CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

939 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-13830	8.8	high	google / chrome	Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute	67d ago
CVE-2026-13825	8.8	high	google / chrome	Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit	67d ago
CVE-2026-13821	8.8	high	google / chrome	Use after free in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary co	67d ago
CVE-2026-13817	8.8	high	google / chrome	Insufficient validation of untrusted input in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attack	67d ago
CVE-2026-13815	8.8	high	google / chrome	Use after free in Blink in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary cod	67d ago
CVE-2026-13811	8.8	high	google / chrome	Use after free in IME in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code	67d ago
CVE-2026-13805	8.8	high	google / chrome	Use after free in GFX in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to execute arbitrar	67d ago
CVE-2026-13788	8.8	high	google / chrome	Use after free in Fullscreen in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execu	67d ago
CVE-2026-13786	8.8	high	google / chrome	Use after free in Ozone in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary cod	67d ago
CVE-2026-13784	8.8	high	google / chrome	Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to	67d ago
CVE-2026-13783	8.8	high	google / chrome	Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to	67d ago
CVE-2026-13777	8.8	high	google / chrome	Insufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remo	67d ago
CVE-2026-13038	8.8	high	google / chrome	Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.197 allowed a remote attacker to execut	73d ago
CVE-2026-13036	8.8	high	google / chrome	Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary co	73d ago
CVE-2026-13035	8.8	high	google / chrome	Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to execute a	73d ago
CVE-2026-13033	8.8	high	google / chrome	Out of bounds read and write in Blink>InterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote att	73d ago
CVE-2026-13031	8.8	high	google / chrome	Use after free in Blink in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary co	73d ago
CVE-2026-13027	8.8	high	google / chrome	Use after free in FileSystem in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to potentially exp	73d ago
CVE-2026-13026	8.8	high	google / chrome	Use after free in Digital Credentials in Google Chrome on Mac prior to 149.0.7827.197 allowed a remote attacker to	73d ago
CVE-2026-12466	8.8	high	google / chrome	Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to ex	80d ago
CVE-2026-12452	8.8	high	google / chrome	Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to poten	80d ago
CVE-2026-12448	8.8	high	google / chrome	Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attac	80d ago
CVE-2026-12447	8.8	high	google / chrome	Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbit	80d ago
CVE-2026-12443	8.8	high	google / chrome	Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute	80d ago
CVE-2026-12442	8.8	high	google / chrome	Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execu	80d ago
CVE-2026-12441	8.8	high	google / chrome	Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potent	80d ago
CVE-2026-12439	8.8	high	google / chrome	Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potent	80d ago
CVE-2026-0164	8.8	high	google / android	In Modem, there is a possible out of bounds write due to a missing bounds check.	81d ago
CVE-2026-0162	8.8	high	google / android	In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion.	81d ago
CVE-2026-0161	8.8	high	google / android	In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow.	81d ago
CVE-2026-0160	8.8	high	google / android	In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write	81d ago
CVE-2026-0154	8.8	high	google / android	In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption.	81d ago
CVE-2026-0151	8.8	high	google / android	In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow.	81d ago
CVE-2026-0149	8.8	high	google / android	In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow.	81d ago
CVE-2026-0148	8.8	high	google / android	In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer	81d ago
CVE-2026-0147	8.8	high	google / android	In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a	81d ago
CVE-2026-0146	8.8	high	google / android	In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missin	81d ago
CVE-2026-0139	8.8	high	google / android	In Modem, there is a possible out of bounds write due to a missing bounds check.	81d ago
CVE-2026-0132	8.8	high	google / android	In Modem, there is a possible out of bounds write due to a heap buffer overflow.	81d ago
CVE-2026-12035	8.8	high	google / chrome	Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potential	86d ago
CVE-2026-12020	8.8	high	google / chrome	Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentiall	86d ago
CVE-2026-12018	8.8	high	google / chrome	Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a local attacker	86d ago
CVE-2026-12007	8.8	high	google / chrome	Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute ar	86d ago
CVE-2026-11699	8.8	high	google / chrome	Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potential	89d ago
CVE-2026-11698	8.8	high	google / chrome	Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potential	89d ago
CVE-2026-11688	8.8	high	google / chrome	Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute	89d ago
CVE-2026-11687	8.8	high	google / chrome	Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially ex	89d ago
CVE-2026-11683	8.8	high	google / chrome	Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrar	89d ago
CVE-2026-11681	8.8	high	google / chrome	Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially	89d ago
CVE-2026-11680	8.8	high	google / chrome	Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute a	89d ago
CVE-2026-11674	8.8	high	google / chrome	Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra	89d ago
CVE-2026-11673	8.8	high	google / chrome	Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arb	89d ago
CVE-2026-11670	8.8	high	google / chrome	Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code	89d ago
CVE-2026-11664	8.8	high	google / chrome	Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially explo	89d ago
CVE-2026-11662	8.8	high	google / chrome	Type Confusion in Bindings in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary	89d ago
CVE-2026-11657	8.8	high	google / chrome	Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute ar	89d ago
CVE-2026-11650	8.8	high	google / chrome	Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code	89d ago
CVE-2026-11649	8.8	high	google / chrome	Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code	89d ago
CVE-2026-11648	8.8	high	google / chrome	Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to pote	89d ago
CVE-2026-11646	8.8	high	google / chrome	Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute ar	89d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker