Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit h…Check if you run itEPSS 0.29%Mar 11, 2026
- High8.8Use after free in WebMCP in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.36%Mar 11, 2026
- High8.8Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.36%Mar 11, 2026
- Critical9.6Out of bounds read in Web Speech in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.36%Mar 11, 2026
- High8.8Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.39%Mar 11, 2026
- High8.8Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.36%Mar 11, 2026
- High8.8Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.39%Mar 11, 2026
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.46%Mar 7, 2026
- Medium6.3OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server…Check if you run itEPSS 0.74%Mar 5, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.Check if you run itEPSS 0.11%Mar 4, 2026
- Critical9.6Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.36%Mar 4, 2026
- High8.8Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.43%Mar 4, 2026
- High8.8Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.80%Mar 4, 2026
- High8.8Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.72%Mar 4, 2026
- Critical9.6Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers to execute arbitrary JavaSc…Check if you run itEPSS 0.34%Feb 25, 2026
- Medium5.4Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject s…Check if you run itEPSS 0.20%Feb 23, 2026
- Critical9.8Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.37%Feb 23, 2026
- Critical9.1Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.34%Feb 23, 2026
- Low2.3uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake.Check if you run itEPSS 0.19%Feb 20, 2026
- High8.8Google Chromium CSS Use-After-Free VulnerabilityPatch nowKEVEPSS 54.96%Feb 13, 2026