Publikacje w kolejności czasu

Wszystkie technologie
CVSS — dotkliwość podatności w skali 0–10. Wyższy wynik oznacza poważniejsze skutki. Nie określa prawdopodobieństwa ataku.EPSS — szacowane prawdopodobieństwo wykorzystania podatności w atakach w ciągu najbliższych 30 dni. Wynik jest podany w procentach.CISA KEV — katalog podatności o potwierdzonym wykorzystaniu w atakach. Brak wpisu nie oznacza braku ataków.
Podatności: nazwa, oprogramowanie, krótki opis, CVSS, EPSS i KEV.
OprogramowaniePodatność i krótki opisZapisz
Chrome CVE-2026-126910
Monitoruj

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,34 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126911
Monitoruj

Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

8,8 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126912
Wysoki priorytet

Buffer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,34 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126913
Pozostałe

Out of bounds read in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

3,4 0,17 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126914
Pozostałe

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

4,3 0,2 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126915
Monitoruj

Use of uninitialized variable in Skia in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

7,5 0,3 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126916
Monitoruj

Integer overflow in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,28 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126902
Monitoruj

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

7,5 0,38 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126903
Monitoruj

Improper state validation in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

8,1 0,25 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126904
Monitoruj

Use after free in Compositing in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

7,5 0,3 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126905
Monitoruj

Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126906
Pozostałe

Race condition in Extensions in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

5,9 0,19 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126907
Pozostałe

Uninitialized resource in Media in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

3,1 0,2 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126908
Monitoruj

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126909
Wysoki priorytet

Use after free in Passwords in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

9,6 0,31 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126895
Monitoruj

Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

8,8 0,41 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126896
Monitoruj

Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

8,1 0,29 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126897
Monitoruj

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,37 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126898
Pozostałe

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

4,3 0,24 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126899
Monitoruj

Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,28 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126900
Monitoruj

Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,34 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126901
Monitoruj

Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,28 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126888
Monitoruj

Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,45 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126889
Monitoruj

Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,38 % Brak wpisu w KEV nie wyklucza ataków
Chrome CVE-2026-126890
Monitoruj

Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8,8 0,32 % Brak wpisu w KEV nie wyklucza ataków
Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOstatnie przetworzenie zakończone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOpóźnione lub nieustaloneData oceny znajduje się przy rekordzie. Codziennie: KEV i publikacje z 30 dni; pozostałe CVE: raz w tygodniu.