Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 243 of 2,711
CVE-2026-14008 MEDIUM 6.5
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in WebXR in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14007 MEDIUM 6.5
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in PermissionsPolicy in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Omnibox in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14004 MEDIUM 6.5
google/chrome CWE-200 Remote (AV:N)

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14003 MEDIUM 4.3
google/chrome CWE-284 Remote (AV:N)

Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14002 MEDIUM 6.5
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14001 MEDIUM 6.1
google/chrome CWE-79 Remote (AV:N)

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severit...

📅 2026-06-30 Inspect Dossier →
CVE-2026-14000 MEDIUM 6.1
google/chrome CWE-79 Remote (AV:N)

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: M...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13999 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13998 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13997 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a cra...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13996 MEDIUM 6.5
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13995 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security s...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13994 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security se...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13993 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13992 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13991 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13990 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in DataTransfer in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13989 MEDIUM 5.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chr...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13988 MEDIUM 6.5
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13987 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13986 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13985 MEDIUM 6.5
google/chrome CWE-290 Remote (AV:N)

Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. ...

📅 2026-06-30 Inspect Dossier →
Showing Page 243 of 2,711 • 65,059 newly disclosed advisories