CVE Vulnerability Database
Search and browse 425,093 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102314 | MEDIUM | 5.4 | — | Sep 29, 2026 | UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements ... |
| CVE-2026-102313 | MEDIUM | 4.7 | — | Sep 29, 2026 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read ... |
| CVE-2026-102312 | MEDIUM | 4.3 | — | Sep 29, 2026 | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof... |
| CVE-2026-102311 | LOW | 3.4 | — | Sep 29, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had co... |
| CVE-2026-102310 | MEDIUM | 6.5 | — | Sep 29, 2026 | Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised ... |
| CVE-2026-102309 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-102308 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering ... |
| CVE-2026-102307 | MEDIUM | 4.7 | — | Sep 29, 2026 | Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read m... |
| CVE-2026-102306 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arb... |
| CVE-2026-102305 | MEDIUM | 5.4 | — | Sep 29, 2026 | UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI e... |
| CVE-2026-102304 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-102303 | MEDIUM | 4.3 | — | Sep 29, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain ... |
| CVE-2026-102302 | HIGH | 8.8 | 0.3% | Sep 29, 2026 | Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-102301 | HIGH | 8.3 | 0.3% | Sep 29, 2026 | Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the ren... |
| CVE-2026-102300 | MEDIUM | 4.3 | 0.2% | Sep 29, 2026 | Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origi... |
| CVE-2026-102299 | HIGH | 8.8 | 0.4% | Sep 29, 2026 | Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-102252 | MEDIUM | 6.9 | — | Sep 29, 2026 | A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 t... |
| CVE-2026-100299 | MEDIUM | 6.8 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console tha... |
| CVE-2026-100298 | HIGH | 8.8 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and accou... |
| CVE-2026-100297 | MEDIUM | 5.3 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe ... |
| CVE-2026-100296 | HIGH | 8.1 | — | Sep 29, 2026 | In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through the web ser... |
| CVE-2026-100295 | MEDIUM | 6.3 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented p... |
| CVE-2026-100294 | HIGH | 7.5 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared ... |
| CVE-2026-100293 | HIGH | 8.8 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware withou... |
| CVE-2026-100292 | HIGH | 8.8 | — | Sep 29, 2026 | In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated req... |