⌂

🐞 CVE Tracking and Search

Search and filter Common Vulnerabilities and Exposures

← Dashboard CVE Search Exploitation Radar Breaches Trends Industries Vendors MITRE ATT&CK MITRE ATLAS Threat Actors Attack-Tools Alerts Investigations
🔎 Search & Filters
Search: Time Range:
Sources:
📚 Intelligence Coverage the corpus behind every search on this page
380,160+
CVEs Tracked
380,160
Exploit Intel
362,085
EPSS Scored
5,297
CISA KEV
2,704
Metasploit Modules
30,390
ExploitDB Entries
61
MITRE ATT&CK Maps
🚨 Exploitation Status within the current filter · click a card to jump to it
0
Actively Exploited
2
CISA KEV
21
PoC Available
0
Zero-Days
8
Recent Discoveries
1
Most Mentioned
📊 CVE Severity Distribution last 30 days
🐞 Results 1,399 CVEs in the last 30 days · showing 301-350
CVE-2026-87540 MEDIUM CVSS: 5.4 EPSS: 0.2% CWE-863 T1078
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87540: Incorrect authorization in Isolated
MSRC Security Update Guide
CVE-2026-87539 LOW CVSS: 3.1 EPSS: 0.2% CWE-203
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87539: Observable discrepancy in Network
MSRC Security Update Guide
CVE-2026-87538 MEDIUM CVSS: 4.2 EPSS: 0.2% CWE-1021
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87538: Clickjacking in Input
MSRC Security Update Guide
CVE-2026-87537 HIGH CVSS: 8.1 EPSS: 0.4% CWE-862 T1078
Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87537: Missing authorization in Extensions
MSRC Security Update Guide
CVE-2026-87535 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-221
Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87535: Information loss or omission in Safebrowsing
MSRC Security Update Guide
CVE-2026-87533 HIGH CVSS: 8.1 EPSS: 0.1% CWE-416 T1203
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87533: Use after free in DevTools
MSRC Security Update Guide
CVE-2026-87532 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-754
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87532: Improper state validation in Safebrowsing
MSRC Security Update Guide
CVE-2026-87531 LOW CVSS: 3.1 EPSS: 0.2% CWE-200 T1005 T1083
Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87531: Information leak in CORS
MSRC Security Update Guide
CVE-2026-87530 HIGH CVSS: 8.1 EPSS: 0.1% CWE-427
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87530: Uncontrolled search path element in CredentialProvider
MSRC Security Update Guide
CVE-2026-87529 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-197
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87529: Numeric truncation error in Media
MSRC Security Update Guide
CVE-2026-87528 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-843
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87528: Type confusion in Rust
MSRC Security Update Guide
CVE-2026-87527 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-122 T1203
Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87527: Buffer overflow in WebGL
MSRC Security Update Guide
CVE-2026-87526 CRITICAL CVSS: 9.6 EPSS: 0.4% CWE-416 T1203
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87526: Use after free in Passwords
MSRC Security Update Guide
CVE-2026-87525 LOW CVSS: 2.7 EPSS: 0.1% CWE-125 T1005
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87525: Out of bounds read in Chromoting
MSRC Security Update Guide
CVE-2026-87524 HIGH CVSS: 8.3 EPSS: 0.4% CWE-416 T1203
Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87524: Use after free in Core
MSRC Security Update Guide
CVE-2026-87523 MEDIUM CVSS: 5.3 EPSS: 0.2% CWE-367
Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87523: Race condition in DataTransfer
MSRC Security Update Guide
CVE-2026-87521 LOW CVSS: 3.1 EPSS: 0.2% CWE-200 T1005 T1083
Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87521: Information leak in WebMCP
MSRC Security Update Guide
CVE-2026-87519 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-863 T1078
Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87519: Incorrect authorization in Safebrowsing
MSRC Security Update Guide
CVE-2026-87516 MEDIUM CVSS: 4.3 EPSS: 0.3% CWE-203
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87516: Observable discrepancy in Navigation
MSRC Security Update Guide
CVE-2026-87515 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-863 T1078
Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87515: Incorrect authorization in FileAPI
MSRC Security Update Guide
CVE-2026-87514 HIGH CVSS: 8.1 EPSS: 0.1% CWE-416 T1203
Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87514: Use after free in Views
MSRC Security Update Guide
CVE-2026-87513 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-862 T1078
Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87513: Missing authorization in ControlledFrame
MSRC Security Update Guide
CVE-2026-87512 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-416 T1203
Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87512: Use after free in ANGLE
