CVE Vulnerability Database
Search and browse 397,744 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-11159 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data vi... |
| CVE-2026-11158 | HIGH | 8.6 | 0.1% | Jun 4, 2026 | Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local a... |
| CVE-2026-11157 | MEDIUM | 5.4 | 0.1% | Jun 4, 2026 | Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to in... |
| CVE-2026-11156 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11155 | MEDIUM | 4.3 | 0.2% | Jun 4, 2026 | Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-orig... |
| CVE-2026-11154 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendere... |
| CVE-2026-11153 | CRITICAL | 9.1 | 0.3% | Jun 4, 2026 | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cros... |
| CVE-2026-11152 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform ... |
| CVE-2026-11151 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote ... |
| CVE-2026-11150 | MEDIUM | 6.1 | 0.2% | Jun 4, 2026 | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrar... |
| CVE-2026-11149 | HIGH | 7.5 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attack... |
| CVE-2026-11148 | MEDIUM | 6.5 | 0.1% | Jun 4, 2026 | Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to ... |
| CVE-2026-11147 | HIGH | 8.8 | 0.4% | Jun 4, 2026 | Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrar... |
| CVE-2026-11146 | CRITICAL | 9.6 | 0.2% | Jun 4, 2026 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attack... |
| CVE-2026-11145 | MEDIUM | 5.3 | 0.2% | Jun 4, 2026 | Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin da... |
| CVE-2026-11144 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-11143 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a us... |
| CVE-2026-11142 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass sam... |
| CVE-2026-11141 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren... |
| CVE-2026-11140 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised t... |
| CVE-2026-11139 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-or... |
| CVE-2026-11138 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data v... |
| CVE-2026-11137 | MEDIUM | 6.5 | 0.3% | Jun 4, 2026 | Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensi... |
| CVE-2026-11136 | HIGH | 8.8 | 0.3% | Jun 4, 2026 | Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-11135 | MEDIUM | 6.5 | 0.2% | Jun 4, 2026 | Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass ... |