2026 CVEs (page 187)
Page 187 of 672 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-79047 | Critical | 9.6 | 2026-08-25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the s… |
CVE-2026-79046 | Medium | 4.3 | 2026-08-25 | Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origi… |
CVE-2026-79045 | High | 8.8 | 2026-08-25 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a cr… |
CVE-2026-79044 | Medium | 5.3 | 2026-08-25 | Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces… |
CVE-2026-79043 | Critical | 9.6 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
CVE-2026-79042 | Medium | 4.3 | 2026-08-25 | Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially… |
CVE-2026-79041 | Medium | 4.3 | 2026-08-25 | Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin… |
CVE-2026-79040 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read memory outside the sandbox via a crafted… |
CVE-2026-79039 | High | 8.1 | 2026-08-25 | Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… |
CVE-2026-79038 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page… |
CVE-2026-79034 | Low | 3.1 | 2026-08-25 | Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v… |
CVE-2026-79033 | High | 8.8 | 2026-08-25 | Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially… |
CVE-2026-79032 | Medium | 6.8 | 2026-08-25 | Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass syste… |
CVE-2026-79031 | Low | 3.1 | 2026-08-25 | Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chro… |
CVE-2026-79030 | Medium | 5.3 | 2026-08-25 | Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-79028 | Medium | 5.3 | 2026-08-25 | Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C… |
CVE-2026-79027 | High | 8.1 | 2026-08-25 | Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network tra… |
CVE-2026-79026 | Critical | 9.6 | 2026-08-25 | Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary c… |
CVE-2026-79025 | Medium | 4.2 | 2026-08-25 | Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass syste… |
CVE-2026-79024 | Medium | 6.5 | 2026-08-25 | Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (C… |
CVE-2026-79023 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-79022 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially sp… |
CVE-2026-79021 | Medium | 6.5 | 2026-08-25 | Missing authorization in InterestGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass sy… |
CVE-2026-79020 | High | 8.1 | 2026-08-25 | Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media… |
CVE-2026-79019 | Critical | 9.6 | 2026-08-25 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the… |
CVE-2026-79018 | Medium | 6.5 | 2026-08-25 | Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Ch… |
CVE-2026-79017 | Medium | 6.5 | 2026-08-25 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extens… |
CVE-2026-79016 | Medium | 4.3 | 2026-08-25 | Observable discrepancy in SVG in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-79015 | Medium | 4.3 | 2026-08-25 | Improper input validation in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted… |
CVE-2026-79014 | Medium | 4.3 | 2026-08-25 | Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin poli… |
CVE-2026-79013 | Medium | 5.9 | 2026-08-25 | Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic… |
CVE-2026-79012 | Critical | 9.6 | 2026-08-25 | Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary c… |
CVE-2026-79011 | High | 8.1 | 2026-08-25 | UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restric… |
CVE-2026-79010 | Medium | 4.3 | 2026-08-25 | Operation on a resource after expiration or release in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the render… |
CVE-2026-79009 | Medium | 4.3 | 2026-08-25 | UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted H… |
CVE-2026-79008 | High | 8.3 | 2026-08-25 | Improper input validation in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to po… |
CVE-2026-79007 | Low | 3.1 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read me… |
CVE-2026-79006 | Medium | 4.3 | 2026-08-25 | Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network… |
CVE-2026-79005 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypas… |
CVE-2026-79004 | Low | 3.4 | 2026-08-25 | Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside t… |
CVE-2026-79003 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restr… |
CVE-2026-79002 | Low | 3.1 | 2026-08-25 | Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass s… |
CVE-2026-79001 | Medium | 5.3 | 2026-08-25 | Information leak in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leverage… |
CVE-2026-79000 | Medium | 4.3 | 2026-08-25 | Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to b… |
CVE-2026-78999 | High | 8.3 | 2026-08-25 | Improper privilege management in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leve… |
CVE-2026-78991 | Medium | 5.3 | 2026-08-25 | Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive inf… |
CVE-2026-78990 | High | 8.8 | 2026-08-25 | Use after free in Compositing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-78989 | Critical | 9.6 | 2026-08-25 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the s… |
CVE-2026-78987 | Medium | 4.3 | 2026-08-25 | Information leak in Canvas in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium sec… |
