Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 65,059 fresh security advisories
Page 248 of 2,711
CVE-2026-13880 CRITICAL 9.6
google/chrome CWE-416 Remote (AV:N)

Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page....

📅 2026-06-30 Inspect Dossier →
CVE-2026-13878 CRITICAL 9.6
google/chrome CWE-416 Remote (AV:N)

Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13877 MEDIUM 5.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informati...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13876 MEDIUM 6.5
google/chrome CWE-693 Remote (AV:N)

Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed an attacker in a privileged network position to bypass content security policy via malicious network traffic. (C...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13875 MEDIUM 5.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13874 MEDIUM 5.3
google/chrome CWE-362 Remote (AV:N)

Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security sever...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13873 MEDIUM 6.5
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in Layout in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium securi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13872 CRITICAL 9.1
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to potentially perform a sandbox escape via a malicious file. (...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13871 MEDIUM 6.5
google/chrome CWE-602 Remote (AV:N)

Insufficient policy enforcement in GuestView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in WebView in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13869 CRITICAL 9.6
google/chrome CWE-416 Remote (AV:N)

Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTM...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13868 MEDIUM 6.5
google/chrome CWE-346 Remote (AV:N)

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTM...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13867 MEDIUM 4.3
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13866 MEDIUM 6.5
google/chrome CWE-20 Remote (AV:N)

Inappropriate implementation in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML ...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13865 MEDIUM 4.3
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-284 Remote (AV:N)

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafte...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13862 MEDIUM 6.5
google/chrome CWE-693 Remote (AV:N)

Insufficient policy enforcement in Web Authentication (Passkeys & Security Keys) in Google Chrome on iOS prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origi...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13861 CRITICAL 9.6
google/chrome CWE-416 Remote (AV:N)

Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13860 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a craft...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13859 CRITICAL 9.6
google/chrome CWE-693 Remote (AV:N)

Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Me...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13858 MEDIUM 6.5
google/chrome CWE-125 Remote (AV:N)

Out of bounds read in FFmpeg in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. (Chromium secur...

📅 2026-06-30 Inspect Dossier →
CVE-2026-13857 MEDIUM 4.2
google/chrome CWE-451 Remote (AV:N)

Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted H...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-20 Remote (AV:N)

Insufficient validation of untrusted input in Speech in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalati...

📅 2026-06-30 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML p...

📅 2026-06-30 Inspect Dossier →
Showing Page 248 of 2,711 • 65,059 newly disclosed advisories