CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Memory corruption in CredentialProvider in Google Chrome on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium.
Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium.
Use-after-free vulnerability in the Core component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the WebAppInstalls component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Improper input validation vulnerability in the ANGLE component of Google Chrome on Windows prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Improper input validation vulnerability in the Passwords component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the V8 engine of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption vulnerability in the ServiceWorker component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the Core component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption vulnerability in the DevTools component of Google Chrome prior to 156.0.8078.47. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption vulnerability in the Prompts component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption vulnerability in the WebAppInstalls component of Google Chrome on Android prior to 156.0.8078.47. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption in the WebAppInstalls component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption in the PolicyContainer component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use after free in the DevTools component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Improper input validation in the PrintPreview component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Improper input validation in the Permissions component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Improper input validation in the Compositing component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption in the CSS component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Memory corruption in the PerformanceAPIs component of Google Chrome prior to 156.0.8078.47. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS