2026 CVE Vulnerabilities
51,177 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-7923 | HIGH | 8.3 | 0.2% | May 6, 2026 | Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the re... |
| CVE-2026-7922 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform... |
| CVE-2026-7921 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-7920 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-7919 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-7918 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer... |
| CVE-2026-7917 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compro... |
| CVE-2026-7916 | HIGH | 8.3 | 0.2% | May 6, 2026 | Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had... |
| CVE-2026-7914 | HIGH | 8.3 | 0.2% | May 6, 2026 | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had com... |
| CVE-2026-7913 | HIGH | 7.8 | 0.1% | May 6, 2026 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker ... |
| CVE-2026-7911 | HIGH | 8.3 | 0.2% | May 6, 2026 | Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised ... |
| CVE-2026-7907 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-7906 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-7905 | HIGH | 8.3 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote ... |
| CVE-2026-7903 | HIGH | 8.8 | 0.2% | May 6, 2026 | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote attacker to potentiall... |
| CVE-2026-7902 | HIGH | 8.8 | 0.3% | May 6, 2026 | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary... |
| CVE-2026-7901 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary co... |
| CVE-2026-7900 | HIGH | 8.3 | 0.2% | May 6, 2026 | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the ... |
| CVE-2026-7899 | HIGH | 8.8 | 0.3% | May 6, 2026 | Out of bounds read and write in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrar... |
| CVE-2026-7898 | HIGH | 8.8 | 0.3% | May 6, 2026 | Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbit... |
| CVE-2026-7897 | HIGH | 7.5 | 0.3% | May 6, 2026 | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user t... |
| CVE-2026-7896 | HIGH | 8.8 | 0.3% | May 6, 2026 | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap ... |
| CVE-2026-41938 | HIGH | 8.8 | 0.5% | May 6, 2026 | Vvveb before version 1.0.8.2 contains an unrestricted file upload vulnerability in the media upload handler that allows ... |
| CVE-2026-41936 | HIGH | 8.6 | 0.3% | May 6, 2026 | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vulnerability in the admin Tools/Import fea... |
| CVE-2026-41934 | HIGH | 8.8 | 0.5% | May 6, 2026 | Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now