CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

1,209 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-13782	10	critical	google / chrome	Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised th	67d ago
CVE-2026-84325	9.8	critical	google / chrome	Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker levera	4d ago
CVE-2026-79152	9.8	critical	google / chrome	Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attack	11d ago
CVE-2026-79090	9.8	critical	google / chrome	Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveragin	11d ago
CVE-2026-14537	9.8	critical	google / mcp toolbox for databases	Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and	36d ago
CVE-2026-14121	9.8	critical	google / chrome	Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute	67d ago
CVE-2026-14104	9.8	critical	google / chrome	Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a rem	67d ago
CVE-2026-13776	9.8	critical	google / chrome	Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r	67d ago
CVE-2026-13775	9.8	critical	google / chrome	Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the re	67d ago
CVE-2026-0126	9.8	critical	google / android	In WC-Radio, there is a possible out of bounds write due to a missing bounds check.	81d ago
CVE-2026-84354	9.6	critical	google / chrome	Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging	4d ago
CVE-2026-79290	9.6	critical	google / chrome	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code	11d ago
CVE-2026-79282	9.6	critical	google / chrome	Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute	11d ago
CVE-2026-79275	9.6	critical	google / chrome	Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod	11d ago
CVE-2026-79257	9.6	critical	google / chrome	Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod	11d ago
CVE-2026-79235	9.6	critical	google / chrome	Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod	11d ago
CVE-2026-79232	9.6	critical	google / chrome	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute ar	11d ago
CVE-2026-79200	9.6	critical	google / chrome	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code	11d ago
CVE-2026-79189	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially exec	11d ago
CVE-2026-79188	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially exec	11d ago
CVE-2026-79150	9.6	critical	google / chrome	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arb	11d ago
CVE-2026-79149	9.6	critical	google / chrome	Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod	11d ago
CVE-2026-79140	9.6	critical	google / chrome	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arb	11d ago
CVE-2026-79138	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to po	11d ago
CVE-2026-79131	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrar	11d ago
CVE-2026-79130	9.6	critical	google / chrome	Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary co	11d ago
CVE-2026-79129	9.6	critical	google / chrome	Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leverag	11d ago
CVE-2026-79128	9.6	critical	google / chrome	Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arb	11d ago
CVE-2026-79111	9.6	critical	google / chrome	Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially	11d ago
CVE-2026-79091	9.6	critical	google / chrome	Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging	11d ago
CVE-2026-79078	9.6	critical	google / chrome	Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine	11d ago
CVE-2026-79064	9.6	critical	google / chrome	Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging s	11d ago
CVE-2026-79056	9.6	critical	google / chrome	Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially e	11d ago
CVE-2026-79052	9.6	critical	google / chrome	Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code	11d ago
CVE-2026-79047	9.6	critical	google / chrome	Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine	11d ago
CVE-2026-79043	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially exec	11d ago
CVE-2026-79026	9.6	critical	google / chrome	Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social e	11d ago
CVE-2026-79019	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to po	11d ago
CVE-2026-79012	9.6	critical	google / chrome	Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leverag	11d ago
CVE-2026-78989	9.6	critical	google / chrome	Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to pot	11d ago
CVE-2026-78985	9.6	critical	google / chrome	Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker lev	11d ago
CVE-2026-78964	9.6	critical	google / chrome	Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially	11d ago
CVE-2026-78951	9.6	critical	google / chrome	Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbit	11d ago
CVE-2026-78948	9.6	critical	google / chrome	Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary co	11d ago
CVE-2026-78945	9.6	critical	google / chrome	Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine	11d ago
CVE-2026-78939	9.6	critical	google / chrome	Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised	11d ago
CVE-2026-78937	9.6	critical	google / chrome	Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveragin	11d ago
CVE-2026-78935	9.6	critical	google / chrome	Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacke	11d ago
CVE-2026-78909	9.6	critical	google / chrome	Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine	11d ago
CVE-2026-78904	9.6	critical	google / chrome	Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute a	11d ago
CVE-2026-78900	9.6	critical	google / chrome	Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentiall	11d ago
CVE-2026-76036	9.6	critical	google / chrome	Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execut	18d ago
CVE-2026-76035	9.6	critical	google / chrome	Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker	18d ago
CVE-2026-19175	9.6	critical	google / chrome	Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perfo	30d ago
CVE-2026-19171	9.6	critical	google / chrome	Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potential	30d ago
CVE-2026-19170	9.6	critical	google / chrome	Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potential	30d ago
CVE-2026-19166	9.6	critical	google / chrome	Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potenti	30d ago
CVE-2026-19164	9.6	critical	google / chrome	Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote att	30d ago
CVE-2026-19157	9.6	critical	google / chrome	Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to pote	30d ago
CVE-2026-19149	9.6	critical	google / chrome	Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially	30d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker