WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor google✕Product chrome✕
Overview 7,756 matches · 0 in Waratek scope · 0 protected · 90 exploited · 78 CISA KEV · 113 public PoC · 23 EPSS ≥ 0.5
7,756matches 0in Waratek scope0.0% 0protected0.0% 90exploited1.2% 78CISA KEV1.0% 113public PoC1.5% 23EPSS ≥ 0.50.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 6 0.1% Not applicable 7,750 99.9% Withdrawn CVE 0 0.0%
Critical 623 8.0% High 3,823 49.3% Medium 3,144 40.5% Low 166 2.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7,756 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 90 1.2% Working exploit published 49 0.6% Proof of concept only 136 1.8% Forecast only 2 0.0% No public exploit 7,479 96.4%
split by peak 3,944 / year
Not applicable: 7,750Outside Waratek scope: 6 Low: 166Medium: 3,144High: 3,823Critical: 623 not blocked: 7,756 No public exploit: 7,479Forecast only: 2Proof of concept only: 136Working exploit published: 49Exploited: 90
20083 Not applicable3 Medium3 not blocked3 Working exploit published2 No public exploit1 200940 Not applicable40 High13 Medium26 Low1 not blocked40 Working exploit published10 No public exploit30 2010153 Not applicable153 Critical12 High84 Medium56 Low1 not blocked153 Working exploit published6 No public exploit147 2011277 Not applicable277 High117 Medium159 Low1 not blocked277 Exploited2 Working exploit published1 Proof of concept only1 No public exploit273 2012255 Not applicable255 Critical1 High118 Medium134 Low2 not blocked255 Working exploit published6 Proof of concept only3 No public exploit246 2013181 Not applicable181 High104 Medium77 not blocked181 Exploited1 Working exploit published2 No public exploit178 2014133 Not applicable133 Critical1 High97 Medium35 not blocked133 Exploited1 Working exploit published2 No public exploit130 2015186 Outside Waratek scope3 Not applicable183 Critical3 High103 Medium79 Low1 not blocked186 Working exploit published4 Proof of concept only1 No public exploit181 2016172 Not applicable172 Critical17 High94 Medium60 Low1 not blocked172 Exploited2 No public exploit170 2017156 Not applicable156 Critical4 High65 Medium85 Low2 not blocked156 Exploited3 No public exploit153 2018166 Not applicable166 Critical5 High73 Medium87 Low1 not blocked166 Exploited4 Working exploit published3 Proof of concept only1 No public exploit158 2019350 Outside Waratek scope1 Not applicable349 Critical11 High145 Medium192 Low2 not blocked350 Exploited5 Working exploit published10 Proof of concept only1 No public exploit334 2020261 Outside Waratek scope1 Not applicable260 Critical19 High134 Medium108 not blocked261 Exploited6 Working exploit published2 Proof of concept only2 No public exploit251 2021354 Not applicable354 Critical33 High218 Medium102 Low1 not blocked354 Exploited22 Proof of concept only5 No public exploit327 2022357 Not applicable357 Critical15 High242 Medium100 not blocked357 Exploited13 Working exploit published1 Proof of concept only29 Forecast only1 No public exploit313 2023301 Outside Waratek scope1 Not applicable300 Critical10 High176 Medium114 Low1 not blocked301 Exploited8 Proof of concept only7 Forecast only1 No public exploit285 2024260 Not applicable260 Critical21 High184 Medium54 Low1 not blocked260 Exploited7 Proof of concept only36 No public exploit217 2025207 Not applicable207 Critical5 High110 Medium90 Low2 not blocked207 Exploited8 Proof of concept only11 No public exploit188 20263,944 Not applicable3,944 Critical466 High1,746 Medium1,583 Low149 not blocked3,944 Exploited8 Proof of concept only39 No public exploit3,897
2008201020122014201620182020202220242026
7,756 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 78 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-126922 Low 2026-11-11 Not applicable No public exploit Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126915 High 2026-11-11 Not applicable No public exploit Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126907 Low 2026-11-11 Not applicable No public exploit Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126906 Medium 2026-11-11 Not applicable No public exploit Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)
CVE-2026-126903 High 2026-11-11 Not applicable No public exploit Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126902 High 2026-11-11 Not applicable No public exploit Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126895 High 2026-11-11 Not applicable No public exploit Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-126894 Low 2026-11-11 Not applicable No public exploit Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126893 High 2026-11-11 Not applicable No public exploit Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126892 High 2026-11-11 Not applicable No public exploit Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126891 Medium 2026-11-11 Not applicable No public exploit Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126890 High 2026-11-11 Not applicable No public exploit Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126889 High 2026-11-11 Not applicable No public exploit Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126888 High 2026-11-11 Not applicable No public exploit Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126887 High 2026-11-11 Not applicable No public exploit Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126886 High 2026-11-11 Not applicable No public exploit Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126885 Critical 2026-11-11 Not applicable No public exploit Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-126884 Medium 2026-11-11 Not applicable No public exploit Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126883 High 2026-11-11 Not applicable No public exploit Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126882 Low 2026-11-11 Not applicable No public exploit Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126881 High 2026-11-11 Not applicable No public exploit Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126880 High 2026-11-11 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126879 High 2026-11-11 Not applicable No public exploit Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-126878 Medium 2026-11-11 Not applicable No public exploit Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126877 High 2026-11-11 Not applicable No public exploit Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126876 High 2026-11-11 Not applicable No public exploit Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126875 High 2026-11-11 Not applicable No public exploit Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126874 High 2026-11-11 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126873 High 2026-11-11 Not applicable No public exploit Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126872 Critical 2026-11-11 Not applicable No public exploit Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126871 Medium 2026-11-11 Not applicable No public exploit Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126870 Medium 2026-11-11 Not applicable No public exploit Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126869 High 2026-11-11 Not applicable No public exploit Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126868 High 2026-11-11 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126867 High 2026-11-11 Not applicable No public exploit Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126866 High 2026-11-11 Not applicable No public exploit Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
