Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.26%Mar 20, 2026
- High8.8Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.26%Mar 20, 2026
- High8.8Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to…Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.30%Mar 20, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%Mar 20, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.Check if you run itEPSS 0.37%Mar 20, 2026
- High8.8Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.57%Mar 20, 2026
- High8.8Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.37%Mar 20, 2026
- High8.8Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 0.34%Mar 20, 2026
- High8.8Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.37%Mar 20, 2026
- High8.7OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before perf…Check if you run itEPSS 0.76%Mar 19, 2026
- Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.Check if you run itEPSS 0.48%Mar 18, 2026
- Medium6.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to,…Check if you run itEPSS 0.27%Mar 18, 2026
- Low1.1A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android.Check if you run itEPSS 0.13%Mar 16, 2026
- Medium5.5A flaw has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.43%Mar 16, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing spec…Check if you run itEPSS 0.60%Mar 13, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richplugins Rich Showcase for Google Reviews widget-google-review…Check if you run itEPSS 0.25%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.Check if you run itEPSS 0.29%Mar 13, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.07%Mar 12, 2026
- High8.8Google Skia Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.34%Mar 12, 2026