Security alerts

1,054 alerts · page 23 of 53

1. Critical (CVSS 9+) Published 2026-11-03 22:43 · updated 2026-11-11 14:00

   CVE-2026-121073 Chromium CVE-2026-121073: Use after free

   Critical·CVSS 9.6 EPSS 0.26%

   Exploit status: No public exploit known

   Affects: Google Chrome, debian/chromium, Microsoft edge chromium

   Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

2. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-11 14:00

   CVE-2026-121189 Chromium CVE-2026-121189: Use after free

   Critical·CVSS 9.6 EPSS 0.41%

   Exploit status: No public exploit known

   Affects: Microsoft edge chromium, debian/chromium, Google Chrome

   Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

3. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-11 11:47

   CVE-2026-121157 Chromium CVE-2026-121157: Incorrect authorization

   Critical·CVSS 9.8 EPSS 0.23%

   Exploit status: No public exploit known

   Affects: Google Chrome, debian/chromium, Microsoft edge chromium

   Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions via a local program. (Chromium security severity: Low)

4. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-11 14:00

   CVE-2026-121077 Chromium CVE-2026-121077: Use after free

   Critical·CVSS 9.6 EPSS 0.34%

   Exploit status: No public exploit known

   Affects: Google Chrome, debian/chromium, Microsoft edge chromium

   Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

5. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-06 11:47

   CVE-2026-121257 Chromium CVE-2026-121257: Use after free

   Critical·CVSS 9.6 EPSS 0.31%

   Exploit status: No public exploit known

   Affects: Microsoft Edge (Chromium-based), debian/chromium, Google Chrome

   Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

6. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:23

   CVE-2026-121202 Chromium CVE-2026-121202: Use after free

   Critical·CVSS 9.6 EPSS 0.33%

   Exploit status: No public exploit known

   Affects: Microsoft edge chromium, debian/chromium, Google Chrome

   Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

7. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:16

   CVE-2026-121030 Chromium CVE-2026-121030: Incorrect authorization

   Critical·CVSS 9.6 EPSS 0.41%

   Exploit status: No public exploit known

   Affects: Microsoft edge chromium, debian/chromium, Google Chrome

   Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

8. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:23

   CVE-2026-121200 Chromium CVE-2026-121200: Incorrect reference resolution

   Critical·CVSS 9.6 EPSS 0.37%

   Exploit status: No public exploit known

   Affects: Microsoft edge chromium, debian/chromium, Google Chrome

   Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-06 11:47

   CVE-2026-121234 chromium-browser: Privilege elevation in Contacts

   Critical·CVSS 9.6 EPSS 0.33%

   Exploit status: No public exploit known

   Affects: Google Chrome, debian/chromium

   Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

10. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:18

    CVE-2026-121060 Chromium CVE-2026-121060: Incorrect authorization

    Critical·CVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Google Chrome, debian/chromium, Microsoft edge chromium

    Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

11. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-11 14:00

    CVE-2026-121076 Chromium CVE-2026-121076: Use after free

    Critical·CVSS 9.6 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: Google Chrome, debian/chromium, Microsoft edge chromium

    Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

12. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:23

    CVE-2026-121104 Chromium CVE-2026-121104: Incorrect authorization

    Critical·CVSS 9.6 EPSS 0.33%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

13. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-10 11:47

    CVE-2026-121034 Chromium CVE-2026-121034: Use after free

    Critical·CVSS 9.6 EPSS 0.42%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

14. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 11:47

    CVE-2026-121241 chromium-browser: Use after free in Navigation

    Critical·CVSS 9.6 EPSS 0.34%

    Exploit status: No public exploit known

    Affects: Google Chrome, debian/chromium

    Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

15. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:28

    CVE-2026-121249 Chromium CVE-2026-121249: Buffer overflow

    Critical·CVSS 9.6 EPSS 0.45%

    Exploit status: No public exploit known

    Affects: Microsoft Edge (Chromium-based), debian/chromium, Google Chrome and 7 more

    Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

16. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:24

    CVE-2026-121214 Chromium CVE-2026-121214: Use after free

    Critical·CVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

17. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:23

    CVE-2026-121114 Chromium CVE-2026-121114: Use after free

    Critical·CVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

18. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-05 23:18

    CVE-2026-121148 Chromium CVE-2026-121148: Use after free

    Critical·CVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Google Chrome, redhat/firefox, redhat/thunderbird and 7 more

    Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

19. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-06 11:47

    CVE-2026-121250 Chromium CVE-2026-121250: Use after free

    Critical·CVSS 9.6 EPSS 0.31%

    Exploit status: No public exploit known

    Affects: Microsoft Edge (Chromium-based), debian/chromium, Google Chrome

    Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

20. Critical (CVSS 9+) Published 2026-11-03 22:42 · updated 2026-11-11 14:00

    CVE-2026-121089 Chromium CVE-2026-121089: Use after free

    Critical·CVSS 9.6 EPSS 0.41%

    Exploit status: No public exploit known

    Affects: Microsoft edge chromium, debian/chromium, Google Chrome

    Use after free in WebGPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS and public exploit-reference metadata. A proof-of-concept means public code exists; it is not evidence of exploitation. "Exploited in the wild" means confirmed exploitation (e.g. a CISA KEV listing).