Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Chrome | CVE-2026-121257 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium) |
9,6 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121246 Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121247 Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121249 Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121250 Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High) |
9,6 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121241 Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121234 Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
9,6 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121229 Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121212 Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121214 Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121202 Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
9,6 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121200 Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
9,6 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121185 Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121189 Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121179 Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121170 Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121171 Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
8,8 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121166 Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High) |
8,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121167 Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
8,1 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121148 Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121156 Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,48 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121157 Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low) |
9,8 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121131 Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High) |
9,6 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121126 Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-121114 Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.