVE-2026-87512 CVSS 9.6google | Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra… |
| CVE-2026-87511 | CVE-2026-87511 CVSS 4.3google | Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension.… |
| CVE-2026-87510 | CVE-2026-87510 CVSS 8.3google | Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially … |
| CVE-2026-8751 | CVE-2026-8751 CVSS 7.3h2o | A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of… |
| CVE-2026-87509 | CVE-2026-87509 CVSS 8.1google | Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox… |
| CVE-2026-87508 | CVE-2026-87508 CVSS 4.3google | Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
| CVE-2026-87507 | CVE-2026-87507 CVSS 5.4google | UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a cr… |
| CVE-2026-87506 | CVE-2026-87506 CVSS 8.3google | Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute … |
| CVE-2026-87505 | CVE-2026-87505 CVSS 8.1google | Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site… |
| CVE-2026-87504 | CVE-2026-87504 CVSS 9.6google | Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sa… |
| CVE-2026-87503 | CVE-2026-87503 CVSS 6.5google | Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypa… |
| CVE-2026-87502 | CVE-2026-87502 CVSS 4.2google | Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social e… |
| CVE-2026-87501 | CVE-2026-87501 CVSS 5.4google | UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium sec… |
| CVE-2026-87500 | CVE-2026-87500 CVSS 9.6google | Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the… |
| CVE-2026-8750 | CVE-2026-8750 CVSS 5.3h2o | A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file h2o-core/src/main/java/water/persist/P… |
| CVE-2026-87499 | CVE-2026-87499 CVSS 8.1google | Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site is… |
| CVE-2026-87498 | CVE-2026-87498 CVSS 3.1google | Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin … |
| CVE-2026-87497 | CVE-2026-87497 CVSS 4.3google | Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (… |
| CVE-2026-87496 | CVE-2026-87496 CVSS 5.4google | UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a craf… |
| CVE-2026-87495 | CVE-2026-87495 CVSS 4.3google | Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data… |
| CVE-2026-87494 | CVE-2026-87494 CVSS 9.6google | Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary co… |
| CVE-2026-87493 | CVE-2026-87493 CVSS 6.5google | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access res… |
| CVE-2026-87492 | CVE-2026-87492 CVSS 9.6google | Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
| CVE-2026-87491 | Google Chromium V8 Out of Bounds Write Vulnerability KEVCVSS 8.8Google | Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML … |
| CVE-2026-87490 | CVE-2026-87490 CVSS 6.5google | Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML … |