Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.52%May 6, 2026
- Medium5.4Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.26%May 6, 2026
- Medium4.3Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.26%May 6, 2026
- Medium4.3Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.26%May 6, 2026
- Medium5.4Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to inject arbitrary sc…Check if you run itEPSS 0.22%May 6, 2026
- Medium4.3Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.26%May 6, 2026
- Medium6.3Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process…Check if you run itEPSS 0.22%May 6, 2026
- Medium5.0Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation re…Check if you run itEPSS 0.19%May 6, 2026
- Medium5.4Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform U…Check if you run itEPSS 0.19%May 6, 2026
- High7.5Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perfor…Check if you run itEPSS 0.32%May 6, 2026
- Medium5.4Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perfor…Check if you run itEPSS 0.19%May 6, 2026
- Medium4.3Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin polic…Check if you run itEPSS 0.16%May 6, 2026
- Medium4.3Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to leak c…Check if you run itEPSS 0.20%May 6, 2026
- Medium5.4Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via malicious network traffic.Check if you run itEPSS 0.24%May 6, 2026
- High8.8Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%May 6, 2026
- High8.3Use After Free in Printing in Google Chrome on Linux, Mac, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potent…Check if you run itEPSS 0.30%May 6, 2026
- High8.8Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a…Check if you run itEPSS 0.41%May 6, 2026
- Medium4.3Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory vi…Check if you run itEPSS 0.26%May 6, 2026
- Medium5.4Insufficient validation of untrusted input in Dialog in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perf…Check if you run itEPSS 0.26%May 6, 2026
- High7.8Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation…Check if you run itEPSS 0.10%May 6, 2026
- Medium4.2Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform…Check if you run itEPSS 0.22%May 6, 2026
- High8.8Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.36%May 6, 2026
- High7.8Inappropriate implementation in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a m…Check if you run itEPSS 0.10%May 6, 2026
- Medium4.2Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer pr…Check if you run itEPSS 0.22%May 6, 2026
- High8.8Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in…Check if you run itEPSS 0.36%May 6, 2026