Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 242 of 2,711
CVE-2026-14034 MEDIUM 4.3
google/chrome CWE-284 Remote (AV:N)

Inappropriate implementation in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severit...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14033 MEDIUM 6.5
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Exte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14031 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in File Input in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14030 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14028 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a cra...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted H...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14026 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML pa...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a cra...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a c...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14023 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security se...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14022 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14021 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted H...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14020 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14019 MEDIUM 6.5
google/chrome CWE-522 Remote (AV:N)

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14017 CRITICAL 9.6
google/chrome CWE-693 Remote (AV:N)

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craf...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14016 MEDIUM 6.5
google/chrome CWE-352 Remote (AV:N)

Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14015 MEDIUM 6.5
google/chrome CWE-362 Remote (AV:N)

Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14014 MEDIUM 6.5
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14013 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14012 MEDIUM 5.3
google/chrome CWE-1300 Remote (AV:N)

Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chro...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14010 MEDIUM 6.5
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chrom...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:...

📅 2026-06-30 Inspect Dossier →
Showing Page 242 of 2,711 • 65,059 newly disclosed advisories