| CVE-2026-79020 | 8.1 | — | — | — | google / chrome | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read m | 58d ago |
| CVE-2026-79011 | 8.1 | — | — | — | google / chrome | UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging socia | 58d ago |
| CVE-2026-78913 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially exec | 58d ago |
| CVE-2026-76019 | 8.1 | — | — | — | google / chrome | Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had comp | 63d ago |
| CVE-2026-19153 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote at | 77d ago |
| CVE-2026-17995 | 8.1 | — | — | — | google / chrome | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of | 85d ago |
| CVE-2026-17869 | 8.1 | — | — | — | google / chrome | Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of | 85d ago |
| CVE-2026-17686 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | 85d ago |
| CVE-2026-14122 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 al | 114d ago |
| CVE-2026-14111 | 8.1 | — | — | — | google / chrome | Use after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to i | 114d ago |
| CVE-2026-14090 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS prior to 150.0.7871.47 al | 114d ago |
| CVE-2026-14032 | 8.1 | — | — | — | google / chrome | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who convinced a use | 114d ago |
| CVE-2026-14011 | 8.1 | — | — | — | google / chrome | Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform | 114d ago |
| CVE-2026-13974 | 8.1 | — | — | — | google / chrome | Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypa | 114d ago |
| CVE-2026-13864 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convince | 114d ago |
| CVE-2026-13819 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compr | 114d ago |
| CVE-2026-13806 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Accessibility in Google Chrome prior to 150.0.7871.47 allowed a remo | 114d ago |
| CVE-2026-13799 | 8.1 | — | — | — | google / chrome | Use after free in QUIC in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit he | 114d ago |
| CVE-2026-13791 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 150.0.7871.47 allowed an attacke | 114d ago |
| CVE-2026-13787 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to execu | 114d ago |
| CVE-2026-13779 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker to exec | 114d ago |
| CVE-2026-13774 | 8.1 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to i | 114d ago |
| CVE-2026-11719 | 8.1 | — | — | — | google / mcp toolbox for databases | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enfor | 127d ago |
| CVE-2026-12012 | 8.1 | — | — | — | google / chrome | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network pos | 133d ago |
| CVE-2026-11693 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had | 136d ago |
| CVE-2026-11689 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker wh | 136d ago |
| CVE-2026-11643 | 8.1 | — | — | — | google / chrome | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary co | 136d ago |
| CVE-2026-11231 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote atta | 140d ago |
| CVE-2026-11224 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute | 140d ago |
| CVE-2026-11185 | 8.1 | — | — | — | google / chrome | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a | 140d ago |
| CVE-2026-11170 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attac | 140d ago |
| CVE-2026-11169 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject ar | 140d ago |
| CVE-2026-11111 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of | 140d ago |
| CVE-2026-11015 | 8.1 | — | — | — | google / chrome | Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out o | 140d ago |
| CVE-2026-11011 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attac | 140d ago |
| CVE-2026-10930 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an | 140d ago |
| CVE-2026-10887 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute a | 140d ago |
| CVE-2026-9964 | 8.1 | — | — | — | google / chrome | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a use | 147d ago |
| CVE-2025-48640 | 8 | — | — | — | google / android | In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission ch | 128d ago |
| CVE-2026-11241 | 8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on | 140d ago |
| CVE-2026-0097 | 8 | — | — | — | google / android | In multiple locations, there is a possible way to bypass user interaction when pairing an LE device due to a logic | 143d ago |
| CVE-2026-0095 | 8 | — | — | — | google / android | In l2c_fcr_clone_buf of l2c_fcr.cc, there is a possible way to trigger controlled heap corruption within the privil | 143d ago |
| CVE-2026-0059 | 8 | — | — | — | google / android | In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer o | 143d ago |
| CVE-2026-17864 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to | 85d ago |
| CVE-2026-17863 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacke | 85d ago |
| CVE-2026-17862 | 7.8 | — | — | — | google / chrome | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform O | 85d ago |
| CVE-2026-17861 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local atta | 85d ago |
| CVE-2026-17654 | 7.8 | — | — | — | google / chrome | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privil | 85d ago |
| CVE-2026-16414 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local | 93d ago |
| CVE-2026-15905 | 7.8 | — | — | — | google / chrome | Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit he | 94d ago |
| CVE-2026-14124 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a lo | 114d ago |
| CVE-2026-14094 | 7.8 | — | — | — | google / chrome | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform | 114d ago |
| CVE-2026-14060 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowe | 114d ago |
| CVE-2026-14018 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 114d ago |
| CVE-2026-13927 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a loca | 114d ago |
| CVE-2026-13863 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowe | 114d ago |
| CVE-2026-13844 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 114d ago |
| CVE-2026-13827 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privi | 114d ago |
| CVE-2026-13800 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacke | 114d ago |
| CVE-2026-13778 | 7.8 | — | — | — | google / chrome | Use after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to execute arbitr | 114d ago |
