CVE Vulnerability Database

Search and browse 420,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-121186MEDIUM5.4UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging...
CVE-2026-121185CRITICAL9.6Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social e...
CVE-2026-121184HIGH8.8Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arb...
CVE-2026-121183HIGH8.3Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromi...
CVE-2026-121182HIGH8.8Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside...
CVE-2026-121181HIGH8.8Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code in...
CVE-2026-121180HIGH8.8Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins...
CVE-2026-121179HIGH8.8Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins...
CVE-2026-121178HIGH8.3Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the rendere...
CVE-2026-121177MEDIUM5.4UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI...
CVE-2026-121176MEDIUM6.5Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside ...
CVE-2026-121175——Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isola...
CVE-2026-121174HIGH8.8Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web...
CVE-2026-121173——Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside...
CVE-2026-121172MEDIUM5.4Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elemen...
CVE-2026-121171HIGH8.8Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineer...
CVE-2026-121170HIGH8.8Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web o...
CVE-2026-121169——Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en...
CVE-2026-121168HIGH8.8Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging soci...
CVE-2026-121167——Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had comprom...
CVE-2026-121166HIGH8.8Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins...
CVE-2026-121165MEDIUM5.4UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveragin...
CVE-2026-121164——Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging ...
CVE-2026-121163HIGH8.3Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromis...
CVE-2026-121162MEDIUM5.4UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker le...