2026 CVE Vulnerabilities
47,550 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11157 | MEDIUM | 5.4 | 0.1% | Jun 4, 2026 | Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to in... |
| CVE-2026-11156 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11155 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11150 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrar... |
| CVE-2026-11148 | MEDIUM | 6.5 | 0.1% | Jun 4, 2026 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to ... |
| CVE-2026-11145 | MEDIUM | 5.3 | 0.2% | Jun 4, 2026 | Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin da... |
| CVE-2026-11143 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a us... |
| CVE-2026-11142 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11141 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren... |
| CVE-2026-11140 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised t... |
| CVE-2026-11139 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11138 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v... |
| CVE-2026-11137 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensi... |
| CVE-2026-11135 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass ... |
| CVE-2026-11134 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11133 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11132 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11129 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cro... |
| CVE-2026-11128 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convince... |
| CVE-2026-11127 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to ... |
| CVE-2026-11126 | MEDIUM | 4.3 | 0.1% | Jun 4, 2026 | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a use... |
| CVE-2026-11123 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensi... |
| CVE-2026-11122 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arb... |
| CVE-2026-11121 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who... |
| CVE-2026-11110 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now