Vulnerability intelligence platform

Know your exposure.
Stay ahead of threats.

Threat intelligence, made actionable Get actionable vulnerability briefings: affected platforms, exploit intelligence, severity, vendor advisories and remediation guidance. Subscribe to the technologies that matter to your environment.

74,868CVEs in selected period
8,070Critical
30,852High
26,362Medium

Explore vulnerabilities

9,609 matching records · 2026-11-12 20:30 IST
Reset filters
CVE-2026-13888HIGH · 8.8
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13890MEDIUM · 5.3
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13891HIGH · 7.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13894MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13896MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13879MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via a malicious peripheral. (Chromium security severity: Medium)

CVE-2026-13881MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13882CRITICAL · 9.6
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13883CRITICAL · 9.6
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13886MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13873MEDIUM · 6.5
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13874MEDIUM · 5.3
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13877MEDIUM · 5.3
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13859CRITICAL · 9.6
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13861CRITICAL · 9.6
Published 2026-07-01 04:47 IST · LinuxmacOS / AppleWindows

Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13845HIGH · 8.8
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Use after free in DOM in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13848HIGH · 8.8
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Use after free in Forms in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13853CRITICAL · 9.6
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13854CRITICAL · 9.6
Published 2026-07-01 04:46 IST · Linux

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13855HIGH · 7.5
Published 2026-07-01 04:46 IST · Linux

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13824HIGH · 7.5
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13825HIGH · 8.8
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13828MEDIUM · 6.5
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13830HIGH · 8.8
Published 2026-07-01 04:46 IST · Linux

Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)

CVE-2026-13831HIGH · 7.5
Published 2026-07-01 04:46 IST · LinuxmacOS / AppleWindows

Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)