Vulnerability index

Browse CVEs

1,820 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use After FreeCWE-416 × clear
Chrome HIGH 8.8
CVE-2026-12439

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12441

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12442

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTM…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12443

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML …

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 7.5
CVE-2026-12445

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to po…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.3
CVE-2026-12437

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to …

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0143

In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. This could lead to local escalatio…

Mitigation only
Fix from $1,950 2026-06-16
Android HIGH 7.8
CVE-2026-0137

In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use after free. This could lead to lo…

Mitigation only
Fix from $1,950 2026-06-16
Android HIGH 7.0
CVE-2026-0125

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi…

Mitigation only
Fix from $1,950 2026-06-16
Chrome HIGH 8.8
CVE-2026-12035

Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a cr…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.3
CVE-2026-12028

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to poten…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.3
CVE-2026-12029

Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to pot…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.8
CVE-2026-12020

Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a cra…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.3
CVE-2026-12023

Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potential…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome MEDIUM 5.3
CVE-2026-12015

Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to obtain pote…

Fix: 149.0.7827.115+
Fix from $1,600 2026-06-11
Chrome HIGH 8.3
CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to p…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.3
CVE-2026-12011

Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to p…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.3
CVE-2026-12014

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox esc…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.1
CVE-2026-12012

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap c…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.8
CVE-2026-12007

Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrary code via a crafted HTML pag…

Fix: 149.0.7827.115+
Fix from $1,950 2026-06-11
Chrome HIGH 8.8
CVE-2026-11698

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a cr…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.8
CVE-2026-11699

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a cr…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.3
CVE-2026-11700

Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially …

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.8
CVE-2026-11687

Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.3
CVE-2026-11692

Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potent…

Fix: 149.0.7827.102+
Fix from $1,950 2026-06-09
Chrome HIGH 7.5
CVE-2026-11694

Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execut…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.8
CVE-2026-11680

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via …

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.8
CVE-2026-11681

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a craf…

Fix: 149.0.7827.102+
Fix from $1,950 2026-06-09
Chrome HIGH 8.8
CVE-2026-11683

Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09
Chrome HIGH 8.3
CVE-2026-11679

Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to po…

Fix: 149.0.7827.103+
Fix from $1,950 2026-06-09