| CVE-2026-3916 | 9.6 | critical | google / chrome | Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially p | 178d ago |
| CVE-2026-16416 | 9.3 | critical | google / chrome | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially pe | 46d ago |
| CVE-2026-14038 | 9.3 | critical | google / chrome | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0.7871.47 allowed a remot | 67d ago |
| CVE-2026-79148 | 9.1 | critical | google / chrome | Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social e | 11d ago |
| CVE-2026-79058 | 9.1 | critical | google / chrome | Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compr | 11d ago |
| CVE-2026-17666 | 9.1 | critical | google / chrome | Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged netwo | 38d ago |
| CVE-2026-13872 | 9.1 | critical | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 al | 67d ago |
| CVE-2026-13852 | 9.1 | critical | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 al | 67d ago |
| CVE-2026-13851 | 9.1 | critical | google / chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 al | 67d ago |
| CVE-2026-11720 | 9.1 | critical | google / mcp toolbox for databases | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. | 68d ago |
| CVE-2026-11718 | 9.1 | critical | google / mcp toolbox for databases | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of | 79d ago |
| CVE-2026-11717 | 9.1 | critical | google / mcp toolbox for databases | An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of | 79d ago |
| CVE-2026-11153 | 9.1 | critical | google / chrome | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to lea | 93d ago |
| CVE-2026-84324 | 9 | critical | google / chrome | Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary cod | 4d ago |
| CVE-2026-9891 | 9 | critical | google / chrome | Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised | 100d ago |
| CVE-2026-9881 | 9 | critical | google / chrome | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a use | 100d ago |
| CVE-2026-85046exploited | 8.8 | high | google / chrome | Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code i | 2d ago |
| CVE-2026-84350 | 8.8 | high | google / chrome | Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social eng | 4d ago |
| CVE-2026-84347 | 8.8 | high | google / chrome | Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary co | 4d ago |
| CVE-2026-84326 | 8.8 | high | google / chrome | Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrar | 4d ago |
| CVE-2026-82072 | 8.8 | high | google / chrome | Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary co | 9d ago |
| CVE-2026-79266 | 8.8 | high | google / chrome | Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social eng | 11d ago |
| CVE-2026-79244 | 8.8 | high | google / chrome | Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary | 11d ago |
| CVE-2026-79240 | 8.8 | high | google / chrome | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to po | 11d ago |
| CVE-2026-79236 | 8.8 | high | google / chrome | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 11d ago |
| CVE-2026-79231 | 8.8 | high | google / chrome | Buffer overflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary co | 11d ago |
| CVE-2026-79230 | 8.8 | high | google / chrome | Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to | 11d ago |
| CVE-2026-79227 | 8.8 | high | google / chrome | Type confusion in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social eng | 11d ago |
| CVE-2026-79226 | 8.8 | high | google / chrome | Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote at | 11d ago |
| CVE-2026-79223 | 8.8 | high | google / chrome | Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory insi | 11d ago |
| CVE-2026-79219 | 8.8 | high | google / chrome | Use after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social en | 11d ago |
| CVE-2026-79215 | 8.8 | high | google / chrome | Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute | 11d ago |
| CVE-2026-79209 | 8.8 | high | google / chrome | Type confusion in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execu | 11d ago |
| CVE-2026-79202 | 8.8 | high | google / chrome | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrar | 11d ago |
| CVE-2026-79198 | 8.8 | high | google / chrome | Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary | 11d ago |
| CVE-2026-79197 | 8.8 | high | google / chrome | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 11d ago |
| CVE-2026-79195 | 8.8 | high | google / chrome | Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary co | 11d ago |
| CVE-2026-79187 | 8.8 | high | google / chrome | Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary co | 11d ago |
| CVE-2026-79183 | 8.8 | high | google / chrome | Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging socia | 11d ago |
| CVE-2026-79182 | 8.8 | high | google / chrome | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentiall | 11d ago |
| CVE-2026-79142 | 8.8 | high | google / chrome | Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execut | 11d ago |
| CVE-2026-79127 | 8.8 | high | google / chrome | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrar | 11d ago |
| CVE-2026-79119 | 8.8 | high | google / chrome | Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code | 11d ago |
| CVE-2026-79097 | 8.8 | high | google / chrome | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 11d ago |
| CVE-2026-79073 | 8.8 | high | google / chrome | Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potential | 11d ago |
| CVE-2026-79069 | 8.8 | high | google / chrome | Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potential | 11d ago |
| CVE-2026-79048 | 8.8 | high | google / chrome | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to po | 11d ago |
| CVE-2026-79045 | 8.8 | high | google / chrome | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineeri | 11d ago |
| CVE-2026-79033 | 8.8 | high | google / chrome | Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker | 11d ago |
| CVE-2026-78990 | 8.8 | high | google / chrome | Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitra | 11d ago |
| CVE-2026-78978 | 8.8 | high | google / chrome | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to pot | 11d ago |
| CVE-2026-78963 | 8.8 | high | google / chrome | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentiall | 11d ago |
| CVE-2026-78956 | 8.8 | high | google / chrome | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineeri | 11d ago |
| CVE-2026-78950 | 8.8 | high | google / chrome | Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execut | 11d ago |
| CVE-2026-78944 | 8.8 | high | google / chrome | Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social eng | 11d ago |
| CVE-2026-78938 | 8.8 | high | google / chrome | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 11d ago |
| CVE-2026-78910 | 8.8 | high | google / chrome | Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code | 11d ago |
| CVE-2026-78905 | 8.8 | high | google / chrome | Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute a | 11d ago |
| CVE-2026-78899 | 8.8 | high | google / chrome | Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code i | 11d ago |
| CVE-2026-78891 | 8.8 | high | google / chrome | Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary c | 11d ago |
