2026 CVE Vulnerabilities
51,327 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-17876 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross... |
| CVE-2026-17875 | HIGH | 8.8 | 0.3% | Jul 30, 2026 | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-17874 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker ... |
| CVE-2026-17873 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attack... |
| CVE-2026-17872 | MEDIUM | 6.1 | 0.1% | Jul 30, 2026 | Cryptographic Flaw in WebAppInstalls in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to pote... |
| CVE-2026-17871 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convince... |
| CVE-2026-17870 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the lo... |
| CVE-2026-17869 | HIGH | 8.1 | 0.2% | Jul 30, 2026 | Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bound... |
| CVE-2026-17868 | HIGH | 8.8 | 0.3% | Jul 30, 2026 | Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform priv... |
| CVE-2026-17867 | HIGH | 7.1 | 0.2% | Jul 30, 2026 | Insufficient validation of untrusted input in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to ... |
| CVE-2026-17866 | MEDIUM | 5.8 | 0.2% | Jul 30, 2026 | Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised t... |
| CVE-2026-17865 | CRITICAL | 9.6 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had ... |
| CVE-2026-17864 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perfo... |
| CVE-2026-17863 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to p... |
| CVE-2026-17862 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform OS-leve... |
| CVE-2026-17861 | HIGH | 7.8 | 0.1% | Jul 30, 2026 | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker t... |
| CVE-2026-17860 | LOW | 3.3 | 0.1% | Jul 30, 2026 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local ... |
| CVE-2026-17859 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross... |
| CVE-2026-17858 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Uninitialized Use in WebNN in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to leak cross-or... |
| CVE-2026-17857 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-... |
| CVE-2026-17856 | CRITICAL | 9.6 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had... |
| CVE-2026-17855 | CRITICAL | 9.6 | 0.2% | Jul 30, 2026 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the render... |
| CVE-2026-17854 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass sa... |
| CVE-2026-17853 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compr... |
| CVE-2026-17852 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Media Router in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now