CVE Vulnerability Database
Search and browse 423,249 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113174 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web orig... |
| CVE-2026-113173 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | UI misrepresentation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging so... |
| CVE-2026-113172 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Missing authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross... |
| CVE-2026-113171 | CRITICAL | 9.6 | 0.5% | Oct 20, 2026 | UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveragin... |
| CVE-2026-113170 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoo... |
| CVE-2026-113169 | CRITICAL | 9.6 | 0.5% | Oct 20, 2026 | UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker le... |
| CVE-2026-113168 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Incomplete cleanup in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social en... |
| CVE-2026-113167 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Observable discrepancy in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak cross-origin... |
| CVE-2026-113166 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Improper input validation in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who... |
| CVE-2026-113165 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had... |
| CVE-2026-113164 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Race condition in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to bypass system ... |
| CVE-2026-113163 | HIGH | 8.8 | 0.5% | Oct 20, 2026 | Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially ... |
| CVE-2026-113162 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-113161 | HIGH | 8.8 | 0.5% | Oct 20, 2026 | Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-113160 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Out of bounds write in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary c... |
| CVE-2026-113159 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | Incorrect reference resolution in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging ... |
| CVE-2026-113158 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to potentially execute ... |
| CVE-2026-113157 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to poten... |
| CVE-2026-113156 | HIGH | 8.8 | 0.5% | Oct 20, 2026 | UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoo... |
| CVE-2026-113155 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Missing authorization in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engine... |
| CVE-2026-113154 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-113153 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had comprom... |
| CVE-2026-113152 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Confused deputy in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineerin... |
| CVE-2026-113151 | MEDIUM | 6.5 | 0.3% | Oct 20, 2026 | Missing authorization in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the... |
| CVE-2026-113150 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | Race condition in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass site ... |