Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chrome HIGH 8.8
CVE-2026-7951

Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.5
CVE-2026-7948

Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege escalation via a malicious file. …

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 6.1
CVE-2026-7953

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts o…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-7950

Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitrary read/write via malicious n…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.3
CVE-2026-7955

Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potenti…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome HIGH 8.8
CVE-2026-7938

Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.8
CVE-2026-7940

Use after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arb…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-7939

Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (U…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome HIGH 8.8
CVE-2026-7927

Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted …

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.8
CVE-2026-7928

Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via …

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.5
CVE-2026-7929

Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gest…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-7931

Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome MEDIUM 5.4
CVE-2026-7935

Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML pa…

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome HIGH 8.8
CVE-2026-7921

Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chr…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.8
CVE-2026-7926

Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a …

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7918

Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perfo…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7919

Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perf…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7920

Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perf…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7922

Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a craft…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7923

Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.8
CVE-2026-7925

Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome MEDIUM 6.5
CVE-2026-7924

Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process …

Fix: 148.0.7778.96+
Fix from $1,600 2026-05-06
Chrome CRITICAL 9.6
CVE-2026-7908

Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted …

Fix: 148.0.7778.96+
Fix from $2,300 2026-05-06
Chrome CRITICAL 9.6
CVE-2026-7910

Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site iso…

Fix: 148.0.7778.96+
Fix from $2,300 2026-05-06
Chrome HIGH 8.8
CVE-2026-7907

Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7911

Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to poten…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7914

Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7916

Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pro…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 8.3
CVE-2026-7917

Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06
Chrome HIGH 7.8
CVE-2026-7913

Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to perform privilege escalati…

Fix: 148.0.7778.96+
Fix from $1,950 2026-05-06