CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Aura in Google Chrome before 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)
Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.
Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.
Incorrect authorization in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. The issue has a low severity.
A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a critical severity.
A use-after-free vulnerability in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a high severity.
An off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. The issue has a low severity.
A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Out-of-bounds write in ANGLE in Google Chrome on Windows before 152.0.7977.65. A remote attacker can exploit a crafted HTML page to potentially execute arbitrary code outside the sandbox.
Out-of-bounds write in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
Buffer overflow in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free in Sessions in Google Chrome on Android before 152.0.7977.65. A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via UI interaction.
Use-after-free in Views in Google Chrome on Mac before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
In Google Chrome prior to 152.0.7977.65, improper input validation in Dawn allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in the Bluetooth component in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)
Improper privilege management in the Actor component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Severity: Low)
Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Severity: High.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS