| CVE-2026-9954 | 7.5 | — | — | — | google / chrome | Use after free in TabStrip in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user | 146d ago |
| CVE-2026-9934 | 7.5 | — | — | — | google / chrome | Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to e | 146d ago |
| CVE-2026-9933 | 7.5 | — | — | — | google / chrome | Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to | 146d ago |
| CVE-2026-9922 | 7.5 | — | — | — | google / chrome | Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised | 146d ago |
| CVE-2026-9909 | 7.5 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the | 146d ago |
| CVE-2026-9901 | 7.5 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the | 146d ago |
| CVE-2026-10022 | 7.5 | — | — | — | google / chrome | Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install | 146d ago |
| CVE-2026-10009 | 7.5 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised th | 146d ago |
| CVE-2026-10006 | 7.5 | — | — | — | google / chrome | Race in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code insi | 146d ago |
| CVE-2026-10005 | 7.5 | — | — | — | google / chrome | Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who con | 146d ago |
| CVE-2026-10003 | 7.5 | — | — | — | google / chrome | Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to | 146d ago |
| CVE-2026-9123 | 7.5 | — | — | — | google / chrome | Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a l | 154d ago |
| CVE-2026-9117 | 7.5 | — | — | — | google / chrome | Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had | 154d ago |
| CVE-2026-8585 | 7.5 | — | — | — | google / chrome | Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who | 160d ago |
| CVE-2026-8557 | 7.5 | — | — | — | google / chrome | Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromi | 160d ago |
| CVE-2026-8547 | 7.5 | — | — | — | google / chrome | Insufficient policy enforcement in Passwords in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote a | 160d ago |
| CVE-2026-8521 | 7.5 | — | — | — | google / chrome | Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrar | 160d ago |
| CVE-2026-8510 | 7.5 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had comp | 160d ago |
| CVE-2026-3932 | 7.5 | — | — | — | google / chrome | Insufficient policy enforcement in PDF in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker | 224d ago |
| CVE-2026-3924 | 7.5 | — | — | — | google / chrome | use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromise | 224d ago |
| CVE-2026-79286 | 7.4 | — | — | — | google / chrome | Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker | 57d ago |
| CVE-2026-19139 | 7.4 | — | — | — | google / chrome | Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform | 76d ago |
| CVE-2026-10976 | 7.4 | — | — | — | google / chrome | Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially | 139d ago |
| CVE-2026-10973 | 7.4 | — | — | — | google / chrome | Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin d | 139d ago |
| CVE-2026-10968 | 7.4 | — | — | — | google / chrome | Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a re | 139d ago |
| CVE-2026-0131 | 7.3 | — | — | — | google / android | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. | 127d ago |
| CVE-2026-11115 | 7.3 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform O | 139d ago |
| CVE-2026-11035 | 7.3 | — | — | — | google / chrome | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local att | 139d ago |
| CVE-2026-78892 | 7.1 | — | — | — | google / chrome | Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attack | 57d ago |
| CVE-2026-17888 | 7.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attac | 84d ago |
| CVE-2026-17867 | 7.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attack | 84d ago |
| CVE-2026-17811 | 7.1 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentiall | 84d ago |
| CVE-2026-17750 | 7.1 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a | 84d ago |
| CVE-2026-17744 | 7.1 | — | — | — | google / chrome | Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attac | 84d ago |
| CVE-2026-17741 | 7.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a | 84d ago |
| CVE-2026-11269 | 7.1 | — | — | — | google / chrome | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privil | 139d ago |
| CVE-2026-17993 | 7 | — | — | — | google / chrome | Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege e | 84d ago |
| CVE-2026-0083 | 7 | — | — | — | google / android | In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. | 126d ago |
| CVE-2026-0125 | 7 | — | — | — | google / android | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. | 127d ago |
