Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.46%Mar 7, 2026
- Critical9.6Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.36%Mar 4, 2026
- High8.8Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.43%Mar 4, 2026
- High8.8Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.80%Mar 4, 2026
- High8.8Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.37%Mar 4, 2026
- High8.8Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.72%Mar 4, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code i…Check if you run itEPSS 0.41%Mar 3, 2026
- High8.4In dumpBitmapsProto of ActivityManagerService.java, there is a possible way for an app to access private information due to a missing permission check.Check if you run itEPSS 0.14%Mar 2, 2026
- High8.4In multiple functions of mem_protect.c, there is a possible way to execute arbitrary code due to a logic error in the code.Check if you run itEPSS 0.24%Mar 2, 2026
- High8.4In multiple functions of ffa.c, there is a possible memory corruption due to a logic error in the code.Check if you run itEPSS 0.16%Mar 2, 2026
- High8.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High8.4In setPackageOrComponentEnabled of ManagedServices.java, there is a possible notification policy desync due to improper input validation.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.8In multiple functions of mem_protect.c, there is a possible out-of-bounds write due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High8.4In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Check if you run itEPSS 0.15%Mar 2, 2026
- High8.4In __host_check_page_state_range of mem_protect.c, there is a possible out of bounds write due to an incorrect bounds check.Check if you run itEPSS 0.15%Mar 2, 2026
- High8.4In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code.Check if you run itEPSS 0.11%Mar 2, 2026
- High8.4In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Check if you run itEPSS 0.15%Mar 2, 2026
- Medium6.7In smmu_detach_dev of arm-smmu-v3.c, there is a possible out of bounds write due to a use after free.Check if you run itEPSS 0.15%Mar 2, 2026
- High7.8In removePermission of PermissionManagerServiceImpl.java, there is a possible way to override any system permission due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High8.4In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass.Check if you run itEPSS 0.10%Mar 2, 2026
- Medium4.0In isRedactionNeededForOpenViaContentResolver of MediaProvider.java, there is a possible way to reveal the location of media due to a missing permission check.Check if you run itEPSS 0.10%Mar 2, 2026