CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Race condition in the Headless component of Google Chrome prior to 156.0.8078.73. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page.
An out of bounds write in Metrics in Google Chrome on Mac prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted file.
Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Buffer overflow in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use after free in the FileAPI component in Google Chrome prior to 156.0.8078.73. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the Browser component of Google Chrome on Windows prior to 156.0.8078.73. A remote attacker leveraging social engineering could execute arbitrary code outside the sandbox via a crafted HTML page.
Uninitialized resource in ANGLE in Google Chrome on Mac prior to 156.0.8078.73 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page.
Out of bounds read in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.
Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.
An uninitialized resource vulnerability in ANGLE in Google Chrome before version 156.0.8078.73 allows a remote attacker to read memory outside the sandbox via a crafted HTML page.
Use after free in Core in Google Chrome on Android prior to 156.0.8078.73 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.
Race condition in the V8 engine of Google Chrome prior to 156.0.8078.73. A remote attacker could potentially execute arbitrary code inside the sandbox via a crafted HTML page.
An integer overflow in Skia in Google Chrome before version 156.0.8078.73 may allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
A buffer overflow in V8 in Google Chrome before version 156.0.8078.73 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Use-after-free vulnerability in the HTML component of Google Chrome prior to 156.0.8078.73. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
A type confusion in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.
Incorrect reference resolution in UI in Google Chrome on Android prior to 156.0.8078.73 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app.
An out of bounds write in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS