Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
167,871 matching · page 6/3358Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-121126(opens NVD record) | Critical | 9.6 | Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) | Nov 3, 2026 |
| CVE-2026-121125(opens NVD record) | Unscored | — | Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121124(opens NVD record) | High | 8.8 | Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121123(opens NVD record) | High | 8.8 | Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121122(opens NVD record) | Unscored | — | UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121121(opens NVD record) | Unscored | — | UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121120(opens NVD record) | Unscored | — | Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121119(opens NVD record) | High | 8.8 | Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121118(opens NVD record) | High | 8.8 | Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121117(opens NVD record) | High | 8.8 | Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121116(opens NVD record) | Unscored | — | Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121115(opens NVD record) | Unscored | — | Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via crafted network traffic. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121114(opens NVD record) | Critical | 9.6 | Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121113(opens NVD record) | Unscored | — | Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121112(opens NVD record) | High | 8.3 | Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121111(opens NVD record) | Unscored | — | Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121110(opens NVD record) | Unscored | — | UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121109(opens NVD record) | Unscored | — | Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121108(opens NVD record) | Unscored | — | Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121107(opens NVD record) | Unscored | — | Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121106(opens NVD record) | Unscored | — | Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121105(opens NVD record) | Unscored | — | Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121104(opens NVD record) | Critical | 9.6 | Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121103(opens NVD record) | Unscored | — | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121102(opens NVD record) | Unscored | — | Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121101(opens NVD record) | Unscored | — | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted Chrome extension. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121100(opens NVD record) | High | 8.8 | Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121099(opens NVD record) | Unscored | — | Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121098(opens NVD record) | High | 8.3 | Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121097(opens NVD record) | High | 8.8 | Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121096(opens NVD record) | Unscored | — | Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121095(opens NVD record) | Unscored | — | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121094(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121093(opens NVD record) | Unscored | — | Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121092(opens NVD record) | High | 8.8 | Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121091(opens NVD record) | Unscored | — | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121090(opens NVD record) | High | 8.3 | Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121089(opens NVD record) | Critical | 9.6 | Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121088(opens NVD record) | Unscored | — | Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |
| CVE-2026-121087(opens NVD record) | Unscored | — | Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121086(opens NVD record) | Critical | 9.6 | Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121085(opens NVD record) | Unscored | — | Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121084(opens NVD record) | High | 8.3 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121083(opens NVD record) | High | 8.8 | Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121082(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121081(opens NVD record) | Unscored | — | UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive information via crafted network traffic. (Chromium security severity: Low) | Nov 3, 2026 |
| CVE-2026-121080(opens NVD record) | Unscored | — | Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121079(opens NVD record) | High | 8.8 | Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121078(opens NVD record) | High | 8.8 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | Nov 3, 2026 |
| CVE-2026-121077(opens NVD record) | Critical | 9.6 | Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | Nov 3, 2026 |