Where
-Infinity
0
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
Severity
10
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Chromium: CVE-2026-13782 Use after free in Browser

1 / 3
Source: Microsoft
First published (updated )
Severity
10
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.08%
Integer Underflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2024-0808 Integer underflow in WebUI

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium: CVE-2024-3845 Inappropriate implementation in Network

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Chromium: CVE-2024-3847 Insufficient policy enforcement in WebUI

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

First published (updated )
Severity
9.8
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2025-4052 Inappropriate implementation in DevTools

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2025-10585 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.10%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-0907 Incorrect security UI in Split View

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.02%
Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-0905 Insufficient policy enforcement in Network

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.10%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-0906 Incorrect security UI

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-3062 Out of bounds read and write in Tint

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
EPSS
0.10%
Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-5902 Race in Media

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Input Validation, Code Injection, Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-13776 Type Confusion in Dawn

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-13775 Use after free in GPU

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-14121 Use after free in Chromoting

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-79090 Improper privilege management in Actor

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2026-84325 Improper input validation in DataTransfer

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

1 / 2
First published (updated )
Severity
9.8
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

1 / 2
First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2023-1529 Out of bounds memory access in WebHID

1 / 3
First published (updated )
Severity
9.6
EPSS
0.11%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

First published (updated )
Severity
9.6
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-3157 Out of bounds write in Compositing

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-6779 Out of bounds memory access in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.16%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-7971 Type confusion in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
9.6
EPSS
0.06%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-9369 Insufficient data validation in Mojo

1 / 3
Source: Microsoft
First published (updated )
Severity
9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE -2025-0998 Out of bounds memory access in V8

1 / 3
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203