Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 244 of 2,711
CVE-2026-13984 MEDIUM 4.3
google/chrome CWE-290 Remote (AV:N)

Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13983 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of ...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13981 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13980 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13979 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13978 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13977 MEDIUM 5.4
google/chrome CWE-79 Remote (AV:N)

Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security seve...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13976 MEDIUM 5.8
google/chrome CWE-122 Remote (AV:N)

Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13975 MEDIUM 5.3
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process m...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-472 Remote (AV:N)

Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13973 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML pa...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13972 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13971 MEDIUM 5.3
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13970 MEDIUM 5.3
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory vi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13969 MEDIUM 5.3
google/chrome CWE-457 Remote (AV:N)

Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process m...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary cod...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-843 Remote (AV:N)

Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13966 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Oilpan in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13964 MEDIUM 6.5
google/chrome CWE-284 Remote (AV:N)

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security se...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-352 Remote (AV:N)

Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13962 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient data validation in PDF in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13961 MEDIUM 5.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in DevTools in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain pot...

📅 2026-06-30 Inspect Dossier →
Showing Page 244 of 2,711 • 65,059 newly disclosed advisories