Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.8 HIGH
CVE-2026-10896 — Google Chrome iOS Use-After-Free

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10895 — Chrome Use-after-Free Remote Code Execution

Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10894 — Google Chrome Use-After-Free Sandbox Escape

Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10893 — Google Chrome Use-After-Free

Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
9.6 CRITICAL
CVE-2026-10892 — Google Chrome Android Out-of-Bounds Write Sandbox Escape

Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10891 — Chrome Use-After-Free in GFX

Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10890 — Google Chrome Use-After-Free Vulnerability

Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium securit…

chrome chrome | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10889 — ANGLE Out-of-Bounds Read Sandbox Escape

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.…

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10888 — Google Chrome Cast Streaming Use After Free

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security s…

chrome chrome | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.1 HIGH
CVE-2026-10887 — Google Chrome Use-After-Free Remote Code Execution

Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

chrome chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
9.6 CRITICAL
CVE-2026-10886 — Google Chrome Use-After-Free Sandbox Escape

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10885 — Google Chrome iOS Use-After-Free Remote Code Execution

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

chrome iphone_os chrome | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10884 — Chromecast Use-After-Free Sandbox Escape

Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10883 — ANGLE Type Confusion Heap Corruption

Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.8 HIGH
CVE-2026-10882 — Google Chrome Use-After-Free in Network

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
9.6 CRITICAL
CVE-2026-10881 — ANGLE Out-of-Bounds Read/Write Sandbox Escape

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: C…

linux_kernel chrome macos chrome windows | Remote | Memory Corruption
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
6.5 MEDIUM
CVE-2026-10875 — projectworlds Online Art Gallery Shop Project adminHome.ph sql injection

A security flaw has been discovered in projectworlds Online Art Gallery Shop Project 1.0. The impacted element is an unknown function of the file /admin/adminHome.ph. The manipulation of the argument…

online_art_gallery_shop_project | Remote | Injection
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
6.5 MEDIUM
CVE-2026-10874 — projectworlds Online Art Gallery Shop Project adminHome.php sql injection

A vulnerability was identified in projectworlds Online Art Gallery Shop Project 1.0. The affected element is an unknown function of the file /admin/adminHome.php. The manipulation of the argument soc…

online_art_gallery_shop_project | Remote | Injection
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10873 — Shibby Tomato Web UI rstats rstats_path os command injection

A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command inject…

tomato | Remote | Injection
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
8.3 HIGH
CVE-2026-10872 — Shibby Tomato Web UI rc start_vpnserver os command injection

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command inj…

tomato | Remote | Injection
Jun 04, 2026 Jun 05, 2026
Jun 04, 2026
Jun 05, 2026
Showing 20 of 7368 Results