Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 237 of 2,711
CWE-400 Remote (AV:N)

An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_44af70 component...

📅 2026-06-30 Inspect Dossier →
CWE-120 Remote (AV:N)

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_472f08 component...

📅 2026-06-30 Inspect Dossier →
CWE-120 Remote (AV:N)

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub_447CAC component...

📅 2026-06-30 Inspect Dossier →
CVE-2026-50040 MEDIUM 6.1
CWE-79 Remote (AV:N)

Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious URL that, when visit...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14156 MEDIUM 6.5
google/chrome CWE-862 Remote (AV:N)

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14155 MEDIUM 6.5
google/chrome CWE-284 Remote (AV:N)

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Lo...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14154 MEDIUM 4.8
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome E...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14153 MEDIUM 5.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14152 CRITICAL 9.6
google/chrome CWE-787 Remote (AV:N)

Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted H...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-669 Remote (AV:N)

Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14150 MEDIUM 5.4
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Speech in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTM...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14148 MEDIUM 6.5
google/chrome CWE-843 Remote (AV:N)

Type Confusion in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security seve...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14147 MEDIUM 6.1
google/chrome CWE-79 Remote (AV:N)

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: L...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14146 MEDIUM 6.5
google/chrome CWE-200 Remote (AV:N)

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14145 MEDIUM 6.1
google/chrome CWE-79 Remote (AV:N)

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: L...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14144 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14143 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14142 MEDIUM 5.4
google/chrome CWE-1021 Remote (AV:N)

Inappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (C...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14141 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14140 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security seve...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14139 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted H...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14138 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofin...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14137 MEDIUM 4.2
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform ...

📅 2026-06-30 Inspect Dossier →
Showing Page 237 of 2,711 • 65,059 newly disclosed advisories