CVE-2026-126865 High 2026-11-11 Not applicable No public exploit Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126864 High 2026-11-11 Not applicable No public exploit Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126863 High 2026-11-11 Not applicable No public exploit Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126862 High 2026-11-11 Not applicable No public exploit Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: High)
CVE-2026-126861 High 2026-11-11 Not applicable No public exploit Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126860 High 2026-11-11 Not applicable No public exploit Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126859 Critical 2026-11-11 Not applicable No public exploit Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126858 Medium 2026-11-11 Not applicable No public exploit Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126857 Medium 2026-11-11 Not applicable No public exploit Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126856 Medium 2026-11-11 Not applicable No public exploit Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126855 Medium 2026-11-11 Not applicable No public exploit Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126854 Medium 2026-11-11 Not applicable No public exploit Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126853 Low 2026-11-11 Not applicable No public exploit Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126850 Medium 2026-11-11 Not applicable No public exploit Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126849 High 2026-11-11 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126848 Low 2026-11-11 Not applicable No public exploit Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126847 High 2026-11-11 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-126840 High 2026-11-11 Not applicable No public exploit Out of bounds write in Network in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125350 High 2026-11-10 Not applicable Exploited Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125349 Low 2026-11-10 Not applicable No public exploit Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-125348 High 2026-11-10 Not applicable No public exploit Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125347 Critical 2026-11-10 Not applicable No public exploit Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125345 Medium 2026-11-10 Not applicable No public exploit Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125344 High 2026-11-10 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125343 High 2026-11-10 Not applicable No public exploit Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-125342 Medium 2026-11-10 Not applicable No public exploit Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121257 Critical 2026-11-03 Not applicable No public exploit Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-121256 High 2026-11-03 Not applicable No public exploit Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121255 Medium 2026-11-03 Not applicable No public exploit Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121254 Medium 2026-11-03 Not applicable No public exploit Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121253 Medium 2026-11-03 Not applicable No public exploit Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. (Chromium security severity: Low)
CVE-2026-121252 High 2026-11-03 Not applicable No public exploit Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121251 High 2026-11-03 Not applicable No public exploit Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121250 Critical 2026-11-03 Not applicable No public exploit Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
CVE-2026-121249 Critical 2026-11-03 Not applicable No public exploit Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121248 Medium 2026-11-03 Not applicable Proof of concept only Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-121247 Critical 2026-11-03 Not applicable No public exploit Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121246 Critical 2026-11-03 Not applicable No public exploit Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121245 Medium 2026-11-03 Not applicable No public exploit Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121244 Medium 2026-11-03 Not applicable No public exploit UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121243 Medium 2026-11-03 Not applicable No public exploit Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121242 Medium 2026-11-03 Not applicable No public exploit Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)
CVE-2026-121241 Critical 2026-11-03 Not applicable No public exploit Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121240 Medium 2026-11-03 Not applicable No public exploit Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
CVE-2026-121239 Medium 2026-11-03 Not applicable No public exploit Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121238 High 2026-11-03 Not applicable No public exploit Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121237 Medium 2026-11-03 Not applicable Proof of concept only Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121236 High 2026-11-03 Not applicable No public exploit Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121235 Medium 2026-11-03 Not applicable No public exploit Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121234 Critical 2026-11-03 Not applicable No public exploit Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121233 High 2026-11-03 Not applicable No public exploit Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121232 Medium 2026-11-03 Not applicable No public exploit Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low)
CVE-2026-121231 Medium 2026-11-03 Not applicable No public exploit Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121230 High 2026-11-03 Not applicable No public exploit Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121229 Critical 2026-11-03 Not applicable No public exploit Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-121228 High 2026-11-03 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121227 High 2026-11-03 Not applicable No public exploit Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121226 High 2026-11-03 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121225 Medium 2026-11-03 Not applicable No public exploit Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121224 High 2026-11-03 Not applicable No public exploit Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)
CVE-2026-121223 Medium 2026-11-03 Not applicable No public exploit Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-121222 High 2026-11-03 Not applicable No public exploit Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-121221 High 2026-11-03 Not applicable No public exploit Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-121220 High 2026-11-03 Not applicable Proof of concept only Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
‹ prev page 1 of 78 next ›