Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Chrome | CVE-2026-126879 Use after free in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical) |
8,8 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126866 Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Chromium security severity: High) |
8,8 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126867 Use after free in Browser in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126868 Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126869 Use after free in Frames in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126870 Uninitialized resource in ANGLE in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
4,7 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126871 Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
4,7 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126872 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126858 Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
4,7 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126859 Link following in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
9,6 | 0,46 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126860 Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.78 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126861 Use after free in Media in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126862 Improper input validation in Core in Google Chrome on on Android prior to 157.0.8103.78 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: High) |
7,7 | 0,1 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126863 Use after free in HTML in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126864 Use after free in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126865 Use after free in DOM in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126851 Use after free in Accessibility in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126852 Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126853 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
3,1 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126854 Incorrect authorization in Layout in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126855 Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) |
6,8 | 0,19 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126856 Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126857 Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
4,3 | 0,2 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126843 Type confusion in Turbolev in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
8,8 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| Chrome | CVE-2026-126844 Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
3,1 | 0,18 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.