2026 CVE Vulnerabilities
61,759 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11154 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-11153 | CRITICAL | 9.1 | 0.3% | Jun 4, 2026 | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cros... |
| CVE-2026-11152 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform ... |
| CVE-2026-11151 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote ... |
| CVE-2026-11150 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrar... |
| CVE-2026-11149 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attack... |
| CVE-2026-11148 | MEDIUM | 6.5 | 0.1% | Jun 4, 2026 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to ... |
| CVE-2026-11147 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrar... |
| CVE-2026-11146 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attack... |
| CVE-2026-11145 | MEDIUM | 5.3 | 0.2% | Jun 4, 2026 | Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin da... |
| CVE-2026-11144 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-11143 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a us... |
| CVE-2026-11142 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11141 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren... |
| CVE-2026-11140 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised t... |
| CVE-2026-11139 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11138 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v... |
| CVE-2026-11137 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensi... |
| CVE-2026-11136 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-11135 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass ... |
| CVE-2026-11134 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11133 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11132 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11131 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromi... |
| CVE-2026-11130 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code insi... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now