CVE Vulnerability Database
Search and browse 420,075 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121099 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive ... |
| CVE-2026-121098 | HIGH | 8.3 | 0.4% | Nov 3, 2026 | Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised t... |
| CVE-2026-121097 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-121096 | — | — | — | Nov 3, 2026 | Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local pro... |
| CVE-2026-121095 | — | — | — | Nov 3, 2026 | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside... |
| CVE-2026-121094 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-121093 | — | — | — | Nov 3, 2026 | Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read me... |
| CVE-2026-121092 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute a... |
| CVE-2026-121091 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had comprom... |
| CVE-2026-121090 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker ... |
| CVE-2026-121089 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitr... |
| CVE-2026-121088 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cro... |
| CVE-2026-121087 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web orig... |
| CVE-2026-121086 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outs... |
| CVE-2026-121085 | — | — | — | Nov 3, 2026 | Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system acce... |
| CVE-2026-121084 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the ren... |
| CVE-2026-121083 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary cod... |
| CVE-2026-121082 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-121081 | MEDIUM | 5.9 | 0.2% | Nov 3, 2026 | UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en... |
| CVE-2026-121080 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | Use after free in Codecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the san... |
| CVE-2026-121079 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-121078 | HIGH | 8.8 | 0.4% | Nov 3, 2026 | Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary ... |
| CVE-2026-121077 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering... |
| CVE-2026-121076 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering ... |
| CVE-2026-121075 | — | — | — | Nov 3, 2026 | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en... |