CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 12:14 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118341 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118347 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118314 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
| CVE-2026-118308 New | CH Chrome Google | 9.6 | Oct 27 | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118335 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
| CVE-2026-118310 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-118342 New | CH Chrome Google | 9.6 | Oct 27 | Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118346 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118316 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118304 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118345 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118313 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118332 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted… |
| CVE-2026-118334 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118311 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118343 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted… |
| CVE-2026-118359 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118327 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118349 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118353 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118358 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118336 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118333 New | CH Chrome Google | – | Oct 27 | Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page |
| CVE-2026-118328 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118351 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118307 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118355 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |
| CVE-2026-118352 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118337 New | CH Chrome Google | – | Oct 27 | Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page |
| CVE-2026-118321 New | CH Chrome Google | 9.6 | Oct 27 | Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-118340 New | CH Chrome Google | 9.6 | Oct 27 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118354 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118329 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
| CVE-2026-118322 New | CH Chrome Google | – | Oct 27 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page |
| CVE-2026-118320 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118317 New | CH Chrome Google | 8.8 | Oct 27 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118305 New | CH Chrome Google | 9.6 | Oct 27 | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-118339 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118350 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118318 New | CH Chrome Google | – | Oct 27 | Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page |
| CVE-2026-118357 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118344 New | CH Chrome Google | 8.8 | Oct 27 | Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-118348 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118331 New | CH Chrome Google | 8.8 | Oct 27 | Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML… |
| CVE-2026-118306 New | CH Chrome Google | 9.6 | Oct 27 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-50571 New | WE websub w3c | 5.7 | Oct 27 | WebSub: Reflected script execution through intent-verification challenges |
| CVE-2026-59158 New | NU nuxt-ollama thoda-dev | 7.5 | Oct 27 | Nuxt Ollama: public runtime configuration discloses the configured cloud API key |
| CVE-2026-58257 New | GR GRR JeromeDevome | 7.2 | Oct 27 | GRR vulnerable to Arbitrary File Read and Deletion |
| CVE-2026-58256 New | GR GRR JeromeDevome | 9.1 | Oct 27 | GRR vulnerable to Remote Code Execution Via PHP Code Injection |
| CVE-2026-58255 New | CR Cronicle jhuckaby | 8.8 | Oct 27 | Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 |