Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chrome HIGH 7.5
CVE-2026-17887

Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures t…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 7.1
CVE-2026-17888

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbo…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypa…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17883

Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 5.8
CVE-2026-17890

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome HIGH 8.8
CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 8.4
CVE-2026-17877

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege es…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17873

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary ac…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.1
CVE-2026-17872

Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to potentially perform a sandbox esc…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.1
CVE-2026-17878

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via …

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 5.4
CVE-2026-17874

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a …

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17865

Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc…

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome HIGH 8.8
CVE-2026-17868

Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafte…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 8.1
CVE-2026-17869

Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted H…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 7.8
CVE-2026-17862

Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a …

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 7.8
CVE-2026-17863

Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation v…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 7.8
CVE-2026-17864

Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalat…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome HIGH 7.1
CVE-2026-17867

Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox…

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome MEDIUM 5.8
CVE-2026-17866

Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potent…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17855

Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially per…

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17856

Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro…

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome HIGH 7.8
CVE-2026-17861

Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege …

Fix: 151.0.7922.72+
Fix from $1,950 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17854

Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafte…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17847

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbo…

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome CRITICAL 9.6
CVE-2026-17848

Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted vi…

Fix: 151.0.7922.72+
Fix from $2,300 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17846

Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer p…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17850

Inappropriate implementation in Permissions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a craf…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.5
CVE-2026-17852

Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a cra…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.1
CVE-2026-17845

Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via …

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30
Chrome MEDIUM 6.1
CVE-2026-17853

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process t…

Fix: 151.0.7922.72+
Fix from $1,600 2026-07-30