By publication date

Exploited and new serious CVEs: November 2026

1,892 records · 6 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 6 of 19

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-121068No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121069No exploit	Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121070No exploit	Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121071No exploit	Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potgoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	6 days ago
38Monitor	CVE-2026-121073No exploit	Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside thgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.2%	6 days ago
38Monitor	CVE-2026-121074No exploit	Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary cogoogle · chrome · CWE-119 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
38Monitor	CVE-2026-121076No exploit	Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrarygoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	6 days ago
38Monitor	CVE-2026-121077No exploit	Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	6 days ago
35Monitor	CVE-2026-121078No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121079No exploit	Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-362 pre-auth RCE Race condition	High8.8	—	0.2%	6 days ago
35Monitor	CVE-2026-121082No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121083No exploit	Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
33Monitor	CVE-2026-121084No exploit	Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to exegoogle · chrome · CWE-125 pre-auth RCE Memory safety	High8.3	—	0.2%	6 days ago
38Monitor	CVE-2026-121086No exploit	Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-122 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
35Monitor	CVE-2026-121087No exploit	Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafgoogle · chrome · CWE-20 Pre-auth	High8.8	—	0.2%	6 days ago
38Monitor	CVE-2026-121089No exploit	Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside thegoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
33Monitor	CVE-2026-121090No exploit	Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised google · chrome · CWE-269 pre-auth RCE	High8.3	—	0.2%	6 days ago
35Monitor	CVE-2026-121092No exploit	Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code insidegoogle · chrome · CWE-674 pre-auth RCE Denial of service	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121094No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
29Monitor	CVE-2026-121095No exploit	Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a cgoogle · chrome · CWE-908 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
35Monitor	CVE-2026-121097No exploit	Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
33Monitor	CVE-2026-121098No exploit	Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-754 pre-auth RCE	High8.3	—	0.3%	6 days ago
35Monitor	CVE-2026-121100No exploit	Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121102No exploit	Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via agoogle · chrome · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
38Monitor	CVE-2026-121104No exploit	Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potgoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	6 days ago
35Monitor	CVE-2026-121107No exploit	Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy viagoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
35Monitor	CVE-2026-121108No exploit	Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policygoogle · chrome · CWE-441 Pre-auth	High8.8	—	0.2%	6 days ago
32Monitor	CVE-2026-121109No exploit	Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin polgoogle · chrome · CWE-326 Pre-auth Weak crypto	High8.1	—	0.1%	6 days ago
33Monitor	CVE-2026-121112No exploit	Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer processgoogle · chrome · CWE-125 pre-auth RCE Memory safety	High8.3	—	0.3%	6 days ago
35Monitor	CVE-2026-121113No exploit	Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121114No exploit	Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox vgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
35Monitor	CVE-2026-121117No exploit	Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121118No exploit	Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121119No exploit	Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121120No exploit	Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer prgoogle · chrome · CWE-20 Pre-auth	High8.8	—	0.2%	6 days ago
35Monitor	CVE-2026-121123No exploit	Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121124No exploit	Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitgoogle · chrome · CWE-710 pre-auth RCE	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121126No exploit	Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
35Monitor	CVE-2026-121127No exploit	Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121128No exploit	Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121129No exploit	Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.4%	6 days ago
38Monitor	CVE-2026-121131No exploit	Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrargoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	6 days ago
32Monitor	CVE-2026-121133No exploit	Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised thegoogle · chrome · CWE-706 pre-auth RCE	High8.1	—	0.3%	6 days ago
35Monitor	CVE-2026-121134No exploit	Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafgoogle · chrome · CWE-221 Pre-auth	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121135No exploit	Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML google · chrome · CWE-436 Pre-auth	High8.8	—	0.2%	6 days ago
35Monitor	CVE-2026-121137No exploit	Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
33Monitor	CVE-2026-121140No exploit	Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process tgoogle · chrome · CWE-125 pre-auth RCE Memory safety	High8.3	—	0.3%	6 days ago
29Monitor	CVE-2026-121143No exploit	Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to google · chrome · CWE-908 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
38Monitor	CVE-2026-121148No exploit	Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
38Monitor	CVE-2026-121156No exploit	Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-122 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
39Monitor	CVE-2026-121157No exploit	Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions google · chrome · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.1%	6 days ago
29Monitor	CVE-2026-121160No exploit	Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a craftegoogle · chrome · CWE-125 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
33Monitor	CVE-2026-121163No exploit	Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer procgoogle · chrome · CWE-20 pre-auth RCE	High8.3	—	0.2%	6 days ago
35Monitor	CVE-2026-121166No exploit	Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-843 pre-auth RCE	High8.8	—	0.3%	6 days ago
32Monitor	CVE-2026-121167No exploit	Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer prgoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.1	—	0.1%	6 days ago
35Monitor	CVE-2026-121168No exploit	Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to exgoogle · chrome · CWE-668 pre-auth RCE	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121170No exploit	Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a cgoogle · chrome · CWE-913 Pre-auth	High8.8	—	0.2%	6 days ago
35Monitor	CVE-2026-121171No exploit	Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web orgoogle · chrome · CWE-441 Pre-auth	High8.8	—	0.2%	6 days ago
