Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chrome MEDIUM 6.5
CVE-2026-12461

Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive informatio…

Fix: 149.0.7827.155+
Fix from $1,600 2026-06-17
Chrome MEDIUM 6.1
CVE-2026-12459

Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) …

Fix: 149.0.7827.155+
Fix from $1,600 2026-06-17
Chrome HIGH 7.5
CVE-2026-12455

Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12447

Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12448

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12452

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via …

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.3
CVE-2026-12451

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to p…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.3
CVE-2026-12454

Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potential…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 7.8
CVE-2026-12449

Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation vi…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome MEDIUM 6.5
CVE-2026-12450

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information …

Fix: 149.0.7827.155+
Fix from $1,600 2026-06-17
Chrome CRITICAL 9.6
CVE-2026-12440

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox e…

Fix: 149.0.7827.155+
Fix from $2,300 2026-06-17
Chrome HIGH 8.8
CVE-2026-12439

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12441

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12442

Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTM…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.8
CVE-2026-12443

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML …

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 7.5
CVE-2026-12445

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to po…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome MEDIUM 5.5
CVE-2026-12444

Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive informa…

Fix: 149.0.7827.155+
Fix from $1,600 2026-06-17
Chrome HIGH 8.3
CVE-2026-12437

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to …

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Chrome HIGH 8.3
CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the rendere…

Fix: 149.0.7827.155+
Fix from $1,950 2026-06-17
Android CRITICAL 10.0
CVE-2026-0092

In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privi…

Mitigation only
Fix from $2,300 2026-06-17
Android HIGH 7.8
CVE-2026-0068

In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due…

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0071

In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with …

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0081

In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no add…

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0082

In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. T…

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.0
CVE-2026-0083

In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with n…

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0019

In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privile…

Mitigation only
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2026-0063

In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This c…

Mitigation only
Fix from $1,950 2026-06-17
Android MEDIUM 5.5
CVE-2026-0064

In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no a…

Mitigation only
Fix from $1,600 2026-06-17
Android HIGH 8.0
CVE-2025-48640

In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (pro…

No fix yet
Fix from $1,950 2026-06-17
Android HIGH 7.8
CVE-2025-48643

In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with…

Mitigation only
Fix from $1,950 2026-06-17