2026 CVE Vulnerabilities
64,824 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-7935 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI s... |
| CVE-2026-7934 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote att... |
| CVE-2026-7933 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of b... |
| CVE-2026-7932 | MEDIUM | 4.4 | 0.1% | May 6, 2026 | Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass ... |
| CVE-2026-7931 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attack... |
| CVE-2026-7930 | — | — | — | May 6, 2026 | Rejected reason: Is not a vulnerability, is a feature bug. |
| CVE-2026-7929 | HIGH | 7.5 | 0.2% | May 6, 2026 | Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user ... |
| CVE-2026-7928 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitra... |
| CVE-2026-7927 | HIGH | 8.8 | 0.3% | May 6, 2026 | Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-7926 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary... |
| CVE-2026-7925 | HIGH | 7.8 | 0.1% | May 6, 2026 | Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-l... |
| CVE-2026-7924 | MEDIUM | 6.5 | 0.2% | May 6, 2026 | Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensit... |
| CVE-2026-7923 | HIGH | 8.3 | 0.2% | May 6, 2026 | Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the re... |
| CVE-2026-7922 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform... |
| CVE-2026-7921 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-7920 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-7919 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-7918 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer... |
| CVE-2026-7917 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compro... |
| CVE-2026-7916 | HIGH | 8.3 | 0.2% | May 6, 2026 | Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had... |
| CVE-2026-7915 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to... |
| CVE-2026-7914 | HIGH | 8.3 | 0.2% | May 6, 2026 | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had com... |
| CVE-2026-7913 | HIGH | 7.8 | 0.1% | May 6, 2026 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker ... |
| CVE-2026-7912 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised... |
| CVE-2026-7911 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now