2026 CVE Vulnerabilities
61,767 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11035 | HIGH | 7.3 | 0.1% | Jun 4, 2026 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker ... |
| CVE-2026-11034 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed ... |
| CVE-2026-11033 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentiall... |
| CVE-2026-11032 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to le... |
| CVE-2026-11031 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote ... |
| CVE-2026-11030 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap ... |
| CVE-2026-11029 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a... |
| CVE-2026-11028 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had ... |
| CVE-2026-11027 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient validation of untrusted input in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who... |
| CVE-2026-11026 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a u... |
| CVE-2026-11025 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack... |
| CVE-2026-11024 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit s... |
| CVE-2026-11023 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had... |
| CVE-2026-11022 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker... |
| CVE-2026-11021 | CRITICAL | 9.6 | 0.3% | Jun 4, 2026 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote at... |
| CVE-2026-11020 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cro... |
| CVE-2026-11019 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker wh... |
| CVE-2026-11018 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass nav... |
| CVE-2026-11017 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had c... |
| CVE-2026-11016 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker ... |
| CVE-2026-11015 | HIGH | 8.1 | 0.3% | Jun 4, 2026 | Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of boun... |
| CVE-2026-11014 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced ... |
| CVE-2026-11013 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker ... |
| CVE-2026-11012 | HIGH | 8.3 | 0.3% | Jun 4, 2026 | Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromise... |
| CVE-2026-11011 | HIGH | 8.1 | 0.3% | Jun 4, 2026 | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker wh... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now