Search Results (394989 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-4751 3 Apple, Neovim, Vim 3 Macos, Neovim, Vim 2026-09-17 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
CVE-2023-4750 4 Apple, Fedoraproject, Neovim and 1 more 4 Macos, Fedora, Neovim and 1 more 2026-09-17 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
CVE-2026-91731 1 Google 1 Chrome 2026-09-17 8.8 High
Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91730 1 Google 1 Chrome 2026-09-17 3.1 Low
Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-91729 1 Google 1 Chrome 2026-09-17 9.6 Critical
Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91728 1 Google 1 Chrome 2026-09-17 9.6 Critical
Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91727 2 Apple, Google 2 Macos, Chrome 2026-09-17 8.1 High
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-91726 1 Google 2 Android, Chrome 2026-09-17 4.7 Medium
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-91725 1 Google 1 Chrome 2026-09-17 5.3 Medium
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87525 2 Google, Microsoft 2 Chrome, Windows 2026-09-17 2.7 Low
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. (Chromium security severity: High)
CVE-2026-91724 1 Google 1 Chrome 2026-09-17 8.3 High
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-91722 1 Google 1 Chrome 2026-09-17 8.8 High
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87555 1 Google 2 Android, Chrome 2026-09-17 4.7 Medium
Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-91720 1 Google 1 Chrome 2026-09-17 4.7 Medium
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87564 1 Google 1 Chrome 2026-09-17 4.3 Medium
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87586 1 Google 1 Chrome 2026-09-17 4.3 Medium
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87592 1 Google 1 Chrome 2026-09-17 4.3 Medium
Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-87596 1 Google 1 Chrome 2026-09-17 4.3 Medium
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-87435 1 Google 1 Chrome 2026-09-17 5.3 Medium
Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87657 1 Google 1 Chrome 2026-09-17 3.1 Low
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)