Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 238 of 2,711
CVE-2026-14136 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14135 MEDIUM 5.4
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HT...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14134 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14133 MEDIUM 4.2
google/chrome CWE-362 Remote (AV:N)

Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14132 MEDIUM 5.4
google/chrome NVD-CWE-noinfo Remote (AV:N)

Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14131 MEDIUM 5.4
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a cra...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14130 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14129 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing vi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14128 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromiu...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14127 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chr...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14126 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14125 MEDIUM 6.5
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14123 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium secur...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chro...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14121 CRITICAL 9.8
google/chrome CWE-416 Remote (AV:N)

Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14120 CRITICAL 9.6
google/chrome CWE-20 Remote (AV:N)

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14118 MEDIUM 6.5
google/chrome CWE-290 Remote (AV:N)

Insufficient data validation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14117 MEDIUM 5.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain pot...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14116 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin dat...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a craf...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14113 CRITICAL 9.6
google/chrome CWE-416 Remote (AV:N)

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14112 MEDIUM 5.3
google/chrome CWE-203 Remote (AV:N)

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive info...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension....

📅 2026-06-30 Inspect Dossier →
Showing Page 238 of 2,711 • 65,059 newly disclosed advisories