29Monitor	CVE-2026-121173No exploit	Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a cgoogle · chrome · CWE-908 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
35Monitor	CVE-2026-121174No exploit	Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via agoogle · chrome · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	6 days ago
33Monitor	CVE-2026-121178No exploit	Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.3%	6 days ago
35Monitor	CVE-2026-121179No exploit	Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121180No exploit	Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121181No exploit	Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox viagoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121182No exploit	Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
33Monitor	CVE-2026-121183No exploit	Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer progoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	High8.3	—	0.3%	6 days ago
35Monitor	CVE-2026-121184No exploit	Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside tgoogle · chrome · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121185No exploit	Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to executgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
35Monitor	CVE-2026-121188No exploit	Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sangoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121189No exploit	Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
35Monitor	CVE-2026-121195No exploit	Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a google · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
32Monitor	CVE-2026-121196No exploit	Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictiogoogle · chrome · CWE-250 Pre-auth	High8.1	—	0.1%	6 days ago
29Monitor	CVE-2026-121197No exploit	Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox vgoogle · chrome · CWE-125 Pre-auth Memory safety	High7.4	—	0.1%	6 days ago
35Monitor	CVE-2026-121198No exploit	Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origigoogle · chrome · CWE-441 Pre-auth	High8.8	—	0.2%	6 days ago
38Monitor	CVE-2026-121200No exploit	Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering tgoogle · chrome · CWE-706 pre-auth RCE	Critical9.6	—	0.3%	6 days ago
35Monitor	CVE-2026-121201No exploit	Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
38Monitor	CVE-2026-121202No exploit	Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially exgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	6 days ago
35Monitor	CVE-2026-121203No exploit	Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121204No exploit	Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted Hgoogle · chrome · CWE-459 Pre-auth	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121205No exploit	Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass wegoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
29Monitor	CVE-2026-121207No exploit	Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbogoogle · chrome · CWE-908 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
35Monitor	CVE-2026-121208No exploit	Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside tgoogle · chrome · CWE-125 pre-auth RCE Memory safety	High8.8	—	0.3%	6 days ago
35Monitor	CVE-2026-121210No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
33Monitor	CVE-2026-121211No exploit	Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.2%	6 days ago
35Monitor	CVE-2026-121212No exploit	Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted google · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
38Monitor	CVE-2026-121214No exploit	Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside google · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
30Monitor	CVE-2026-121217No exploit	Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbogoogle · chrome · CWE-416 pre-auth RCE Memory safety	High7.5	—	0.1%	6 days ago
35Monitor	CVE-2026-121218No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
33Monitor	CVE-2026-121219No exploit	Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentgoogle · chrome · CWE-190 pre-auth RCE Memory safety	High8.3	—	0.2%	6 days ago
35Monitor	CVE-2026-121221No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
35Monitor	CVE-2026-121222No exploit	Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craftedgoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	6 days ago
32Monitor	CVE-2026-121224No exploit	Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-59 pre-auth RCE	High8.1	—	0.3%	6 days ago
35Monitor	CVE-2026-121226No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
29Monitor	CVE-2026-121227No exploit	Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process togoogle · chrome · CWE-908 Pre-auth Memory safety	High7.4	—	0.2%	6 days ago
35Monitor	CVE-2026-121228No exploit	Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
38Monitor	CVE-2026-121229No exploit	Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary google · chrome · CWE-119 pre-auth RCE Memory safety	Critical9.6	—	0.4%	6 days ago
33Monitor	CVE-2026-121230No exploit	Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-362 pre-auth RCE Race condition	High8.3	—	0.2%	6 days ago
35Monitor	CVE-2026-121233No exploit	Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbogoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	6 days ago
38Monitor	CVE-2026-121234No exploit	Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitgoogle · chrome · CWE-250 pre-auth RCE	Critical9.6	—	0.3%	6 days ago
35Monitor	CVE-2026-121236No exploit	Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a cragoogle · chrome · CWE-20 Pre-auth	High8.8	—	0.2%	6 days ago

CVE-2026-121068
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121069
35Monitor
Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121070
35Monitor
Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121071
38Monitor
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121073
38Monitor
Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside th
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121074
38Monitor
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary co
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121076
38Monitor
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121077
38Monitor
Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially exec
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121078
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121079
35Monitor
Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chrome6 days ago
CVE-2026-121082
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121083
35Monitor
Use after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121084
33Monitor
Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to exe
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121086
38Monitor
Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121087
35Monitor
Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craf
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121089
38Monitor
Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121090
33Monitor
Improper privilege management in Navigation in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker who had compromised
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121092
35Monitor
Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Denial of service
google · chrome6 days ago
CVE-2026-121094
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121095
29Monitor
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121097
35Monitor
Use after free in Printing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121098
33Monitor
Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121100
35Monitor
Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121102
