2026 CVE Vulnerabilities
61,759 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11179 | HIGH | 8.8 | 0.2% | Jun 4, 2026 | Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site iso... |
| CVE-2026-11178 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker ... |
| CVE-2026-11177 | HIGH | 8.8 | 0.2% | Jun 4, 2026 | Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to enga... |
| CVE-2026-11176 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11175 | HIGH | 8.8 | 0.2% | Jun 4, 2026 | Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perfor... |
| CVE-2026-11174 | MEDIUM | 5.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had... |
| CVE-2026-11173 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rend... |
| CVE-2026-11172 | HIGH | 8.8 | 0.2% | Jun 4, 2026 | Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to ... |
| CVE-2026-11171 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-11170 | HIGH | 8.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to... |
| CVE-2026-11169 | HIGH | 8.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrar... |
| CVE-2026-11168 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had com... |
| CVE-2026-11167 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who... |
| CVE-2026-11166 | MEDIUM | 6.8 | 0.2% | Jun 4, 2026 | Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrar... |
| CVE-2026-11165 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perfor... |
| CVE-2026-11164 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-11163 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially p... |
| CVE-2026-11162 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11161 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak c... |
| CVE-2026-11160 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potenti... |
| CVE-2026-11159 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data vi... |
| CVE-2026-11158 | HIGH | 8.6 | 0.1% | Jun 4, 2026 | Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local a... |
| CVE-2026-11157 | MEDIUM | 5.4 | 0.1% | Jun 4, 2026 | Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to in... |
| CVE-2026-11156 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11155 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now