CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Google Chrome Blink Use-After-Free Vulnerability

Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 11, 2026
CVSS8.8v3.1EPSS0.344%PoCs0SignalsSTIX

Google Chrome HTML Use-After-Free Sandboxed Arbitrary Code Execution

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 11, 2026
CVSS8.8v3.1EPSS0.344%PoCs0SignalsSTIX

Google Chrome Extensions Use-After-Free

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)

CWE-416Aug 11, 2026
CVSS7.5v3.1EPSS0.233%PoCs0SignalsSTIX

Google Chrome TabStrip Use-After-Free on Mac

Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 11, 2026
CVSS8.3v3.1EPSS0.266%PoCs0SignalsSTIX

Google Chrome V8 Use-After-Free Vulnerability

Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 11, 2026
CVSS8.8v3.1EPSS0.344%PoCs0SignalsSTIX

Google Chrome Insufficient Input Validation in UI Leading to Sandbox Escape

Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-20Aug 6, 2026
CVSS8.3v3.1EPSS0.357%PoCs0SignalsSTIX

Google Chrome Skia Use-After-Free Vulnerability

Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS7.5v3.1EPSS0.4%PoCs0SignalsSTIX

Google Chrome Payments Use-After-Free Vulnerability

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS9.6v3.1EPSS0.295%PoCs0SignalsSTIX

Google Chrome V8 Integer Overflow Remote Code Execution

Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-190Aug 6, 2026
CVSS8.8v3.1EPSS0.353%PoCs0SignalsSTIX

Google Chrome Skia Out-of-Bounds Write Leading to Sandbox Escape

Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-787Aug 6, 2026
CVSS8.3v3.1EPSS0.267%PoCs0SignalsSTIX

Google Chrome Media Use-After-Free

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS9.6v3.1EPSS0.295%PoCs0SignalsSTIX

Google Chrome GPU Integer Overflow Leading to Cross-Origin Data Leak

Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CWE-190Aug 6, 2026
CVSS3.1v3.1EPSS0.261%PoCs0SignalsSTIX

Google Chrome Web Authentication Use-After-Free

Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS9.6v3.1EPSS0.336%PoCs0SignalsSTIX

Google Chrome Extensions Use-After-Free

Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS7.5v3.1EPSS0.234%PoCs0SignalsSTIX

Google Chrome Codecs Insufficient Input Validation Leading to Sandbox Escape

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-20Aug 6, 2026
CVSS9.6v3.1EPSS0.295%PoCs0SignalsSTIX

Google Chrome Media Use-After-Free on Windows

Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS8.3v3.1EPSS0.267%PoCs0SignalsSTIX

Google Chrome V8 Out-of-Bounds Write Remote Code Execution

Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE-787Aug 6, 2026
CVSS8.8v3.1EPSS0.353%PoCs0SignalsSTIX

Google Chrome Skia Uninitialized Use Cross-Origin Data Leak

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CWE-457Aug 6, 2026
CVSS3.1v3.1EPSS0.235%PoCs0SignalsSTIX

Google Chrome Skia Uninitialized Use Cross-Origin Data Leak

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CWE-457Aug 6, 2026
CVSS3.1v3.1EPSS0.284%PoCs0SignalsSTIX

Google Chrome Views Use-After-Free Vulnerability

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS7.5v3.1EPSS0.335%PoCs0SignalsSTIX

Google Chrome Views Use-After-Free Vulnerability

Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS7.5v3.1EPSS0.335%PoCs0SignalsSTIX

Google Chrome Heap Buffer Overflow in Base

Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

CWE-122Aug 6, 2026
CVSS7.5v3.1EPSS0.225%PoCs0SignalsSTIX

Google Chrome Payments Use-After-Free

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-416Aug 6, 2026
CVSS8.3v3.1EPSS0.267%PoCs0SignalsSTIX

Google Chrome Insufficient Input Validation in Workers Leading to Site Isolation Bypass

Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CWE-20Aug 6, 2026
CVSS8.1v3.1EPSS0.291%PoCs0SignalsSTIX

Google Chrome Insufficient Policy Enforcement in Navigation Allows Sandbox Escape

Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CWE-693Aug 6, 2026
CVSS8.3v3.1EPSS0.267%PoCs0SignalsSTIX