35Monitor
Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121104
38Monitor
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121107
35Monitor
Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121108
35Monitor
Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121109
32Monitor
Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin pol
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
google · chrome6 days ago
CVE-2026-121112
33Monitor
Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121113
35Monitor
Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121114
38Monitor
Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox v
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121117
35Monitor
Use after free in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121118
35Monitor
Use after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121119
35Monitor
Use after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121120
35Monitor
Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121123
35Monitor
Use after free in Canvas in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121124
35Monitor
Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbit
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121126
38Monitor
Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the s
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121127
35Monitor
Use after free in WebAudio in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121128
35Monitor
Use after free in Scheduling in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121129
35Monitor
Use after free in WebRTC in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121131
38Monitor
Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrar
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121133
32Monitor
Incorrect reference resolution in Images in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121134
35Monitor
Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craf
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121135
35Monitor
Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121137
35Monitor
Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121140
33Monitor
Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121143
29Monitor
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121148
38Monitor
Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121156
38Monitor
Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121157
39Monitor
Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121160
29Monitor
Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafte
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121163
33Monitor
Improper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer proc
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121166
35Monitor
Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121167
32Monitor
Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121168
35Monitor
Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to ex
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121170
35Monitor
Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a c
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121171
35Monitor
Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web or
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121173
29Monitor
Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121174
35Monitor
Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121178
33Monitor
Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potenti
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121179
35Monitor
Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121180
35Monitor
Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121181
35Monitor
Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121182
35Monitor
Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121183
33Monitor
Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pro
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121184
35Monitor
Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside t
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121185
38Monitor
Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execut
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121188
35Monitor
Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the san
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121189
38Monitor
Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox vi
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121195
35Monitor
Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121196
32Monitor
Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictio
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121197
29Monitor
Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox v
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121198
35Monitor
Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origi
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121200
38Monitor
Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering t
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121201
35Monitor
Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox v
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121202
38Monitor
Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially ex
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121203
35Monitor
Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121204
35Monitor
Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted H
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago
CVE-2026-121205
35Monitor
Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass we
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121207
29Monitor
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbo
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121208
35Monitor
Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside t
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121210
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121211
33Monitor
Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121212
35Monitor
Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121214
38Monitor
Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121217
30Monitor
Use after free in Streaming in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to execute arbitrary code inside the sandbo
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121218
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121219
33Monitor
Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potent
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121221
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121222
35Monitor
Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chrome6 days ago
CVE-2026-121224
32Monitor
Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer proce
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121226
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121227
29Monitor
Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
google · chrome6 days ago
CVE-2026-121228
35Monitor
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121229
38Monitor
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chrome6 days ago
CVE-2026-121230
33Monitor
Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chrome6 days ago
CVE-2026-121233
35Monitor
Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbo
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121234
38Monitor
Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbit
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chrome6 days ago
CVE-2026-121236
35Monitor
Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a cra
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chrome6 days ago