VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.
19,735 CVE recordsPage 697 of 1316 · EPSS data 2026.08.12
ReviewHigh
CVE-2026-11652

Google Chrome, chrome, macos

Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-11651

Google Chrome, chrome, macos

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11650

Google Chrome, chrome, macos

Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11649

Google Chrome, chrome, macos

Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11648

Google Chrome, chrome, windows

Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11647

Google Chrome, chrome, android

Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11646

Google Chrome, chrome, macos

Use after free in ViewTransitions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
CISA KEVHigh
CVE-2026-11645

Google Chrome, chrome, macos

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
ReviewHigh
CVE-2026-11644

Google Chrome, chrome, linux kernel

Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11643

Google Chrome, chrome, macos

Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11642

Google Chrome, chrome, macos

Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11641

Google Chrome, chrome, windows

Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11640

Google Chrome, chrome, macos

Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-11639

Google Chrome, chrome, macos

Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-11638

Google Chrome, chrome, macos

Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

The CVSS severity warrants an early asset and exposure review.