Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Chrome | CVE-2026-126898 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126899 Use after free in Elements in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126900 Use after free in CSS in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,34 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126901 Use after free in PDF in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126888 Buffer overflow in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,45 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126889 Off-by-one error in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126890 Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126891 Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126892 Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126893 Out of bounds write in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126894 Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
3,1 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126880 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126881 Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126882 Information leak in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
3,1 | 0,18 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126883 Use after free in Core in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
7,5 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126884 Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
4,7 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126885 Use after free in ServiceWorker in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
9,6 | 0,42 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126886 Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126887 Use after free in Animation in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126873 Use after free in Extensions in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126874 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126875 Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
8,1 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126876 Integer overflow in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126877 Use after free in Dawn in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
7,5 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126878 Information leak in Core in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.