Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: сентябрь 2026 г.

7 963 записей · 32 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

Страница 22 из 80

  • CVE-2026-78524
    35Наблюдать

    Microsoft Office Remote Code Execution Vulnerability

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    microsoft · 365 apps8 сент. 2026 г.

  • CVE-2026-81352
    35Наблюдать

    Web Media Extensions Remote Code Execution Vulnerability

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    microsoft · web media extensions8 сент. 2026 г.

  • CVE-2026-81396
    31Наблюдать

    Microsoft Excel Remote Code Execution Vulnerability

    ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %

    microsoft · 365 apps8 сент. 2026 г.

  • CVE-2026-53581
    36Наблюдать

    ntp: write path traversal

    КритическаяCVSS 9,0Эксплойта нетEPSS 0 %

    opnsense · core8 сент. 2026 г.

  • CVE-2026-55250
    34Наблюдать

    Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches

    ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %

    macropay-solutions · maravel-framework8 сент. 2026 г.

  • CVE-2026-53938
    32Наблюдать

    OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

    ВысокаяCVSS 8,2Эксплойта нетEPSS 0 %

    openidc · cjose8 сент. 2026 г.

  • CVE-2026-53939
    36Наблюдать

    OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

    КритическаяCVSS 9,1Эксплойта нетEPSS 0 %

    openidc · cjose8 сент. 2026 г.

  • CVE-2026-28659
    40В плане

    In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check.

    КритическаяCVSS 10,0Эксплойта нетEPSS 0 %

    google · android xr8 сент. 2026 г.

  • CVE-2026-78545
    28Наблюдать

    Improper Input Sanitization in Okta Access Gateway Application Label Configuration

    ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %

    okta · access gateway8 сент. 2026 г.

  • CVE-2026-78550
    28Наблюдать

    Improper Input Handling in Okta Access Gateway Management Console Exception Handler

    ВысокаяCVSS 7,2Эксплойта нетEPSS 0 %

    okta · access gateway8 сент. 2026 г.

  • CVE-2026-87430
    35Наблюдать

    Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87431
    30Наблюдать

    Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87433
    35Наблюдать

    Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypa

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87438
    38Наблюдать

    Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outsi

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87440
    35Наблюдать

    Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox v

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87444
    35Наблюдать

    Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox v

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87448
    38Наблюдать

    Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox v

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87450
    30Наблюдать

    Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to ob

    ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87455
    38Наблюдать

    Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the s

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87457
    32Наблюдать

    Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside t

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87460
    35Наблюдать

    Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox vi

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87464
    38Наблюдать

    Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87467
    32Наблюдать

    Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary co

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87470
    38Наблюдать

    Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbi

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87471
    32Наблюдать

    Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87474
    38Наблюдать

    Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside t

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87479
    33Наблюдать

    Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the rend

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87480
    33Наблюдать

    Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to pot

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87481
    33Наблюдать

    Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the r

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87487
    33Наблюдать

    Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proce

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87488
    38Наблюдать

    Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside th

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87489
    35Наблюдать

    Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the s

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87491
    66На этой неделе

    Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 3 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87492
    38Наблюдать

    Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code

    КритическаяCVSS 9,6Proof of conceptEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87494
    38Наблюдать

    Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to e

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87499
    32Наблюдать

    Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proces

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87500
    38Наблюдать

    Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitra

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-30754
    35Наблюдать

    A memory corruption vulnerability exists in FFmpeg before 8.1.

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    ffmpeg · ffmpeg8 сент. 2026 г.

  • CVE-2026-87504
    38Наблюдать

    Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87505
    32Наблюдать

    Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87506
    33Наблюдать

    Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to p

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87509
    32Наблюдать

    Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87510
    33Наблюдать

    Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proc

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87512
    38Наблюдать

    Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside th

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87514
    32Наблюдать

    Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87520
    38Наблюдать

    Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87524
    33Наблюдать

    Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proc

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87526
    38Наблюдать

    Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially e

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87527
    38Наблюдать

    Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87528
    38Наблюдать

    Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87529
    38Наблюдать

    Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code ou

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87530
    32Наблюдать

    Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to exe

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87533
    32Наблюдать

    Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox vi

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87534
    39Наблюдать

    Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineeri

    КритическаяCVSS 9,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87536
    35Наблюдать

    Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87537
    32Наблюдать

    Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proce

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87542
    35Наблюдать

    Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87544
    39Наблюдать

    Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions

    КритическаяCVSS 9,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87547
    38Наблюдать

    Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87553
    33Наблюдать

    Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the rendere

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87554
    32Наблюдать

    Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outsid

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87558
    38Наблюдать

    Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87569
    35Наблюдать

    Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass sys

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87570
    35Наблюдать

    Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87572
    33Наблюдать

    Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentia

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87575
    21Наблюдать

    Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass

    СредняяCVSS 5,4Proof of conceptEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87578
    33Наблюдать

    Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbo

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87579
    35Наблюдать

    Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87581
    38Наблюдать

    Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially ex

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87582
    33Наблюдать

    Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process t

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87585
    35Наблюдать

    Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87587
    35Наблюдать

    Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87588
    35Наблюдать

    Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87595
    39Наблюдать

    Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to byp

    КритическаяCVSS 9,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87601
    30Наблюдать

    Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87604
    33Наблюдать

    Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to po

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87606
    32Наблюдать

    Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pr

    ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87607
    38Наблюдать

    Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code o

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87608
    30Наблюдать

    Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to

    ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87609
    38Наблюдать

    Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87612
    35Наблюдать

    Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87613
    36Наблюдать

    Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitr

    КритическаяCVSS 9,0Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87616
    33Наблюдать

    Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the ren

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87617
    35Наблюдать

    Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitr

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87618
    33Наблюдать

    Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromise

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87621
    38Наблюдать

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrar

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87625
    35Наблюдать

    Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary co

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87628
    33Наблюдать

    Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside th

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87633
    34Наблюдать

    Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via U

    ВысокаяCVSS 8,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87634
    38Наблюдать

    Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outsi

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87636
    35Наблюдать

    Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the san

    ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87637
    38Наблюдать

    Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside t

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87638
    38Наблюдать

    Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87639
    33Наблюдать

    Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87643
    38Наблюдать

    Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary cod

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87644
    33Наблюдать

    Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the ren

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87646
    38Наблюдать

    Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87648
    33Наблюдать

    Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro

    ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87650
    38Наблюдать

    Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.

  • CVE-2026-87654
    38Наблюдать

    Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside t

    КритическаяCVSS 9,6Эксплойта нетEPSS 0 %

    google · chrome8 сент. 2026 г.