VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

KritischHochMittelNiedrigExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

googleoracleibmadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

google products

chrome 7572tensorflow 431v8 30asylo 16blink 12mcp toolbox for databases 11picasa 8gvisor 7tunnelblick 7sketchup 6protobuf 5protobuf-java 5rendertron 5toolbar 5

405.114 vulnerabilities · 1.769 actively exploited (CISA KEV)

google ✕Clear filters

8.230 results

ID	Severity	Summary	Published
CVE-2026-11147	HOCH8.8	Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)	04/06/2026
CVE-2026-11146	KRITISCH9.6	Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)	04/06/2026
CVE-2026-11145	MITTEL5.3	Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)