Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chrome HIGH 8.3
CVE-2026-8514

Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially per…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 8.3
CVE-2026-8515

Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to po…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 8.3
CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. …

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 7.5
CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traff…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome MEDIUM 5.3
CVE-2026-8516

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to…

Fix: 148.0.7778.168+
Fix from $1,600 2026-05-14
Chrome CRITICAL 9.6
CVE-2026-8511

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pa…

Fix: 148.0.7778.168+
Fix from $2,300 2026-05-14
Chrome HIGH 8.8
CVE-2026-8509

Heap buffer overflow in WebML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 8.3
CVE-2026-8512

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gesture…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 8.3
CVE-2026-8513

Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to pot…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Chrome HIGH 7.5
CVE-2026-8510

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to pe…

Fix: 148.0.7778.168+
Fix from $1,950 2026-05-14
Gerrit MEDIUM 5.3
CVE-2026-2725

Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permis…

Patch available
Fix from $1,600 2026-05-13
Chrome HIGH 8.8
CVE-2026-8016

Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted H…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.1
CVE-2026-8018

Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8012

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to i…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8015

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML pag…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8019

Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.3
CVE-2026-8020

Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obt…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome HIGH 8.8
CVE-2026-8002

Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-8001

Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.5
CVE-2026-8007

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 6.3
CVE-2026-8010

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8003

Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via …

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8006

Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious e…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-8008

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious exte…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.0
CVE-2026-8009

Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to by…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome HIGH 8.8
CVE-2026-7992

Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.8
CVE-2026-7995

Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.8
CVE-2026-8000

Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute ar…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.8
CVE-2026-7994

Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege …

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.8
CVE-2026-7997

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level pri…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06