| CVE-2026-13782 | 10 | critical | chrome | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised th | 114d ago |
| CVE-2026-84325 | 9.8 | critical | chrome | Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker levera | 51d ago |
| CVE-2026-13775 | 9.8 | critical | chrome | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the re | 114d ago |
| CVE-2026-14537 | 9.8 | critical | mcp toolbox for databases | Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and | 84d ago |
| CVE-2026-79090 | 9.8 | critical | chrome | Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveragin | 58d ago |
| CVE-2026-14121 | 9.8 | critical | chrome | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute | 114d ago |
| CVE-2026-14104 | 9.8 | critical | chrome | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a rem | 114d ago |
| CVE-2026-0126 | 9.8 | critical | android | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. | 128d ago |
| CVE-2026-79152 | 9.8 | critical | chrome | Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attack | 58d ago |
| CVE-2026-13776 | 9.8 | critical | chrome | Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r | 114d ago |
| CVE-2026-11651 | 9.6 | critical | chrome | Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary | 136d ago |
| CVE-2026-79056 | 9.6 | critical | chrome | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially e | 58d ago |
| CVE-2026-11654 | 9.6 | critical | chrome | Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to poten | 136d ago |
| CVE-2026-11021 | 9.6 | critical | chrome | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a rem | 140d ago |
| CVE-2026-78937 | 9.6 | critical | chrome | Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveragin | 58d ago |
| CVE-2026-13859 | 9.6 | critical | chrome | Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potenti | 114d ago |
| CVE-2026-10881 | 9.6 | critical | chrome | Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potenti | 140d ago |
| CVE-2026-10971 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed | 140d ago |
| CVE-2026-17692 | 9.6 | critical | chrome | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who ha | 85d ago |
| CVE-2026-17837 | 9.6 | critical | chrome | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote at | 85d ago |
| CVE-2026-17726 | 9.6 | critical | chrome | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentia | 85d ago |
| CVE-2026-17834 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | 85d ago |
| CVE-2026-19149 | 9.6 | critical | chrome | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially | 77d ago |
| CVE-2026-78935 | 9.6 | critical | chrome | Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacke | 58d ago |
| CVE-2026-78985 | 9.6 | critical | chrome | Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker lev | 58d ago |
| CVE-2026-79150 | 9.6 | critical | chrome | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arb | 58d ago |
| CVE-2026-14037 | 9.6 | critical | chrome | Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c | 114d ago |
| CVE-2026-14120 | 9.6 | critical | chrome | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | 114d ago |
| CVE-2026-11043 | 9.6 | critical | chrome | Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had comp | 140d ago |
| CVE-2026-11697 | 9.6 | critical | chrome | Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacke | 136d ago |
| CVE-2026-11009 | 9.6 | critical | chrome | Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially | 140d ago |
| CVE-2026-11638 | 9.6 | critical | chrome | Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perfo | 136d ago |
| CVE-2026-16419 | 9.6 | critical | chrome | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacke | 93d ago |
| CVE-2026-14416 | 9.6 | critical | chrome | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perfor | 113d ago |
| CVE-2026-14382 | 9.6 | critical | chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | 113d ago |
| CVE-2026-14417 | 9.6 | critical | chrome | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a | 113d ago |
| CVE-2026-14423 | 9.6 | critical | chrome | Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a | 113d ago |
| CVE-2026-15901 | 9.6 | critical | chrome | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploi | 94d ago |
| CVE-2026-17656 | 9.6 | critical | chrome | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a | 85d ago |
| CVE-2026-17695 | 9.6 | critical | chrome | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to | 85d ago |
| CVE-2026-17681 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.7 | 85d ago |
| CVE-2026-17691 | 9.6 | critical | chrome | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to poten | 85d ago |
| CVE-2026-17708 | 9.6 | critical | chrome | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17721 | 9.6 | critical | chrome | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perf | 85d ago |
| CVE-2026-17758 | 9.6 | critical | chrome | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perf | 85d ago |
| CVE-2026-17832 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17940 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.7 | 85d ago |
| CVE-2026-17990 | 9.6 | critical | chrome | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote at | 85d ago |
| CVE-2026-19171 | 9.6 | critical | chrome | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potential | 77d ago |
