Browse CVEs

CRITICAL 9.1 CVE-2026-3061 Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 145.0.7632.116 / 145.0.7632.117+ Fix from $2,3002026-02-23 HIGH 8.8 CVE-2026-2648 Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a craf… Chrome 145.0.7632.109+ Fix from $1,9502026-02-18 HIGH 8.8 CVE-2026-2649 Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 145.0.7632.109+ Fix from $1,9502026-02-18 HIGH 8.8 CVE-2026-2650 Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 145.0.7632.109+ Fix from $1,9502026-02-18 HIGH 8.8 CVE-2026-2441 KEVEPSS 22% Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 145.0.7632.75 / 145.0.7632.76+ Fix from $1,9502026-02-13 HIGH 8.8 CVE-2026-2321 Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to p… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 7.5 CVE-2026-2319 Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 MEDIUM 6.5 CVE-2026-2320 Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specif… Chrome 145.0.7632.45+ Fix from $1,6002026-02-11 MEDIUM 5.4 CVE-2026-2322 Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specif… Chrome 145.0.7632.45+ Fix from $1,6002026-02-11 HIGH 8.8 CVE-2026-2313 Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 8.8 CVE-2026-2314 Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 8.8 CVE-2026-2315EPSS 8% Inappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially perform out of bounds memory … Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 MEDIUM 6.5 CVE-2026-2316 Insufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML… Chrome 145.0.7632.45+ Fix from $1,6002026-02-11 MEDIUM 6.5 CVE-2026-2317 Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted H… Chrome 145.0.7632.45+ Fix from $1,6002026-02-11 MEDIUM 6.5 CVE-2026-2318 Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in … Chrome 145.0.7632.45+ Fix from $1,6002026-02-11 CRITICAL 9.3 CVE-2026-0106 In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege … Android Mitigation only Fix from $2,3002026-02-05 HIGH 8.8 CVE-2026-1861 Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 144.0.7559.132+ Fix from $1,9502026-02-03 HIGH 8.8 CVE-2026-1862 Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… Chrome 144.0.7559.132+ Fix from $1,9502026-02-03 CRITICAL 9.8 CVE-2026-20418 In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additiona… Matter after 1.4 Fix from $2,3002026-02-02 HIGH 7.8 CVE-2026-20411 In cameraisp, there is a possible escalation of privilege due to use after free. This could lead to local denial of service if a malicious actor has … Android Mitigation only Fix from $1,9502026-02-02 HIGH 7.8 CVE-2026-20412 In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious … Android Mitigation only Fix from $1,9502026-02-02 MEDIUM 6.7 CVE-2026-20413 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 6.7 CVE-2026-20414 In imgsys, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor h… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 5.5 CVE-2026-20415 In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 5.3 CVE-2026-20417 In pcie, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor… Android Mitigation only Fix from $1,6002026-02-02 HIGH 7.8 CVE-2026-20409 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,9502026-02-02 MEDIUM 6.7 CVE-2026-20410 In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious act… Android Mitigation only Fix from $1,6002026-02-02 MEDIUM 6.5 CVE-2026-1504 Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via… Chrome 144.0.7559.110+ Fix from $1,6002026-01-27 HIGH 7.5 CVE-2026-0994 A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypas… Protobuf after 33.4 Fix from $1,9502026-01-23 HIGH 7.8 CVE-2026-1260 Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training proce… Sentencepiece 0.2.1+ Fix from $1,9502026-01-22