CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Race in Chrome for iOS allowed a remote attacker to perform UI spoofing via a crafted HTML page.
Incorrect security UI in Passwords in Google Chrome allowed a remote attacker to perform domain spoofing via a crafted HTML page.
Inappropriate implementation in Chrome for iOS allows a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Incorrect security UI in Chrome for iOS allows a remote attacker to perform domain spoofing via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Inappropriate implementation in Chrome for iOS allows a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Inappropriate implementation in Passwords in Google Chrome allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Insufficient validation of untrusted input in Passwords in Google Chrome allows a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Inappropriate implementation in Chrome for iOS allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Insufficient policy enforcement in Passwords in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a crafted HTML page.
Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Insufficient policy enforcement in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS