CVE Vulnerability Database
Search and browse 420,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121213 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origi... |
| CVE-2026-121212 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin p... |
| CVE-2026-121211 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised t... |
| CVE-2026-121210 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-121209 | — | — | — | Nov 3, 2026 | UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via... |
| CVE-2026-121208 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arb... |
| CVE-2026-121207 | — | — | — | Nov 3, 2026 | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memor... |
| CVE-2026-121206 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social eng... |
| CVE-2026-121205 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engi... |
| CVE-2026-121204 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin po... |
| CVE-2026-121203 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-121202 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineeri... |
| CVE-2026-121201 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-121200 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging ... |
| CVE-2026-121199 | MEDIUM | 5.5 | 0.1% | Nov 3, 2026 | Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain... |
| CVE-2026-121198 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering... |
| CVE-2026-121197 | — | — | — | Nov 3, 2026 | Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory o... |
| CVE-2026-121196 | — | — | — | Nov 3, 2026 | Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass syst... |
| CVE-2026-121195 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web ... |
| CVE-2026-121194 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had comprom... |
| CVE-2026-121193 | — | — | — | Nov 3, 2026 | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system... |
| CVE-2026-121190 | — | — | — | Nov 3, 2026 | UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social e... |
| CVE-2026-121189 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ou... |
| CVE-2026-121188 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary... |
| CVE-2026-121187 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive in... |