CVE Vulnerability Database
Search and browse 420,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121161 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-or... |
| CVE-2026-121160 | — | — | — | Nov 3, 2026 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the ... |
| CVE-2026-121159 | — | — | — | Nov 3, 2026 | Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social e... |
| CVE-2026-121158 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive informat... |
| CVE-2026-121157 | — | — | — | Nov 3, 2026 | Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system ... |
| CVE-2026-121156 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitra... |
| CVE-2026-121148 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outs... |
| CVE-2026-121143 | — | — | — | Nov 3, 2026 | Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the ... |
| CVE-2026-121142 | — | — | — | Nov 3, 2026 | Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social e... |
| CVE-2026-121141 | MEDIUM | 5.4 | 0.1% | Nov 3, 2026 | Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social... |
| CVE-2026-121140 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised th... |
| CVE-2026-121138 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin ... |
| CVE-2026-121137 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineeri... |
| CVE-2026-121136 | — | — | — | Nov 3, 2026 | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en... |
| CVE-2026-121135 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy... |
| CVE-2026-121134 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web orig... |
| CVE-2026-121133 | HIGH | 8.1 | 0.3% | Nov 3, 2026 | Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who... |
| CVE-2026-121132 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via... |
| CVE-2026-121131 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering... |
| CVE-2026-121130 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive in... |
| CVE-2026-121129 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-121128 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-121127 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-121126 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrar... |
| CVE-2026-121125 | MEDIUM | 5.3 | 0.3% | Nov 3, 2026 | Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised ... |