Publikacje w kolejności czasu

Wszystkie technologie
CVSS — dotkliwość podatności w skali 0–10. Wyższy wynik oznacza poważniejsze skutki. Nie określa prawdopodobieństwa ataku.EPSS — szacowane prawdopodobieństwo wykorzystania podatności w atakach w ciągu najbliższych 30 dni. Wynik jest podany w procentach.CISA KEV — katalog podatności o potwierdzonym wykorzystaniu w atakach. Brak wpisu nie oznacza braku ataków.
Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
OprogramowaniePodatność i krótki opisZapisz
Chrome CVE-2026-121257
Wysoki priorytet

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

9,6 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121246
Wysoki priorytet

Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121247
Wysoki priorytet

Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

9,6 0,45 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121249
Wysoki priorytet

Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,45 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121250
Wysoki priorytet

Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

9,6 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121241
Wysoki priorytet

Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,34 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121234
Wysoki priorytet

Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9,6 0,33 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121229
Wysoki priorytet

Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121212
Wysoki priorytetPoC

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121214
Wysoki priorytet

Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121202
Wysoki priorytet

Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9,6 0,33 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121200
Wysoki priorytet

Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9,6 0,37 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121185
Wysoki priorytet

Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121189
Wysoki priorytet

Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121179
Wysoki priorytetPoC

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,35 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121170
Wysoki priorytetPoC

Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,29 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121171
Wysoki priorytetPoC

Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

8,8 0,26 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121166
Wysoki priorytetPoC

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

8,8 0,32 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121167
Wysoki priorytetPoC

Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

8,1 0,24 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121148
Wysoki priorytet

Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121156
Wysoki priorytet

Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

9,6 0,48 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121157
Wysoki priorytet

Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low)

9,8 0,23 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121131
Wysoki priorytet

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

9,6 0,38 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121126
Wysoki priorytet

Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-121114
Wysoki priorytet

Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,41 % Brak wpisu w KEV nie wyklucza ataków
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.