Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Chrome | CVE-2026-126910 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126911 Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
8,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126912 Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126913 Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
3,4 | 0,17 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126914 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126915 Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
7,5 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126916 Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126902 Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
7,5 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126903 Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
8,1 | 0,25 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126904 Use after free in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
7,5 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126905 Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126906 Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High) |
5,9 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126907 Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
3,1 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126908 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126909 Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126895 Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126896 Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
8,1 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126897 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,37 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126898 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126899 Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126900 Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126901 Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126888 Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126889 Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126890 Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.