Loading market data...

CVE Feed

Latest vulnerabilities from the National Vulnerability Database.

20440
Total
1466
Critical
6204
High
6496
Medium
CVE ID Severity Score Description Published
CVE-2026-14061 MEDIUM 6.5 Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted … Jun 30, 2026
CVE-2026-14060 HIGH 7.8 Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform privilege escalation via a … Jun 30, 2026
CVE-2026-14059 MEDIUM 6.5 Insufficient policy enforcement in Related-Website-Sets in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium … Jun 30, 2026
CVE-2026-14058 MEDIUM 4.3 Insufficient policy enforcement in Parser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. … Jun 30, 2026
CVE-2026-14057 MEDIUM 4.3 Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium … Jun 30, 2026
CVE-2026-14056 CRITICAL 9.6 Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially … Jun 30, 2026
CVE-2026-14055 CRITICAL 9.6 Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer … Jun 30, 2026
CVE-2026-14054 MEDIUM 4.3 Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium … Jun 30, 2026
CVE-2026-14053 MEDIUM 4.3 Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data … Jun 30, 2026
CVE-2026-14052 MEDIUM 4.3 Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. … Jun 30, 2026
CVE-2026-14051 MEDIUM 6.5 Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information … Jun 30, 2026
CVE-2026-14050 MEDIUM 6.5 Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium … Jun 30, 2026
CVE-2026-14049 MEDIUM 5.3 Inappropriate implementation in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information … Jun 30, 2026
CVE-2026-14048 MEDIUM 6.5 Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from … Jun 30, 2026
CVE-2026-14047 MEDIUM 4.3 Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to bypass … Jun 30, 2026
CVE-2026-14046 MEDIUM 4.3 Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML … Jun 30, 2026
CVE-2026-14045 MEDIUM 4.3 Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak … Jun 30, 2026
CVE-2026-14044 CRITICAL 9.6 Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a … Jun 30, 2026
CVE-2026-14043 CRITICAL 9.6 Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a … Jun 30, 2026
CVE-2026-14042 MEDIUM 4.3 Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. … Jun 30, 2026
CVE-2026-14041 HIGH 8.8 Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium … Jun 30, 2026
CVE-2026-14040 HIGH 8.8 Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to potentially … Jun 30, 2026
CVE-2026-14039 MEDIUM 4.3 Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. … Jun 30, 2026
CVE-2026-14038 CRITICAL 9.3 Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process … Jun 30, 2026
CVE-2026-14037 CRITICAL 9.6 Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a … Jun 30, 2026