CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-121075 NONE Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted…
- CVE-2026-121074 CRITICAL · 9.6 Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… Google
- CVE-2026-121073 CRITICAL · 9.6 Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted… Google
- CVE-2026-121072 MEDIUM · 6.5 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security… Google
- CVE-2026-121071 CRITICAL · 9.6 Onjuiste autorisatie in FileSystem in Google Chrome vóór 157.0.8103.38 stond een externe aanvaller toe om social engineering te gebruiken om mogelijk willekeurige code buiten de… Google
- CVE-2026-121070 HIGH · 8.8 Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121069 HIGH · 8.8 Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121068 HIGH · 8.8 Type verwarring in V8 in Google Chrome vóór 157.0.8103.38 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via een… Google
- CVE-2026-121067 MEDIUM · 5.4 UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML… Google
- CVE-2026-121066 NONE Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted…
- CVE-2026-121065 HIGH · 8.8 Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted… Google
- CVE-2026-121064 HIGH · 7.8 Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the sandbox via a… Google
- CVE-2026-121063 NONE Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via…
- CVE-2026-121062 NONE Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions…
- CVE-2026-121061 HIGH · 8.8 Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121060 CRITICAL · 9.6 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox… Google
- CVE-2026-121059 MEDIUM · 6.5 Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security… Google
- CVE-2026-121057 HIGH · 8.8 Type verwarring in V8 in Google Chrome vóór 157.0.8103.38 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via een… Google
- CVE-2026-121055 NONE Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium…
- CVE-2026-121054 HIGH · 8.8 Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page.… Google
- CVE-2026-121053 MEDIUM · 5.4 UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements… Google
- CVE-2026-121052 HIGH · 8.8 Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121051 NONE UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML…
- CVE-2026-121050 HIGH · 8.8 Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted… Google Apple
- CVE-2026-121049 LOW · 3.3 Out of bounds read in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a crafted file. (Chromium security… Google
- CVE-2026-121048 HIGH · 8.8 Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… Google
- CVE-2026-121047 HIGH · 8.8 Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
- CVE-2026-121046 NONE Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML…
- CVE-2026-121045 MEDIUM · 5.4 UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via… Google Apple
- CVE-2026-121044 HIGH · 8.8 Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121043 MEDIUM · 5.4 UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML…
- CVE-2026-121042 NONE Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted…
- CVE-2026-121041 MEDIUM · 6.5 Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security…
- CVE-2026-121040 NONE Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions…
- CVE-2026-121039 MEDIUM · 5.3 Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security…
- CVE-2026-121038 MEDIUM · 6.5 Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security…
- CVE-2026-121037 CRITICAL · 9.6 Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside… Google Microsoft
- CVE-2026-121036 HIGH · 8.8 Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-121035 CRITICAL · 9.6 Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-121034 CRITICAL · 9.6 Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code…
- CVE-2026-121033 NONE Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read…
- CVE-2026-121032 NONE Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted…
- CVE-2026-121031 NONE Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged page via a…
- CVE-2026-121030 CRITICAL · 9.6 Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox… Google
- CVE-2026-121029 NONE Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security…
- CVE-2026-120959 LOW · 3.7 A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside the bounds of a…
- CVE-2026-120952 HIGH · 7.1 An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a…
- CVE-2026-120734 MEDIUM · 6.5 Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action…
- CVE-2026-120733 HIGH · 7.5 Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with read access to the database…
- CVE-2026-120716 MEDIUM · 6.5 Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the…