Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Microsoft Edge (Chromium-based)Google Chromium V8 Type Confusion Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium: CVE-2025-10585 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2025-10585

Adobe Flash PlayerAdobe Flash Player Use-After-Free Vulnerability

Risk 100
Severity
9.8
Exploited
Use After Free
AV:N/AC:L/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.

1 / 2
First published (updated )
CVE-2015-0313

Adobe Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability

Risk 100
Severity
9.8
Exploited
AV:N/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.

1 / 2
First published (updated )
CVE-2015-0311

Microsoft Edge (Chromium-based)Google Chromium V8 Type Confusion Vulnerability

Risk 76
Severity
9.6
Exploited
EPSS
0.16%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-7971 Type confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2024-7971

Google Chromium GPUHeap buffer overflow in GPU

Risk 98
Severity
9.6
Exploited
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

1 / 2
Source: CISA
First published (updated )
CVE-2022-4135

Google Chromium MojoGoogle Chromium Mojo Insufficient Data Validation Vulnerability

Risk 98
Severity
9.6
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2022-3075 Insufficient data validation in Mojo

1 / 4
Source: Microsoft
First published (updated )
CVE-2022-3075

debian/chromiumInteger overflow in Skia

Risk 98
Severity
9.6
Exploited
Zeroday
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2023-2136 Integer overflow in Skia

1 / 4
First published (updated )
CVE-2023-2136

debian/chromiumInteger overflow in Skia

Risk 87
Severity
9.6
Exploited
Zeroday
EPSS
5.21%
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2023-6345 Integer overflow in Skia

1 / 4
Source: Microsoft
First published (updated )
CVE-2023-6345

Microsoft EdgeMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability

Risk 96
Severity
9
Exploited
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
CVE-2026-58289

Microsoft Edge (Chromium-based)Out of bounds memory access in V8

Risk 82
Severity
8.8
Exploited
Zeroday
EPSS
0.18%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-0519 Out of bounds memory access in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2024-0519

Microsoft Edge (Chromium-based)Google Chromium V8 Inappropriate Implementation Vulnerability

Risk 81
Severity
8.8
Exploited
EPSS
27.53%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-7965 Inappropriate implementation in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2024-7965

debian/chromiumType Confusion in V8

Risk 92
Severity
8.8
Exploited
Zeroday
EPSS
34.86%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-4762 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2023-4762

Microsoft Edge (Chromium-based)Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

Risk 83
Severity
8.8
Exploited
Zeroday
EPSS
0.54%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2025-5419 Out of bounds read and write in V8

1 / 4
Source: Microsoft

Remedy

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
First published (updated )
CVE-2025-5419

Microsoft Edge (Chromium-based)Medium Use after free in Blink

Risk 80
Severity
8.8
Exploited
Zeroday
EPSS
0.12%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2025-5068 Use after free in Blink

1 / 3
Source: Microsoft
First published (updated )
CVE-2025-5068

Microsoft Edge (Chromium-based)Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Risk 75
Severity
8.8
Exploited
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
CVE-2025-6558

Microsoft Edge (Chromium-based)Google Chromium V8 Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2025-13223 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2025-13223

Google ChromeOut of bounds memory access in ANGLE

Risk 95
Severity
8.8
Exploited
Trending
Year
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
CVE-2025-14174

Google ChromeGoogle Chromium CSS Use-After-Free Vulnerability

Risk 74
Severity
8.8
Exploited
EPSS
0.53%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-2441 Use after free in CSS

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-2441

Google ChromeGoogle Skia Out-of-Bounds Write Vulnerability

Risk 73
Severity
8.8
Exploited
EPSS
0.26%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-3909 Out of bounds write in Skia

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-3909

Google ChromeGoogle Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Risk 73
Severity
8.8
Exploited
EPSS
0.80%
Buffer Overflow, Code Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-3910 Inappropriate implementation in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-3910

Google ChromeUse after free in Dawn

Risk 73
Severity
8.8
Exploited
EPSS
0.80%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-5281 Use after free in Dawn

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-5281

Microsoft VP9 Video ExtensionsHeap buffer overflow in WebP

Risk 95
Severity
8.8
Exploited
Zeroday
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

1 / 8
Source: Microsoft
First published (updated )
CVE-2023-4863

Google Google ChromeOut of bounds memory access in V8

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-11645 Out of bounds memory access in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2026-11645

Microsoft Internet ExplorerInternet Explorer Memory Corruption Vulnerability

Risk 76
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Internet Explorer Memory Corruption Vulnerability

1 / 2
Source: NVD
First published (updated )
CVE-2021-26411

nuget/Microsoft.ChakraCoreMicrosoft Edge Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
Buffer Overflow
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

1 / 2
First published (updated )
CVE-2016-7201

debian/libvpxHeap buffer overflow in vp8 encoding in libvpx

Risk 93
Severity
8.8
Exploited
Zeroday
EPSS
29.61%
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

1 / 10
Source: Microsoft
First published (updated )
CVE-2023-5217

nuget/Microsoft.ChakraCoreMicrosoft Edge Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
Buffer Overflow
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.

1 / 2
First published (updated )
CVE-2016-7200

debian/chromiumType Confusion in V8

Risk 95
Severity
8.8
Exploited
Zeroday
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-2033 Type Confusion in V8

1 / 4
First published (updated )
CVE-2023-2033

debian/chromiumType Confusion in V8

Risk 95
Severity
8.8
Exploited
Zeroday
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-3079 Type Confusion in V8

1 / 4
First published (updated )
CVE-2023-3079

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203