CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

3,806 results Clear all

CVE-2026-3545 9.6 CRITICAL EPSS 0.00

Google Chrome <145.0.7632.159 - Sandbox Escape

Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-20 Mar 04, 2026

CVE-2026-3544 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Buffer Overflow

Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CWE-787 Mar 04, 2026

CVE-2026-3543 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE-284 Mar 04, 2026

CVE-2026-3542 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE-284 Mar 04, 2026

CVE-2026-3541 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

CWE-284 Mar 04, 2026

CVE-2026-3540 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE-125 Mar 04, 2026

CVE-2026-3539 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Object lifecycle issue in DevTools in Google Chrome prior to 145.0.7632.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CWE-1091 Mar 04, 2026

CVE-2026-3538 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)

CWE-472 Mar 04, 2026

CVE-2026-3537 8.8 HIGH EPSS 0.00

Google Chrome Android <145.0.7632.159 - Memory Corruption

Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CWE-787 Mar 04, 2026

CVE-2026-3536 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.159 - Memory Corruption

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)

CWE-472 Mar 04, 2026

CVE-2026-3063 5.4 MEDIUM EPSS 0.00

Google Chrome <145.0.7632.116 - Code Injection

Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via DevTools. (Chromium security severity: High)

CVE-2026-3062 9.8 CRITICAL 1 PoC EPSS 0.00

Google Chrome <145.0.7632.116 - Memory Corruption

Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE-787 Feb 23, 2026

CVE-2026-3061 9.1 CRITICAL EPSS 0.00

Google Chrome <145.0.7632.116 - Memory Corruption

Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

CWE-125 Feb 23, 2026

CVE-2026-2650 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.109 - Buffer Overflow

Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CWE-122 Feb 18, 2026

CVE-2026-2649 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.109 - Memory Corruption

Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-472 Feb 18, 2026

CVE-2026-2648 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.109 - Memory Corruption

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)

CWE-122 Feb 18, 2026

CVE-2026-2441 8.8 HIGH KEV 10 PoCs Analysis EPSS 0.00

Google Chrome <145.0.7632.75 - Use After Free

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-416 Feb 13, 2026

CVE-2026-2323 4.3 MEDIUM EPSS 0.00

Google Chrome <145.0.7632.45 - XSS

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CWE-451 Feb 11, 2026

CVE-2026-2322 5.4 MEDIUM EPSS 0.00

Google Chrome <145.0.7632.45 - XSS

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CWE-451 Feb 11, 2026

CVE-2026-2321 8.8 HIGH EPSS 0.00

Google Chrome <145.0.7632.45 - Use After Free

Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CWE-416 Feb 11, 2026