CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Improper input validation in the API component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Memory corruption in the Chromoting component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Improper input validation in the Bluetooth component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Memory corruption in the Sensor component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the WebUI component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.
Type confusion in the FullScreen component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the Cookies component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Memory corruption in the V8 engine in Google Chrome prior to 156.0.8078.47. A remote attacker could exploit a crafted HTML page to execute arbitrary code inside the sandbox.
Memory corruption in the Core component in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Improper input validation in the Passwords component in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in the V8 engine in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in the iOSWeb component in Google Chrome on iOS prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in the Extensions component in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in the Actor component in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Improper input validation in the Proxy component in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in the Bookmarks component in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use-after-free vulnerability in WebSockets in Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Memory corruption vulnerability in HTML in Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS