Browse CVEs

MEDIUM 6.5 CVE-2026-12461 Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive informatio… Chrome 149.0.7827.155+ Fix from $1,6002026-06-17 MEDIUM 6.1 CVE-2026-12459 Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) … Chrome 149.0.7827.155+ Fix from $1,6002026-06-17 HIGH 7.5 CVE-2026-12455 Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who convinced a user to engage in specific UI gestures… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12447 Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12448 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to perform privilege escalation… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12452 Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via … Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.3 CVE-2026-12451 Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to p… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.3 CVE-2026-12454 Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potential… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-12449 Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation vi… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 MEDIUM 6.5 CVE-2026-12450 Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information … Chrome 149.0.7827.155+ Fix from $1,6002026-06-17 CRITICAL 9.6 CVE-2026-12440 Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox e… Chrome 149.0.7827.155+ Fix from $2,3002026-06-17 HIGH 8.8 CVE-2026-12439 Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12441 Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12442 Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTM… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-12443 Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML … Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 7.5 CVE-2026-12445 Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to po… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 MEDIUM 5.5 CVE-2026-12444 Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive informa… Chrome 149.0.7827.155+ Fix from $1,6002026-06-17 HIGH 8.3 CVE-2026-12437 Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to … Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 HIGH 8.3 CVE-2026-12438 Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the rendere… Chrome 149.0.7827.155+ Fix from $1,9502026-06-17 CRITICAL 10.0 CVE-2026-0092 In Package Manager, there is a possible device lock controller bypass due to a missing permission check. This could lead to local escalation of privi… Android Mitigation only Fix from $2,3002026-06-17 HIGH 7.8 CVE-2026-0068 In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a managed device without DO consent due… Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-0071 In SettingsLib, there is a possible missing permission check due to a logic error in the code. This could lead to local escalation of privilege with … Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-0081 In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no add… Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-0082 In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. T… Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.0 CVE-2026-0083 In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with n… Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-0019 In SettingsLib, there is a possible way to disable system components due to a logic error in the code. This could lead to local escalation of privile… Android Mitigation only Fix from $1,9502026-06-17 HIGH 7.8 CVE-2026-0063 In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to a logic error in the code. This c… Android Mitigation only Fix from $1,9502026-06-17 MEDIUM 5.5 CVE-2026-0064 In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no a… Android Mitigation only Fix from $1,6002026-06-17 HIGH 8.0 CVE-2025-48640 In multiple locations, there is a possible 3rd party passkey entry pairing approval due to a missing permission check. This could lead to remote (pro… Android No fix yet Fix from $1,9502026-06-17 HIGH 7.8 CVE-2025-48643 In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with… Android Mitigation only Fix from $1,9502026-06-17