Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.03%Nov 12, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.39%Sep 17, 2025
- High8.8Android Runtime Use-After-Free VulnerabilityPatch nowKEVEPSS 0.63%Sep 1, 2025
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityPatch nowKEVEPSS 1.34%Jul 22, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- Medium5.4Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck this weekEPSS 48.00%Jul 11, 2025
- Medium6.3No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check this weekEPSS 63.00%Jul 11, 2025
- Medium5.6Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.Check this weekEPSS 37.00%Jul 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs.Check if you run itEPSS 0.29%Jul 8, 2025
- High7.4No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 3.92%Jul 1, 2025
- High8.1Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 14.14%Jun 30, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google photo-express-for-google allows Reflected XSS.Check this weekEPSS 26.00%Jun 27, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- Medium5.4Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- Medium5.4Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- High8.8Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 44.00%Jun 18, 2025
- High8.8Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check this weekEPSS 11.49%Jun 18, 2025
- UnknownQualcomm ar8035_firmware Improper Validation of Array IndexPatch nowKEVEPSS 0.58%Jun 17, 2025
- High7.4Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debugCheck if you run itEPSS 9.00%Jun 16, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check this weekEPSS 13.34%Jun 11, 2025
- High8.8Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.40%Jun 11, 2025
- Critical9.4A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud StoragCheck if you run itEPSS 0.25%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection.Check if you run itEPSS 1.49%Jun 10, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.ThiCheck this weekEPSS 42.00%Jun 6, 2025