CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

1,209 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-10904	8.8	high	google / chrome	Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute ar	93d ago
CVE-2026-10903	8.8	high	google / chrome	Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary co	93d ago
CVE-2026-10902	8.8	high	google / chrome	Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary cod	93d ago
CVE-2026-10897	8.8	high	google / chrome	Inappropriate implementation in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potential	93d ago
CVE-2026-10896	8.8	high	google / chrome	Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execu	93d ago
CVE-2026-10895	8.8	high	google / chrome	Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary cod	93d ago
CVE-2026-10893	8.8	high	google / chrome	Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrar	93d ago
CVE-2026-10891	8.8	high	google / chrome	Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially ex	93d ago
CVE-2026-10890	8.8	high	google / chrome	Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to	93d ago
CVE-2026-10888	8.8	high	google / chrome	Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network	93d ago
CVE-2026-10885	8.8	high	google / chrome	Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execu	93d ago
CVE-2026-10883	8.8	high	google / chrome	Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit h	93d ago
CVE-2026-10882	8.8	high	google / chrome	Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary c	93d ago
CVE-2026-9999	8.8	high	google / chrome	Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to	100d ago
CVE-2026-9995	8.8	high	google / chrome	Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	100d ago
CVE-2026-9992	8.8	high	google / chrome	Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	100d ago
CVE-2026-9984	8.8	high	google / chrome	Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbit	100d ago
CVE-2026-9983	8.8	high	google / chrome	Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9978	8.8	high	google / chrome	Use after free in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9976	8.8	high	google / chrome	Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute a	100d ago
CVE-2026-9973	8.8	high	google / chrome	Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	100d ago
CVE-2026-9969	8.8	high	google / chrome	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attac	100d ago
CVE-2026-9968	8.8	high	google / chrome	Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9965	8.8	high	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially expl	100d ago
CVE-2026-9962	8.8	high	google / chrome	Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary co	100d ago
CVE-2026-9961	8.8	high	google / chrome	Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially	100d ago
CVE-2026-9958	8.8	high	google / chrome	Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit	100d ago
CVE-2026-9957	8.8	high	google / chrome	Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9952	8.8	high	google / chrome	Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary	100d ago
CVE-2026-9947	8.8	high	google / chrome	Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9945	8.8	high	google / chrome	Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute ar	100d ago
CVE-2026-9941	8.8	high	google / chrome	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	100d ago
CVE-2026-9940	8.8	high	google / chrome	Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exp	100d ago
CVE-2026-9939	8.8	high	google / chrome	Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arb	100d ago
CVE-2026-9938	8.8	high	google / chrome	Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute ar	100d ago
CVE-2026-9928	8.8	high	google / chrome	Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execut	100d ago
CVE-2026-9927	8.8	high	google / chrome	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	100d ago
CVE-2026-9923	8.8	high	google / chrome	Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit he	100d ago
CVE-2026-9910	8.8	high	google / chrome	Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute	100d ago
CVE-2026-9897	8.8	high	google / chrome	Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9896	8.8	high	google / chrome	Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	100d ago
CVE-2026-9887	8.8	high	google / chrome	Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	100d ago
CVE-2026-9884	8.8	high	google / chrome	Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbi	100d ago
CVE-2026-9883	8.8	high	google / chrome	Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-9879	8.8	high	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrar	100d ago
CVE-2026-9878	8.8	high	google / chrome	Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod	100d ago
CVE-2026-9873	8.8	high	google / chrome	Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c	100d ago
CVE-2026-10021	8.8	high	google / chrome	Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attack	100d ago
CVE-2026-10019	8.8	high	google / chrome	Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin	100d ago
CVE-2026-10016	8.8	high	google / chrome	Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-10015	8.8	high	google / chrome	Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary co	100d ago
CVE-2026-10013	8.8	high	google / chrome	Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrar	100d ago
CVE-2026-10007	8.8	high	google / chrome	Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code	100d ago
CVE-2026-10002	8.8	high	google / chrome	Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit	100d ago
CVE-2026-9126	8.8	high	google / chrome	Use after free in DOM in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary co	108d ago
CVE-2026-9121	8.8	high	google / chrome	Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially expl	108d ago
CVE-2026-9120	8.8	high	google / chrome	Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary co	108d ago
CVE-2026-9119	8.8	high	google / chrome	Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arb	108d ago
CVE-2026-9118	8.8	high	google / chrome	Use after free in XR in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbit	108d ago
CVE-2026-9114	8.8	high	google / chrome	Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary c	108d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker