Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,187 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-109760 | 8.1 High | Mitigation bypass in the Networking: HTTP component | Oct 13, 2026 |
| CVE-2026-109759 | 8.1 High | Site isolation issue in the Networking component | Oct 13, 2026 |
| CVE-2026-109757 | 8.3 High | Sandbox escape due to race condition in the Networking component | Oct 13, 2026 |
| CVE-2026-109756 | 8.8 High | Privilege escalation in the DOM: Navigation component | Oct 13, 2026 |
| CVE-2026-109755 | 9.6 Critical | Sandbox escape in the DOM: Content Processes component | Oct 13, 2026 |
| CVE-2026-109754 | 8.1 High | Incorrect boundary conditions in the DOM: Editor component | Oct 13, 2026 |
| CVE-2026-109752 | 5.4 Medium | Use-after-free in the DOM: Workers component | Oct 13, 2026 |
| CVE-2026-109751 | 4.3 Medium | Information disclosure in the Networking component | Oct 13, 2026 |
| CVE-2026-109750 | 9.6 Critical | Site isolation issue in the DOM: Web Authentication component | Oct 13, 2026 |
| CVE-2026-109749 | 5.4 Medium | Use-after-free in the JavaScript: WebAssembly component | Oct 13, 2026 |
| CVE-2026-109748 | 5.4 Medium | Use-after-free in the JavaScript: WebAssembly component | Oct 13, 2026 |
| CVE-2026-109747 | 7.3 High | Other issue in the Address Bar component | Oct 13, 2026 |
| CVE-2026-109746 | 7.3 High | Mitigation bypass in the DOM: Security component | Oct 13, 2026 |
| CVE-2026-109745 | 9.6 Critical | Sandbox escape due to uninitialized memory in the DOM: Web Serial component | Oct 13, 2026 |
| CVE-2026-109744 | 8.1 High | Other issue in the DOM: File component | Oct 13, 2026 |
| CVE-2026-109743 | 8.8 High | Privilege escalation in the Panning and Zooming component | Oct 13, 2026 |
| CVE-2026-109742 | 4.3 Medium | Information disclosure in the PDF Viewer component | Oct 13, 2026 |
| CVE-2026-109741 | 5.4 Medium | Use-after-free in the Storage: Bucket File System component | Oct 13, 2026 |
| CVE-2026-109740 | 9.6 Critical | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component | Oct 13, 2026 |
| CVE-2026-109739 | 8.8 High | Privilege escalation in the WebExtensions component | Oct 13, 2026 |
| CVE-2026-109738 | 5.4 Medium | Use-after-free in the Audio/Video: Playback component | Oct 13, 2026 |
| CVE-2026-109737 | 8.1 High | Mitigation bypass in the Enterprise Policies component | Oct 13, 2026 |
| CVE-2026-109736 | 8.1 High | Frame poisoning in the Layout component | Oct 13, 2026 |
| CVE-2026-109735 | 5.4 Medium | Use-after-free in the DOM: Animation component | Oct 13, 2026 |
| CVE-2026-109734 | 8.1 High | Mitigation bypass in the DOM: Security component | Oct 13, 2026 |
| CVE-2026-109731 | 5.4 Medium | Incorrect boundary conditions in the Graphics: Canvas2D component | Oct 13, 2026 |
| CVE-2026-109724 | 5.4 Medium | Use-after-free in the DOM: Core & HTML component | Oct 13, 2026 |
| CVE-2026-109723 | 5.4 Medium | Integer overflow in the Layout: Text and Fonts component | Oct 13, 2026 |
| CVE-2026-109721 | 5.4 Medium | Incorrect boundary conditions in the JavaScript Engine: JIT component | Oct 13, 2026 |
| CVE-2026-109720 | 7.1 High | JIT miscompilation in the JavaScript: WebAssembly component | Oct 13, 2026 |
| CVE-2026-109717 | 5.4 Medium | Use-after-free in the DOM: Bindings (WebIDL) component | Oct 13, 2026 |
| CVE-2026-109714 | 5.4 Medium | Incorrect boundary conditions in the Layout component | Oct 13, 2026 |
| CVE-2026-109713 | 5.4 Medium | Use-after-free in the Crash Reporting component | Oct 13, 2026 |
| CVE-2026-109711 | 5.4 Medium | Use-after-free in the Graphics: Canvas2D component | Oct 13, 2026 |
| CVE-2026-109709 | 8.8 High | Information disclosure, privilege escalation in the Security: Process Sandboxing component | Oct 13, 2026 |
| CVE-2026-109708 | 9.6 Critical | Sandbox escape due to incorrect boundary conditions in the Networking component | Oct 13, 2026 |
| CVE-2026-109707 | 9.6 Critical | Sandbox escape due to use-after-free in the Networking component | Oct 13, 2026 |
| CVE-2026-109705 | 9.6 Critical | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component | Oct 13, 2026 |
| CVE-2026-109704 | 8.8 High | Privilege escalation in the Application Update component | Oct 13, 2026 |
| CVE-2026-109753 | 8.1 High | Incorrect boundary conditions in the Layout component | Oct 13, 2026 |
| CVE-2026-109733 | 8.1 High | JIT miscompilation in the JavaScript Engine: JIT component | Oct 13, 2026 |
| CVE-2026-109732 | 5.4 Medium | Use-after-free in the DOM: Streams component | Oct 13, 2026 |
| CVE-2026-109730 | 8.8 High | Integer overflow in the Graphics component | Oct 13, 2026 |
| CVE-2026-109729 | 5.4 Medium | Use-after-free in the JavaScript Engine: JIT component | Oct 13, 2026 |
| CVE-2026-109728 | 5.4 Medium | Use-after-free in the DOM: Animation component | Oct 13, 2026 |
| CVE-2026-109727 | 5.4 Medium | Use-after-free in the Audio/Video component | Oct 13, 2026 |
| CVE-2026-109726 | 5.4 Medium | Use-after-free in the SVG component | Oct 13, 2026 |
| CVE-2026-109725 | 5.4 Medium | Use-after-free in the DOM: Core & HTML component | Oct 13, 2026 |
| CVE-2026-109722 | 8.1 High | JIT miscompilation in the JavaScript Engine: JIT component | Oct 13, 2026 |
| CVE-2026-109719 | 4.2 Medium | Race condition, use-after-free in the Graphics: CanvasWebGL component | Oct 13, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.