CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
An information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. The issue has a low severity.
An information leak in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. The issue has a medium severity.
A vulnerability in the Skia library in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
An incorrect authorization vulnerability in the FileSystem component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
A buffer overflow in ANGLE in Google Chrome on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
An incorrect authorization vulnerability in the Browser component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
An improper input validation vulnerability in Media in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Out-of-bounds write in ANGLE in Google Chrome on Windows before 152.0.7977.65. A remote attacker can exploit a crafted HTML page to potentially execute arbitrary code outside the sandbox.
Incorrect authorization in Extensions in Google Chrome before 152.0.7977.65. A remote attacker leveraging social engineering can bypass system access restrictions via a crafted Chrome extension.
Incorrect authorization in ServiceWorker in Google Chrome before 152.0.7977.65. A remote attacker can bypass web origin policy via a crafted HTML page.
Incorrect authorization in GetUserMedia in Google Chrome before 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Incorrect authorization in Forms in Google Chrome before 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Improper input validation in Input in Google Chrome on Android before 152.0.7977.65. A remote attacker who compromised the renderer process can potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Out-of-bounds write in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
Buffer overflow in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
Use-after-free in Sessions in Google Chrome on Android before 152.0.7977.65. A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via UI interaction.
Use-after-free in Views in Google Chrome on Mac before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.
Out-of-bounds write in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can exploit a crafted HTML page to execute arbitrary code outside the sandbox.
Incorrect provision of specified functionality in Proxy in Google Chrome on Windows prior to 152.0.7977.65. An adjacent attacker can potentially obtain sensitive information via crafted network traffic.