MSRC Security Update Guide
CVE-2026-87511 MEDIUM CVSS: 4.3 EPSS: 0.2% CWE-862 T1078
Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87511: Missing authorization in DevTools
MSRC Security Update Guide
CVE-2026-87510 HIGH CVSS: 8.3 EPSS: 0.4% CWE-20 T1190
Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87510: Improper input validation in FileAPI
MSRC Security Update Guide
CVE-2026-87509 HIGH CVSS: 8.1 EPSS: 0.1% CWE-863 T1078
Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87509: Incorrect authorization in Updater
MSRC Security Update Guide
CVE-2026-87508 MEDIUM CVSS: 4.3 EPSS: 0.3% CWE-863 T1078
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87508: Incorrect authorization in Loader
MSRC Security Update Guide
CVE-2026-87507 MEDIUM CVSS: 5.4 EPSS: 0.3% CWE-451
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87507: UI misrepresentation in Downloads
MSRC Security Update Guide
CVE-2026-87506 HIGH CVSS: 8.3 EPSS: 0.4% CWE-250 T1068
Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87506: Privilege elevation in WebUI
MSRC Security Update Guide
CVE-2026-87505 HIGH CVSS: 8.1 EPSS: 0.3% CWE-863 T1078
Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87505: Incorrect authorization in FileSystem
MSRC Security Update Guide
CVE-2026-87504 CRITICAL CVSS: 9.6 EPSS: 0.4% CWE-416 T1203
Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87504: Use after free in Core
MSRC Security Update Guide
CVE-2026-87502 MEDIUM CVSS: 4.2 EPSS: 0.2% CWE-441
Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87502: Confused deputy in Fullscreen
MSRC Security Update Guide
CVE-2026-87501 MEDIUM CVSS: 5.4 EPSS: 0.2% CWE-451
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87501: UI misrepresentation in Passwords
MSRC Security Update Guide
CVE-2026-87500 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-129 T1203
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87500: Improper validation of array index in ANGLE
MSRC Security Update Guide
CVE-2026-87499 HIGH CVSS: 8.1 EPSS: 0.3% CWE-863 T1078
Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87499: Incorrect authorization in Network
MSRC Security Update Guide
CVE-2026-87498 LOW CVSS: 3.1 EPSS: 0.2% CWE-862 T1078
Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87498: Missing authorization in WebUI
MSRC Security Update Guide
CVE-2026-87497 MEDIUM CVSS: 4.3 EPSS: 0.3% CWE-908 T1005
Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87497: Uninitialized resource in Codecs
MSRC Security Update Guide
CVE-2026-87496 MEDIUM CVSS: 5.4 EPSS: 0.2% CWE-451
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87496: UI misrepresentation in Browser
MSRC Security Update Guide
CVE-2026-87495 MEDIUM CVSS: 4.3 EPSS: 0.3% CWE-200 T1005 T1083
Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87495: Information leak in Scroll
MSRC Security Update Guide
CVE-2026-87494 CRITICAL CVSS: 9.6 EPSS: 0.5% CWE-416 T1203
Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87494: Use after free in Browser
MSRC Security Update Guide
CVE-2026-87493 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-862 T1078
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87493: Missing authorization in FileSystem
MSRC Security Update Guide
CVE-2026-87492 CRITICAL CVSS: 9.6 EPSS: 0.4% CWE-863 T1078
Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87492: Incorrect authorization in DevTools
MSRC Security Update Guide
CVE-2026-87490 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-200 T1005 T1083
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87490: Information leak in Transactions Platform
MSRC Security Update Guide
CVE-2026-87489 HIGH CVSS: 8.8 EPSS: 0.4% CWE-119 T1203
Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87489: Memory corruption in V8
MSRC Security Update Guide
CVE-2026-87487 HIGH CVSS: 8.3 EPSS: 0.4% CWE-862 T1078
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87487: Missing authorization in FileSystem
MSRC Security Update Guide
CVE-2026-87485 LOW CVSS: 3.1 EPSS: 0.2% CWE-863 T1078
Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87485: Incorrect authorization in CORS
MSRC Security Update Guide
CVE-2026-87484 MEDIUM CVSS: 5.4 EPSS: 0.2% CWE-451
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87484: UI misrepresentation in Geometry
MSRC Security Update Guide
CVE-2026-87480 HIGH CVSS: 8.3 EPSS: 0.4% CWE-416 T1203
Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87480: Use after free in Printing
MSRC Security Update Guide
CVE-2026-87479 HIGH CVSS: 8.3 EPSS: 0.4% CWE-807
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87479: Insufficient policy enforcement in Extensions
MSRC Security Update Guide
CVE-2026-87478 MEDIUM CVSS: 6.5 EPSS: 0.3% CWE-203
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-09-09
Mentioned in 1 article(s):
Chromium CVE-2026-87478: Observable discrepancy in Autofill
MSRC Security Update Guide