CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-121187 MEDIUM · 5.3 Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security… Google
- CVE-2026-121186 MEDIUM · 5.4 UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via… Google Apple
- CVE-2026-121185 CRITICAL · 9.6 Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Google
- CVE-2026-121184 HIGH · 8.8 Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… Google
- CVE-2026-121183 HIGH · 8.3 Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code… Google
- CVE-2026-121182 HIGH · 8.8 Het gebruik van `use after free` in de DOM in Google Chrome vóór versie 157.0.8103.38 stelde een externe aanvaller in staat om willekeurige code uit… Google
- CVE-2026-121181 HIGH · 8.8 Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121180 HIGH · 8.8 Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… Google
- CVE-2026-121179 HIGH · 8.8 Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121178 HIGH · 8.3 Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary… Google
- CVE-2026-121177 MEDIUM · 5.4 UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML… Google Apple
- CVE-2026-121176 MEDIUM · 6.5 Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.… Google
- CVE-2026-121175 NONE Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium…
- CVE-2026-121174 HIGH · 8.8 Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium… Google
- CVE-2026-121173 NONE Een niet-geïnitialiseerde bron in WebGL in Google Chrome vóór versie 157.0.8103.38 stelde een externe aanvaller in staat om geheugen buiten de sandbox uit te lezen…
- CVE-2026-121172 MEDIUM · 5.4 Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security… Google
- CVE-2026-121171 HIGH · 8.8 Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted… Google
- CVE-2026-121170 HIGH · 8.8 Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.… Google
- CVE-2026-121169 NONE Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted…
- CVE-2026-121168 HIGH · 8.8 Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox… Google
- CVE-2026-121167 NONE Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions…
- CVE-2026-121166 HIGH · 8.8 Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF… Google
- CVE-2026-121165 MEDIUM · 5.4 UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via… Google
- CVE-2026-121164 NONE Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions…
- CVE-2026-121163 HIGH · 8.3 Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… Google
- CVE-2026-121162 MEDIUM · 5.4 UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via… Google Microsoft
- CVE-2026-121161 MEDIUM · 6.5 Een informatielek in BackgroundFetch in Google Chrome vóór versie 157.0.8103.38 stelde een externe aanvaller in staat om via een speciaal geprepareerde HTML-pagina toegang te krijgen… Google
- CVE-2026-121160 NONE Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted…
- CVE-2026-121159 NONE Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted…
- CVE-2026-121158 MEDIUM · 6.5 Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security… Google
- CVE-2026-121157 NONE Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security…
- CVE-2026-121156 CRITICAL · 9.6 Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-121148 CRITICAL · 9.6 Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-121143 NONE Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the…
- CVE-2026-121142 NONE Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted…
- CVE-2026-121141 MEDIUM · 5.4 Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a… Google
- CVE-2026-121140 HIGH · 8.3 Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute… Google
- CVE-2026-121138 MEDIUM · 6.5 Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security… Google
- CVE-2026-121137 HIGH · 8.8 Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via… Google
- CVE-2026-121136 NONE Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network…
- CVE-2026-121135 HIGH · 8.8 Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium… Google
- CVE-2026-121134 HIGH · 8.8 Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium… Google
- CVE-2026-121133 HIGH · 8.1 Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to… Google Apple
- CVE-2026-121132 MEDIUM · 6.5 Information leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security… Google
- CVE-2026-121131 CRITICAL · 9.6 Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox… Google
- CVE-2026-121130 MEDIUM · 5.3 Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security… Google
- CVE-2026-121129 HIGH · 8.8 Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121128 HIGH · 8.8 Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121127 HIGH · 8.8 Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121126 CRITICAL · 9.6 Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… Google