CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A vulnerability in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. The issue has a medium severity.
Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via UI Interaction. The issue has a medium severity.
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. The issue has a medium severity.
An information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. The issue has a low severity.
An information leak in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. The issue has a medium severity.
A vulnerability in the Skia library in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
An incorrect authorization vulnerability in the FileSystem component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
An incorrect authorization vulnerability in the Browser component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Incorrect authorization in Extensions in Google Chrome before 152.0.7977.65. A remote attacker leveraging social engineering can bypass system access restrictions via a crafted Chrome extension.
Incorrect authorization in ServiceWorker in Google Chrome before 152.0.7977.65. A remote attacker can bypass web origin policy via a crafted HTML page.
Incorrect authorization in GetUserMedia in Google Chrome before 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Incorrect authorization in Forms in Google Chrome before 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Incorrect provision of specified functionality in Proxy in Google Chrome on Windows prior to 152.0.7977.65. An adjacent attacker can potentially obtain sensitive information via crafted network traffic.
Information leak in XR in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Information leak in Intents in Google Chrome on Android prior to 152.0.7977.65. A remote attacker can leak sensitive information via a crafted HTML page.
Improper input validation in NTP Footer in Google Chrome on Windows prior to 152.0.7977.65. A remote attacker who compromised the renderer process can bypass web origin policy via a crafted HTML page.
Information leak in SignIn in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain sensitive information via crafted network traffic.
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can potentially obtain cross-origin data via a crafted HTML page.
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain cross-origin data via a crafted HTML page.
In Google Chrome on Android prior to 152.0.7977.65, a race condition in WebAppInstalls allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: High)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS