CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-118319 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | Integer overflow in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitr... |
| CVE-2026-118318 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | Buffer overflow in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-118317 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insid... |
| CVE-2026-118316 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-118315 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary... |
| CVE-2026-118314 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a local attacker leve... |
| CVE-2026-118313 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-118312 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Observable discrepancy in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially obtain ... |
| CVE-2026-118311 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra... |
| CVE-2026-118310 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Use after free in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially e... |
| CVE-2026-118309 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker lev... |
| CVE-2026-118308 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-118307 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-118306 | CRITICAL | 9.6 | 0.4% | Oct 27, 2026 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-118305 | CRITICAL | 9.6 | 0.4% | Oct 27, 2026 | Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-118304 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-118128 | MEDIUM | 6.5 | 0.4% | Oct 27, 2026 | A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdat... |
| CVE-2026-112155 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111563 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111479 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-111467 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2025-12534 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-97045 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integra... |
| CVE-2026-78661 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string con... |
| CVE-2026-62765 | HIGH | 8.1 | 0.4% | Oct 27, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |