CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Information leak in XR in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain sensitive information via a crafted HTML page.
Information leak in Intents in Google Chrome on Android prior to 152.0.7977.65. A remote attacker can leak sensitive information via a crafted HTML page.
Improper input validation in NTP Footer in Google Chrome on Windows prior to 152.0.7977.65. A remote attacker who compromised the renderer process can bypass web origin policy via a crafted HTML page.
Information leak in SignIn in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain sensitive information via crafted network traffic.
Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process can potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can potentially obtain cross-origin data via a crafted HTML page.
Use after free in PDF in Google Chrome prior to 152.0.7977.65. A remote attacker can execute arbitrary code inside the sandbox via a crafted PDF file.
Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can obtain cross-origin data via a crafted HTML page.
In Google Chrome on Android prior to 152.0.7977.65, a race condition in WebAppInstalls allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: High)
In Google Chrome prior to 152.0.7977.65, missing authorization in Viz allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
In Google Chrome prior to 152.0.7977.65, an out of bounds read in Skia allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
In Google Chrome prior to 152.0.7977.65, improper input validation in Dawn allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
In Google Chrome prior to 152.0.7977.65, missing authorization in Preload allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
In Google Chrome prior to 152.0.7977.65, improper input validation in Printing allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
In Google Chrome prior to 152.0.7977.65, UI misrepresentation in Web Authentication (Passkeys & Security Keys) allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
In Google Chrome prior to 152.0.7977.65, incorrect authorization in TabGroups allowed a remote attacker to potentially leak sensitive information via crafted network traffic. (Chromium security severity: Medium)
In Google Chrome prior to 152.0.7977.65, improper input validation in Input allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
In Google Chrome on iOS prior to 152.0.7977.65, improper input validation in Mobile allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Missing authorization in the Sensor component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Severity: Medium)
Incorrect reference resolution in the Speech component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Severity: Medium)