CVE Vulnerability Database
Search and browse 420,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121124 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to poten... |
| CVE-2026-121123 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins... |
| CVE-2026-121122 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engi... |
| CVE-2026-121121 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements ... |
| CVE-2026-121120 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had comprom... |
| CVE-2026-121119 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-121118 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-121117 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-121116 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had... |
| CVE-2026-121115 | — | — | — | Nov 3, 2026 | Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system... |
| CVE-2026-121114 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code o... |
| CVE-2026-121113 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-121112 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised ... |
| CVE-2026-121111 | — | — | — | Nov 3, 2026 | Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access... |
| CVE-2026-121110 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoo... |
| CVE-2026-121109 | — | — | — | Nov 3, 2026 | Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially b... |
| CVE-2026-121108 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypa... |
| CVE-2026-121107 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass w... |
| CVE-2026-121106 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sens... |
| CVE-2026-121105 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin dat... |
| CVE-2026-121104 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging socia... |
| CVE-2026-121103 | — | — | — | Nov 3, 2026 | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-... |
| CVE-2026-121102 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web... |
| CVE-2026-121101 | — | — | — | Nov 3, 2026 | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en... |
| CVE-2026-121100 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside... |