Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 247 of 2,711
CVE-2026-13906 MEDIUM 6.5
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium securi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13904 MEDIUM 6.5
google/chrome CWE-693 Remote (AV:N)

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13902 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13901 CRITICAL 9.6
google/chrome CWE-20 Remote (AV:N)

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a craft...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13900 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HT...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Cast Receiver in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Mediu...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-284 Remote (AV:N)

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Me...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13896 MEDIUM 6.5
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13895 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted H...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13894 MEDIUM 6.5
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass navigation restrictions via a crafted HTML page. (Chro...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13893 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in WebUI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via malicious network traffic. (Chromium security severi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13892 MEDIUM 6.5
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13890 MEDIUM 5.3
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process mem...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13889 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13887 MEDIUM 6.5
google/chrome CWE-346 Remote (AV:N)

Inappropriate implementation in NFC in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML p...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13886 MEDIUM 6.5
google/chrome CWE-693 Remote (AV:N)

Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security sev...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Med...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13883 CRITICAL 9.6
google/chrome CWE-843 Remote (AV:N)

Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13882 CRITICAL 9.6
google/chrome CWE-362 Remote (AV:N)

Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium securi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13881 MEDIUM 6.5
google/chrome CWE-346 Remote (AV:N)

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medi...

📅 2026-06-30 Inspect Dossier →
Showing Page 247 of 2,711 • 65,059 newly disclosed advisories