Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
23570
Total
1678
Critical
7413
High
7498
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-11047 | CRITICAL | 9.6 | Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform … | Jun 04, 2026 |
| CVE-2026-11046 | HIGH | 8.8 | Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute … | Jun 04, 2026 |
| CVE-2026-11045 | MEDIUM | 6.5 | Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain … | Jun 04, 2026 |
| CVE-2026-11044 | MEDIUM | 6.5 | Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via … | Jun 04, 2026 |
| CVE-2026-11043 | CRITICAL | 9.6 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to … | Jun 04, 2026 |
| CVE-2026-11042 | HIGH | 8.8 | Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures … | Jun 04, 2026 |
| CVE-2026-11041 | HIGH | 8.8 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process … | Jun 04, 2026 |
| CVE-2026-11040 | HIGH | 8.3 | Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a … | Jun 04, 2026 |
| CVE-2026-11039 | MEDIUM | 6.5 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security … | Jun 04, 2026 |
| CVE-2026-11038 | MEDIUM | 6.5 | Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via malicious network traffic. … | Jun 04, 2026 |
| CVE-2026-11037 | CRITICAL | 9.6 | Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted … | Jun 04, 2026 |
| CVE-2026-11036 | MEDIUM | 6.5 | Inappropriate implementation in DOM in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium … | Jun 04, 2026 |
| CVE-2026-11035 | HIGH | 7.3 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via a crafted XML … | Jun 04, 2026 |
| CVE-2026-11034 | MEDIUM | 6.1 | Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts … | Jun 04, 2026 |
| CVE-2026-11033 | MEDIUM | 6.5 | Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via … | Jun 04, 2026 |
| CVE-2026-11032 | MEDIUM | 6.5 | Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium … | Jun 04, 2026 |
| CVE-2026-11031 | MEDIUM | 4.3 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network … | Jun 04, 2026 |
| CVE-2026-11030 | HIGH | 8.8 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. (Chromium … | Jun 04, 2026 |
| CVE-2026-11029 | UNKNOWN | — | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the … | Jun 04, 2026 |
| CVE-2026-11028 | HIGH | 8.8 | Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process … | Jun 04, 2026 |
| CVE-2026-11027 | MEDIUM | 6.5 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak … | Jun 04, 2026 |
| CVE-2026-11026 | MEDIUM | 6.5 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation … | Jun 04, 2026 |
| CVE-2026-11025 | UNKNOWN | — | Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass content security policy via a crafted … | Jun 04, 2026 |
| CVE-2026-11024 | UNKNOWN | — | Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. … | Jun 04, 2026 |
| CVE-2026-11023 | UNKNOWN | — | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy … | Jun 04, 2026 |