CVE Vulnerability Database
Search and browse 425,093 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-95372 | HIGH | 8.3 | 0.4% | Sep 29, 2026 | Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the r... |
| CVE-2026-95371 | MEDIUM | 5.4 | — | Sep 29, 2026 | Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compr... |
| CVE-2026-95370 | MEDIUM | 5.4 | — | Sep 29, 2026 | Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system a... |
| CVE-2026-95369 | HIGH | 8.8 | — | Sep 29, 2026 | Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially exe... |
| CVE-2026-95368 | MEDIUM | 4.3 | — | Sep 29, 2026 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social ... |
| CVE-2026-95367 | MEDIUM | 5.3 | — | Sep 29, 2026 | Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised t... |
| CVE-2026-95366 | MEDIUM | 6.5 | — | Sep 29, 2026 | Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised t... |
| CVE-2026-95365 | HIGH | 8.8 | — | Sep 29, 2026 | Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arb... |
| CVE-2026-95364 | MEDIUM | 5.4 | — | Sep 29, 2026 | Improper input validation in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI ele... |
| CVE-2026-95363 | MEDIUM | 5.4 | 0.2% | Sep 29, 2026 | UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social e... |
| CVE-2026-95362 | HIGH | 8.8 | — | Sep 29, 2026 | Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging soci... |
| CVE-2026-95361 | MEDIUM | 4.3 | 0.3% | Sep 29, 2026 | Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineer... |
| CVE-2026-95360 | MEDIUM | 5.3 | 0.2% | Sep 29, 2026 | Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineerin... |
| CVE-2026-95359 | LOW | 3.4 | — | Sep 29, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had co... |
| CVE-2026-95358 | MEDIUM | 4.4 | 0.1% | Sep 29, 2026 | Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypa... |
| CVE-2026-95357 | CRITICAL | 9.6 | — | Sep 29, 2026 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentiall... |
| CVE-2026-95356 | CRITICAL | 9.6 | — | Sep 29, 2026 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engin... |
| CVE-2026-95355 | HIGH | 8.3 | — | Sep 29, 2026 | Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who ha... |
| CVE-2026-95354 | HIGH | 8.3 | — | Sep 29, 2026 | Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the ren... |
| CVE-2026-95353 | HIGH | 8.8 | — | Sep 29, 2026 | Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-95352 | MEDIUM | 5.4 | — | Sep 29, 2026 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social ... |
| CVE-2026-95351 | HIGH | 8.3 | — | Sep 29, 2026 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the render... |
| CVE-2026-95350 | CRITICAL | 9.6 | — | Sep 29, 2026 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbi... |
| CVE-2026-95349 | CRITICAL | 9.6 | — | Sep 29, 2026 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially ... |
| CVE-2026-95348 | HIGH | 8.3 | — | Sep 29, 2026 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the re... |