VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.
19,735 CVE recordsPage 472 of 1316 · EPSS data 2026.08.12
ReviewHigh
CVE-2026-14403

Google Chrome, chrome

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14401

Google Chrome, chrome, android

Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14400

Google Chrome, chrome

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14398

Google Chrome, chrome

Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14397

Google Chrome, chrome, macos

Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14395

Google Chrome, chrome

Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14394

Google Chrome, chrome

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14393

Google Chrome, chrome

Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14392

Google Chrome, chrome

Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14390

Google Chrome, chrome

Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14389

Google Chrome, chrome

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14387

Google Chrome, chrome

Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14385

Google Chrome, chrome, macos

Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-14383

Google Chrome, chrome

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-14382

Google Chrome, chrome

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.