CVE-2026-78986 | Low | 3.1 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain… |
CVE-2026-78985 | Critical | 9.6 | 2026-08-25 | Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially exe… |
CVE-2026-78984 | Low | 3.4 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read me… |
CVE-2026-78983 | High | 8.3 | 2026-08-25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ou… |
CVE-2026-78981 | Medium | 6.5 | 2026-08-25 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local p… |
CVE-2026-78980 | Medium | 4.3 | 2026-08-25 | Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin po… |
CVE-2026-78979 | Medium | 4.3 | 2026-08-25 | Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin polic… |
CVE-2026-78978 | High | 8.8 | 2026-08-25 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the s… |
CVE-2026-78977 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via… |
CVE-2026-78976 | Medium | 4.3 | 2026-08-25 | Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to byp… |
CVE-2026-78975 | Medium | 6.5 | 2026-08-25 | Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chro… |
CVE-2026-78974 | Medium | 5.4 | 2026-08-25 | UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system… |
CVE-2026-78969 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (C… |
CVE-2026-78968 | Medium | 6.5 | 2026-08-25 | Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof a… |
CVE-2026-78967 | Medium | 6.5 | 2026-08-25 | Missing authorization in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system ac… |
CVE-2026-78966 | Medium | 4.3 | 2026-08-25 | Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-78965 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-78964 | Critical | 9.6 | 2026-08-25 | Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox vi… |
CVE-2026-78963 | High | 8.8 | 2026-08-25 | Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… |
CVE-2026-78962 | Medium | 4.3 | 2026-08-25 | Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially leak cross-origi… |
CVE-2026-78961 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social… |
CVE-2026-78960 | Medium | 6.5 | 2026-08-25 | Information leak in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain cross-origin data via… |
CVE-2026-78959 | Medium | 6.5 | 2026-08-25 | Improper handling of case sensitivity in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass s… |
CVE-2026-78958 | Low | 3.1 | 2026-08-25 | Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain… |
CVE-2026-78957 | Medium | 5.5 | 2026-08-25 | Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to obtain sensitive information via a crafted file. (Chro… |
CVE-2026-78956 | High | 8.8 | 2026-08-25 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandb… |
CVE-2026-78955 | Medium | 6.5 | 2026-08-25 | Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a craft… |
CVE-2026-78954 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web… |
CVE-2026-78953 | Low | 3.1 | 2026-08-25 | Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass sit… |
CVE-2026-78952 | High | 8.3 | 2026-08-25 | Out of bounds write in Crashpad in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to exe… |
CVE-2026-78951 | Critical | 9.6 | 2026-08-25 | Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted H… |
CVE-2026-78950 | High | 8.8 | 2026-08-25 | Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-78949 | Low | 2.9 | 2026-08-25 | Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-instal… |
CVE-2026-78948 | Critical | 9.6 | 2026-08-25 | Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag… |
CVE-2026-78947 | Medium | 6.5 | 2026-08-25 | Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via… |
CVE-2026-78946 | Medium | 4.3 | 2026-08-25 | Incorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chrom… |
CVE-2026-78945 | Critical | 9.6 | 2026-08-25 | Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code o… |
CVE-2026-78944 | High | 8.8 | 2026-08-25 | Use after free in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the… |
CVE-2026-78943 | Low | 3.1 | 2026-08-25 | Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged s… |
CVE-2026-78942 | Medium | 4.3 | 2026-08-25 | Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traf… |
CVE-2026-78941 | Low | 3.1 | 2026-08-25 | Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation vi… |
CVE-2026-78940 | Medium | 4.3 | 2026-08-25 | Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chro… |
CVE-2026-78939 | Critical | 9.6 | 2026-08-25 | Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary co… |
CVE-2026-78938 | High | 8.8 | 2026-08-25 | Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-78937 | Critical | 9.6 | 2026-08-25 | Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute a… |
CVE-2026-78936 | Low | 2.9 | 2026-08-25 | Observable discrepancy in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-instal… |
CVE-2026-78935 | Critical | 9.6 | 2026-08-25 | Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outsi… |
CVE-2026-78934 | High | 8.3 | 2026-08-25 | Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside th… |
CVE-2026-78915 | High | 7.5 | 2026-08-25 | Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside t… |
CVE-2026-78914 | Medium | 6.5 | 2026-08-25 | Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HT… |
CVE-2026-78913 | High | 8.1 | 2026-08-25 | Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via cr… |