98,920 indexed

CVECVE vulnerabilities

98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 7,301–7,350 of 98,920 · page 147 of 1979

IDTitleSummary
CVE-2026-87489CVE-2026-87489
CVSS 8.8google
Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte…
CVE-2026-87488CVE-2026-87488
CVSS 9.6google
Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra…
CVE-2026-87487CVE-2026-87487
CVSS 8.3google
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged so…
CVE-2026-87486CVE-2026-87486
CVSS 4.0google
Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app…
CVE-2026-87485CVE-2026-87485
CVSS 3.1google
Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin…
CVE-2026-87484CVE-2026-87484
CVSS 5.4google
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a cra…
CVE-2026-87483CVE-2026-87483
CVSS 6.5google
Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a c…
CVE-2026-87482CVE-2026-87482
CVSS 5.9google
Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to leak sensitive informa…
CVE-2026-87481CVE-2026-87481
CVSS 8.3google
Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to …
CVE-2026-87480CVE-2026-87480
CVSS 8.3google
Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute ar…
CVE-2026-87479CVE-2026-87479
CVSS 8.3google
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and le…
CVE-2026-87478CVE-2026-87478
CVSS 6.5google
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (…
CVE-2026-87477CVE-2026-87477
CVSS 6.5google
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium sec…
CVE-2026-87476CVE-2026-87476
CVSS 6.5google
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C…
CVE-2026-87475CVE-2026-87475
CVSS 6.5google
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restri…
CVE-2026-87474CVE-2026-87474
CVSS 9.6google
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr…
CVE-2026-87473CVE-2026-87473
CVSS 6.5google
Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access…
CVE-2026-87472CVE-2026-87472
CVSS 4.2google
Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI eleme…
CVE-2026-87471CVE-2026-87471
CVSS 8.1google
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass s…
CVE-2026-87470CVE-2026-87470
CVSS 9.6google
Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside …
CVE-2026-87469CVE-2026-87469
CVSS 4.3google
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page vi…
CVE-2026-87468CVE-2026-87468
CVSS 6.5google
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromi…
CVE-2026-87467CVE-2026-87467
CVSS 8.1google
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sand…
CVE-2026-87466CVE-2026-87466
CVSS 4.3google
Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro…
CVE-2026-87465CVE-2026-87465
CVSS 4.2google
Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI ele…
CVE-2026-87464CVE-2026-87464
CVSS 9.6google
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page…
CVE-2026-87463CVE-2026-87463
CVSS 4.8google
Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially spoof address bar via cra…
CVE-2026-87462CVE-2026-87462
CVSS 5.4google
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafte…
CVE-2026-87461CVE-2026-87461
CVSS 4.3google
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted Chrome extension. (Chromium …
CVE-2026-87460CVE-2026-87460
CVSS 8.8google
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa…
CVE-2026-87459CVE-2026-87459
CVSS 6.5google
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Ch…
CVE-2026-87458CVE-2026-87458
CVSS 5.4google
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a cra…
CVE-2026-87457CVE-2026-87457
CVSS 8.1google
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a lo…
CVE-2026-87456CVE-2026-87456
CVSS 3.4google
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outsi…
CVE-2026-87455CVE-2026-87455
CVSS 9.6google
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte…
CVE-2026-87454CVE-2026-87454
CVSS 6.5google
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HT…
CVE-2026-87453CVE-2026-87453
CVSS 5.3google
Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive…
CVE-2026-87452CVE-2026-87452
CVSS 3.1google
Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentia…
CVE-2026-87451CVE-2026-87451
CVSS 3.1google
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin…
CVE-2026-87450CVE-2026-87450
CVSS 7.5google
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive info…
CVE-2026-87449CVE-2026-87449
CVSS 4.3google
Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a…
CVE-2026-87448CVE-2026-87448
CVSS 9.6google
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p…
CVE-2026-87447CVE-2026-87447
CVSS 6.5google
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy …
CVE-2026-87446CVE-2026-87446
CVSS 6.5google
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restri…
CVE-2026-87445CVE-2026-87445
CVSS 5.4google
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secur…
CVE-2026-87444CVE-2026-87444
CVSS 8.8google
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p…
CVE-2026-87443CVE-2026-87443
CVSS 6.5google
Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro…
CVE-2026-87442CVE-2026-87442
CVSS 3.1google
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass w…
CVE-2026-87441CVE-2026-87441
CVSS 6.5google
Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome …
CVE-2026-87440CVE-2026-87440
CVSS 8.8google
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p…
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.