2026 CVE Vulnerabilities
43,277 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-17910 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to l... |
| CVE-2026-17909 | MEDIUM | 5.3 | 0.2% | Jul 30, 2026 | Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote... |
| CVE-2026-17908 | MEDIUM | 5.8 | 0.1% | Jul 30, 2026 | Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 151.0.7922.72 allowed a remo... |
| CVE-2026-17907 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cr... |
| CVE-2026-17906 | MEDIUM | 5.8 | 0.1% | Jul 30, 2026 | Insufficient validation of untrusted input in Bluetooth in Google Chrome prior to 151.0.7922.72 allowed a remote attacke... |
| CVE-2026-17905 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in SurfaceCapture in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak... |
| CVE-2026-17904 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Insufficient policy enforcement in NFC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to l... |
| CVE-2026-17903 | MEDIUM | 5.4 | 0.1% | Jul 30, 2026 | Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local n... |
| CVE-2026-17901 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Insufficient validation of untrusted input in Sharing in Google Chrome on Android prior to 151.0.7922.72 allowed a remot... |
| CVE-2026-17900 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Enterprise in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker ... |
| CVE-2026-17897 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in ORB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-orig... |
| CVE-2026-17895 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convi... |
| CVE-2026-17893 | MEDIUM | 5.8 | 0.2% | Jul 30, 2026 | Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote at... |
| CVE-2026-17892 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Inappropriate implementation in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potent... |
| CVE-2026-17891 | MEDIUM | 5.8 | 0.1% | Jul 30, 2026 | Use after free in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised... |
| CVE-2026-17890 | MEDIUM | 5.8 | 0.2% | Jul 30, 2026 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker... |
| CVE-2026-17889 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Uninitialized Use in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data v... |
| CVE-2026-17885 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Paint in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-or... |
| CVE-2026-17883 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Headless in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass sam... |
| CVE-2026-17882 | MEDIUM | 6.5 | 0.2% | Jul 30, 2026 | Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install ... |
| CVE-2026-17880 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross... |
| CVE-2026-17879 | MEDIUM | 4.3 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross... |
| CVE-2026-17878 | MEDIUM | 6.1 | 0.2% | Jul 30, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrar... |
| CVE-2026-17876 | MEDIUM | 4.3 | 0.1% | Jul 30, 2026 | Inappropriate implementation in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross... |
| CVE-2026-17874 | MEDIUM | 5.4 | 0.2% | Jul 30, 2026 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now