CVEs published in November 2026
8,007 vulnerabilities, 689 critical, 12 exploited.
- google chromeObservable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...5.3 Medium
- google chromeConfused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeInformation leak in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...6.5 Medium
- google chromeMissing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a...5.3 Medium
- google chromeUI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed a...5.4 Medium
- google chromeInformation leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...6.5 Medium
- google chromeImproper input validation in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote...8.3 High
- google chromeMissing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a...6.5 Medium
- google chromeIncorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.1 High
- google chromeImproper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeMissing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeInformation leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...6.5 Medium
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote...8.3 High
- google chromeMissing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeUninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...6.5 Medium
- google chromeIncorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.1 High
- google chromeIncorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeInteger overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had...8.3 High
- google chromeIncorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a...9.6 Critical
- google chromeUI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...5.4 Medium
- google chromeIncorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent...5.3 Medium
- google chromeIncorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...6.5 Medium
- google chromePrivilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a...9.6 Critical
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeUI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a...5.4 Medium
- google chromeInformation leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a...6.5 Medium
- google chromeUse of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.3 High
- google chromePrivilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote...8.1 High
- google chromeImproper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeInformation leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeMissing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a...5.5 Medium
- google chromeConfused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeIncorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote...8.1 High
- google chromeMissing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...6.5 Medium
- google chromeInformation leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeImproper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeMissing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeIncorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...7.4 High
- google chromeUI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...5.4 Medium
- google chromeImproper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a...6.5 Medium
- google chromeImproper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeInformation leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...6.5 Medium
- google chromeType confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in Controls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- Show moreLoading…