Browse CVEs

HIGH 8.1 CVE-2026-19153 Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the rend… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-19156 Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19144 Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.8 CVE-2026-19145 Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.6 CVE-2026-19143 Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially per… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19140 Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perf… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19141 Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19147 Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potent… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-19142 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to … Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 MEDIUM 5.3 CVE-2026-19146 Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to ob… Chrome 151.0.7922.109+ Fix from $1,6002026-08-06 HIGH 8.3 CVE-2026-19137 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to pot… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 8.3 CVE-2026-19138 Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to… Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.4 CVE-2026-19139 Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via … Chrome 151.0.7922.109+ Fix from $1,9502026-08-06 HIGH 7.5 CVE-2026-14541 An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When… Mcp Toolbox For Databases No fix yet Fix from $1,9502026-07-31 MEDIUM 6.1 CVE-2026-14540 A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through… Mcp Toolbox For Databases 1.5.0+ Fix from $1,6002026-07-31 HIGH 7.7 CVE-2026-14538 An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1… Mcp Toolbox For Databases after 1.4.0 Fix from $1,9502026-07-31 HIGH 7.5 CVE-2026-14539 An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows… Mcp Toolbox For Databases 1.5.0+ Fix from $1,9502026-07-31 CRITICAL 9.8 CVE-2026-14537 Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated at… Mcp Toolbox For Databases No fix yet Fix from $2,3002026-07-31 CRITICAL 9.6 CVE-2026-18015 Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 HIGH 8.8 CVE-2026-18017 Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM… Chrome 151.0.7922.72+ Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-18014 Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restric… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 HIGH 8.8 CVE-2026-18012 Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted P… Chrome 151.0.7922.72+ Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-18005 Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information f… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 CRITICAL 9.6 CVE-2026-18002 Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the r… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 HIGH 8.1 CVE-2026-17995 Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HT… Chrome 151.0.7922.72+ Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-17999 Race in PictureInPicture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML p… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.5 CVE-2026-18001 Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information f… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.2 CVE-2026-17996 Inappropriate implementation in Browser in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 CRITICAL 9.6 CVE-2026-17987 Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30 CRITICAL 9.6 CVE-2026-17990 Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the rend… Chrome 151.0.7922.72+ Fix from $2,3002026-07-30