Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
99,425 matching · page 34/1989Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-121247(opens NVD record) | Critical | 9.6 | Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | Nov 3, 2026 |
| CVE-2026-121246(opens NVD record) | Critical | 9.6 | Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | Nov 3, 2026 |
| CVE-2026-121245(opens NVD record) | Medium | 5.3 | Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121244(opens NVD record) | Medium | 5.4 | UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121243(opens NVD record) | Medium | 6.5 | Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121242(opens NVD record) | Unscored | — | Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121241(opens NVD record) | Critical | 9.6 | Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121240(opens NVD record) | Unscored | — | Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121239(opens NVD record) | Medium | 6.5 | Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121238(opens NVD record) | High | 8.8 | Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121237(opens NVD record) | Unscored | — | Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121236(opens NVD record) | High | 8.8 | Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121235(opens NVD record) | Medium | 6.5 | Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121234(opens NVD record) | Critical | 9.6 | Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121233(opens NVD record) | High | 8.8 | Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121232(opens NVD record) | Medium | 5.1 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121231(opens NVD record) | Unscored | — | Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121230(opens NVD record) | High | 8.3 | Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121229(opens NVD record) | Critical | 9.6 | Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | Nov 3, 2026 |
| CVE-2026-121228(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121227(opens NVD record) | Unscored | — | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121226(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121225(opens NVD record) | Unscored | — | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121224(opens NVD record) | High | 8.1 | Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121223(opens NVD record) | Unscored | — | Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121222(opens NVD record) | High | 8.8 | Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121221(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121220(opens NVD record) | Unscored | — | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121219(opens NVD record) | High | 8.3 | Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121218(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121217(opens NVD record) | High | 7.5 | Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121216(opens NVD record) | Medium | 5.4 | UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121215(opens NVD record) | Medium | 5.4 | UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121214(opens NVD record) | Critical | 9.6 | Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121213(opens NVD record) | Medium | 6.5 | Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121212(opens NVD record) | High | 8.8 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121211(opens NVD record) | High | 8.3 | Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121210(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121209(opens NVD record) | Unscored | — | UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121208(opens NVD record) | High | 8.8 | Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121207(opens NVD record) | Unscored | — | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121206(opens NVD record) | Medium | 5.4 | UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121205(opens NVD record) | High | 8.8 | Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121204(opens NVD record) | High | 8.8 | Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121203(opens NVD record) | High | 8.8 | Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | Nov 3, 2026 |
| CVE-2026-121202(opens NVD record) | Critical | 9.6 | Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121201(opens NVD record) | High | 8.8 | Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121200(opens NVD record) | Critical | 9.6 | Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121199(opens NVD record) | Medium | 5.5 | Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121198(opens NVD record) | High | 8.8 | Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |