Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3Use after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc…Check if you run itEPSS 0.44%May 28, 2026
- High8.3Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentia…Check if you run itEPSS 0.21%May 28, 2026
- Critical9.0Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb…Check if you run itEPSS 0.34%May 28, 2026
- High8.3Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to…Check if you run itEPSS 0.32%May 28, 2026
- High8.3Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to pote…Check if you run itEPSS 0.32%May 28, 2026
- High8.3Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.24%May 28, 2026
- High8.3Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer proce…Check if you run itEPSS 0.20%May 28, 2026
- High8.3Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a san…Check if you run itEPSS 0.18%May 28, 2026
- High8.3Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.18%May 28, 2026
- High8.3Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc…Check if you run itEPSS 0.18%May 28, 2026
- Low3.1Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin d…Check if you run itEPSS 0.17%May 28, 2026
- Medium5.0Inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass…Check if you run itEPSS 0.13%May 28, 2026
- High7.5Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a…Check if you run itEPSS 0.23%May 28, 2026
- High8.3Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform…Check if you run itEPSS 0.17%May 28, 2026
- High8.3Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo…Check if you run itEPSS 0.18%May 28, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.Check if you run itEPSS 0.14%May 28, 2026
- Critical9.6MeshCore Card provides MeshCore Lovelace card for Home Assistant.Check if you run itEPSS 0.48%May 28, 2026
- Medium6.0In Calico, the install-cni init container logs the rendered CNI configuration to standard output.Check if you run itEPSS 0.53%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.Check if you run itEPSS 0.26%May 28, 2026
- High8.2Python Liquid is a Python engine for the Liquid template language.Check if you run itEPSS 0.50%May 28, 2026
- Medium4.3The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14.Check if you run itEPSS 0.40%May 28, 2026
- Medium6.5The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order_by' parameter in all ver…Check if you run itEPSS 0.55%May 28, 2026