PULSE
ESEN
FEED
ransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CAransomn0n reclama a Company #139 · USransomn0n reclama a Company #138 · CAransomsafepay reclama a by.zivor.co.il · ILransomqilin reclama a XK net SA de CV · MXransomqilin reclama a BOSH Engineering Private Limited · SG · Manufacturingransomqilin reclama a J. J. Louro Pereira · PT · Otherransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CAransomn0n reclama a Company #139 · USransomn0n reclama a Company #138 · CAransomsafepay reclama a by.zivor.co.il · ILransomqilin reclama a XK net SA de CV · MXransomqilin reclama a BOSH Engineering Private Limited · SG · Manufacturingransomqilin reclama a J. J. Louro Pereira · PT · Other
CVE Watch409.857 no arquivo completo

Vulnerabilidades exploráveis hoje

17,688na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769
Novos KEV · 24H0
Exploit Today ≥ 701,700

Distribuição · última janela

  • Crítica
    5,527
  • Alta
    21,042
  • Média
    20,196
  • Baixa
    2,086
Filtros
Filtros

Janela

Severidade

Filtros

Vulnerabilidades2,281–2,320 · 17,688
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1212155.4 MÉD
9.1%
——3UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1212149.6 CRÍ
35.8%
——11Use after free in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-1212136.5 MÉD
19.2%
——6Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-1212128.8 ALT
18.3%
——5Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1212118.3 ALT
19.8%
——6Use after free in PowerBookmarks in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)2dCVE-2026-1212108.8 ALT
34.8%
——10Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-121209—
8.1%
——2UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)4dCVE-2026-1212088.8 ALT
31.1%
——9Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-121207—
10.2%
——3Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1212065.4 MÉD
9.7%
——3UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)2dCVE-2026-1212058.8 ALT
17.7%
——5Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)2dCVE-2026-1212048.8 ALT
24.4%
——7Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)2dCVE-2026-1212038.8 ALT
31.1%
——9Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)4dCVE-2026-1212029.6 CRÍ
26.1%
——8Use after free in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)3dCVE-2026-1212018.8 ALT
31.1%
——9Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-1212009.6 CRÍ
30.9%
——9Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)3dCVE-2026-1211995.5 MÉD
0.5%
——0Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: Medium)3dCVE-2026-1211988.8 ALT
12.1%
——4Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)2dCVE-2026-121197—
8.1%
——2Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-121196—
9.4%
——3Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1211958.8 ALT
12.1%
——4Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)2dCVE-2026-1211945.3 MÉD
13.0%
——4Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted PDF file. (Chromium security severity: Medium)2dCVE-2026-121193—
7.0%
——2Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)4dCVE-2026-121190—
6.5%
——2UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Low)4dCVE-2026-1211899.6 CRÍ
35.8%
——11Use after free in Browser in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)3dCVE-2026-1211888.8 ALT
31.1%
——9Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211875.3 MÉD
21.7%
——7Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1211865.4 MÉD
9.7%
——3UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1211859.6 CRÍ
35.8%
——11Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211848.8 ALT
29.9%
——9Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1211838.3 ALT
28.6%
——9Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)3dCVE-2026-1211828.8 ALT
31.1%
——9Use after free in DOM in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)3dCVE-2026-1211818.8 ALT
31.1%
——9Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211808.8 ALT
34.7%
——10Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211798.8 ALT
28.9%
——9Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211788.3 ALT
30.1%
——9Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)4dCVE-2026-1211775.4 MÉD
9.7%
——3UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-1211766.5 MÉD
15.9%
——5Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-121175—
7.9%
——2Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)4dCVE-2026-1211748.8 ALT
24.8%
——7Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)2d