| CVE-2026-78909 | 9.6 | critical | chrome | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine | 58d ago |
| CVE-2026-78945 | 9.6 | critical | chrome | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engine | 58d ago |
| CVE-2026-79052 | 9.6 | critical | chrome | Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code | 58d ago |
| CVE-2026-79149 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod | 58d ago |
| CVE-2026-79140 | 9.6 | critical | chrome | Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arb | 58d ago |
| CVE-2026-79257 | 9.6 | critical | chrome | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary cod | 58d ago |
| CVE-2026-79282 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute | 58d ago |
| CVE-2026-14392 | 9.6 | critical | chrome | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perfo | 113d ago |
| CVE-2026-11066 | 9.6 | critical | chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attac | 140d ago |
| CVE-2026-10972 | 9.6 | critical | chrome | Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially | 140d ago |
| CVE-2026-10966 | 9.6 | critical | chrome | Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potent | 140d ago |
| CVE-2026-11029 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 all | 140d ago |
| CVE-2026-10990 | 9.6 | critical | chrome | Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the r | 140d ago |
| CVE-2026-13854 | 9.6 | critical | chrome | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had comprom | 114d ago |
| CVE-2026-13901 | 9.6 | critical | chrome | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who ha | 114d ago |
| CVE-2026-13861 | 9.6 | critical | chrome | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r | 114d ago |
| CVE-2026-13846 | 9.6 | critical | chrome | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised | 114d ago |
| CVE-2026-14055 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150.0.7871.47 allo | 114d ago |
| CVE-2026-10983 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attack | 140d ago |
| CVE-2026-11052 | 9.6 | critical | chrome | Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had comprom | 140d ago |
| CVE-2026-14044 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the | 114d ago |
| CVE-2026-14093 | 9.6 | critical | chrome | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r | 114d ago |
| CVE-2026-14152 | 9.6 | critical | chrome | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had co | 114d ago |
| CVE-2026-14398 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a | 113d ago |
| CVE-2026-14411 | 9.6 | critical | chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | 113d ago |
| CVE-2026-14419 | 9.6 | critical | chrome | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a | 113d ago |
| CVE-2026-14420 | 9.6 | critical | chrome | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | 113d ago |
| CVE-2026-15113 | 9.6 | critical | chrome | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potent | 106d ago |
| CVE-2026-15900 | 9.6 | critical | chrome | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially | 94d ago |
| CVE-2026-17651 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a re | 85d ago |
| CVE-2026-17655 | 9.6 | critical | chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | 85d ago |
| CVE-2026-17672 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote | 85d ago |
| CVE-2026-17671 | 9.6 | critical | chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | 85d ago |
| CVE-2026-17673 | 9.6 | critical | chrome | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17680 | 9.6 | critical | chrome | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who ha | 85d ago |
| CVE-2026-17687 | 9.6 | critical | chrome | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17688 | 9.6 | critical | chrome | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-11146 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote | 140d ago |
| CVE-2026-17704 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17710 | 9.6 | critical | chrome | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who | 85d ago |
| CVE-2026-17718 | 9.6 | critical | chrome | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a | 85d ago |
| CVE-2026-17727 | 9.6 | critical | chrome | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to poten | 85d ago |
| CVE-2026-17749 | 9.6 | critical | chrome | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attack | 85d ago |
| CVE-2026-17801 | 9.6 | critical | chrome | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | 85d ago |
| CVE-2026-17804 | 9.6 | critical | chrome | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the | 85d ago |
| CVE-2026-17856 | 9.6 | critical | chrome | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker w | 85d ago |
| CVE-2026-17924 | 9.6 | critical | chrome | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the re | 85d ago |
| CVE-2026-17947 | 9.6 | critical | chrome | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perf | 85d ago |
| CVE-2026-18015 | 9.6 | critical | chrome | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to p | 85d ago |
| CVE-2026-19157 | 9.6 | critical | chrome | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to pote | 77d ago |
| CVE-2026-19170 | 9.6 | critical | chrome | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potential | 77d ago |
