Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- Critical9.3Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- High7.4No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 3.92%Jul 1, 2025
- High8.1Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 14.14%Jun 30, 2025
- Medium4.3Software installed and running inside a Guest VM may conduct improper GPU system calls to prevent other Guests from running work on the GPU.Check if you run itEPSS 0.20%Jun 27, 2025
- Medium5.2Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.Check if you run itEPSS 0.14%Jun 27, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google photo-express-for-google allows Reflected XSS.Check this weekEPSS 26.00%Jun 27, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- Medium5.4Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- Medium5.4Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- High8.8Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 44.00%Jun 18, 2025
- High8.8Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check this weekEPSS 11.49%Jun 18, 2025
- UnknownQualcomm ar8035_firmware Improper Validation of Array IndexPatch nowKEVEPSS 0.58%Jun 17, 2025
- Critical9.8Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, includinCheck this weekEPSS 22.00%Jun 16, 2025
- High7.4Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debugCheck if you run itEPSS 9.00%Jun 16, 2025
- Medium5.7Possible kernel exceptions caused by reading and writing kernel heap data after free.Check if you run itEPSS 0.22%Jun 16, 2025
- Medium6.9Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.Check this weekEPSS 34.00%Jun 15, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check this weekEPSS 13.34%Jun 11, 2025
- High8.8Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.40%Jun 11, 2025
- Critical9.4A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud StoragCheck if you run itEPSS 0.25%Jun 10, 2025
- High7.0Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection.Check if you run itEPSS 1.49%Jun 10, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.ThiCheck this weekEPSS 42.00%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ángel C.Check this weekEPSS 26.00%Jun 6, 2025
- Medium4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source rCheck if you run itEPSS 0.31%Jun 4, 2025