2026 CVE Vulnerabilities
45,065 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-13867 | MEDIUM | 4.3 | 0.2% | Jun 30, 2026 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform... |
| CVE-2026-13866 | MEDIUM | 6.5 | 0.3% | Jun 30, 2026 | Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who h... |
| CVE-2026-13865 | MEDIUM | 4.3 | 0.2% | Jun 30, 2026 | Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attack... |
| CVE-2026-13862 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google Chrome on iOS prior to 150.0.... |
| CVE-2026-13860 | MEDIUM | 4.2 | 0.2% | Jun 30, 2026 | Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convi... |
| CVE-2026-13858 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sen... |
| CVE-2026-13857 | MEDIUM | 4.2 | 0.2% | Jun 30, 2026 | Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced... |
| CVE-2026-13847 | MEDIUM | 6.5 | 0.3% | Jun 30, 2026 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a re... |
| CVE-2026-13842 | MEDIUM | 4.3 | 0.2% | Jun 30, 2026 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker ... |
| CVE-2026-13840 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cros... |
| CVE-2026-13839 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same ori... |
| CVE-2026-13838 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same ori... |
| CVE-2026-13837 | MEDIUM | 4.3 | 0.2% | Jun 30, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoo... |
| CVE-2026-13836 | MEDIUM | 6.1 | 0.2% | Jun 30, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrar... |
| CVE-2026-13833 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin... |
| CVE-2026-13828 | MEDIUM | 6.5 | 0.3% | Jun 30, 2026 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain p... |
| CVE-2026-13826 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker wh... |
| CVE-2026-13822 | MEDIUM | 6.5 | 0.1% | Jun 30, 2026 | Inappropriate implementation in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed an attacker who co... |
| CVE-2026-13820 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised ... |
| CVE-2026-13818 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass na... |
| CVE-2026-13816 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to 150.0.7871.47 allowed a re... |
| CVE-2026-13812 | MEDIUM | 4.7 | 0.2% | Jun 30, 2026 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a re... |
| CVE-2026-13810 | MEDIUM | 6.5 | 0.3% | Jun 30, 2026 | Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to obta... |
| CVE-2026-13809 | MEDIUM | 6.5 | 0.2% | Jun 30, 2026 | Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attack... |
| CVE-2026-13808 | MEDIUM | 4.6 | 0.1% | Jun 30, 2026 | Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker t... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now