Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium4.3Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2026-8576 · google · chrome · CVE.org · NIST NVD · Chrome, ChromeOSMay 14, 2026
High8.8Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2026-7363 · google · chrome · CVE.org · NIST NVD · Chrome, ChromeOSApr 28, 2026