2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
124 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-110144 Google Chrome | HIGH8.6 | Google Chrome | CWE-863 Incorrect Authorization | 0.1% | Oct 13, 2026 |
| CVE-2026-106237 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-200 Information Exposure | 0.2% | Oct 6, 2026 |
| CVE-2026-106221 Google Chrome | HIGH8.3 | Google Chrome | CWE-441 | 0.3% | Oct 6, 2026 |
| CVE-2026-106199 Google Chrome | HIGH8.2 | Google Chrome | CWE-863 Incorrect Authorization | 0.2% | Oct 6, 2026 |
| CVE-2026-106198 Google Chrome | HIGH8.2 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Oct 6, 2026 |
| CVE-2026-106196 Google Chrome | HIGH7.6 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Oct 6, 2026 |
| CVE-2026-106195 Google Chrome | CRITICAL9.1 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Oct 6, 2026 |
| CVE-2026-106188 Google Chrome | HIGH7.1 | Google Chrome | CWE-441 | 0.2% | Oct 6, 2026 |
| CVE-2026-91732 Google Chrome | HIGH8.1 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Sep 15, 2026 |
| CVE-2026-91719 Google Chrome | HIGH8.1 | Google Chrome | CWE-94 Code Injection | 0.2% | Sep 15, 2026 |
| CVE-2026-87570 Google Chrome | HIGH8.8 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87569 Google Chrome | HIGH8.8 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87544 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87534 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87450 Google Chrome | HIGH7.5 | Google Chrome | CWE-863 Incorrect Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-87433 Google Chrome | HIGH8.8 | Google Chrome | CWE-367 | 0.3% | Sep 9, 2026 |
| CVE-2026-87431 Google Chrome | HIGH7.5 | Google Chrome | CWE-862 Missing Authorization | 0.3% | Sep 9, 2026 |
| CVE-2026-28659 Google Android Xr | CRITICAL10.0 | Google Android Xr | CWE-269 Improper Privilege Management | 0.2% | Sep 8, 2026 |
| CVE-2026-14541 Google Mcp Toolbox For Databases | HIGH8.0 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.3% | Jul 31, 2026 |
| CVE-2026-14537 Google Mcp Toolbox For Databases | HIGH8.1 | Google Mcp Toolbox For Databases | CWE-863 Incorrect Authorization | 0.3% | Jul 31, 2026 |
| CVE-2026-16414 Google Chrome | HIGH7.8 | Google Chrome | CWE-20 Improper Input Validation | 0.1% | Jul 21, 2026 |
| CVE-2026-15829 Google Mcp Toolbox For Databases | HIGH8.6 | Google Mcp Toolbox For Databases | CWE-89 SQL Injection | 0.2% | Jul 21, 2026 |
| CVE-2026-14120 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14109 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14106 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-14104 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-20 Improper Input Validation | 0.5% | Jun 30, 2026 |
| CVE-2026-14102 Google Chrome | HIGH8.8 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-14101 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-269 Improper Privilege Management | 0.3% | Jun 30, 2026 |
| CVE-2026-14090 Google Chrome | HIGH8.1 | Google Chrome | CWE-125 Out of Bounds Read | 0.3% | Jun 30, 2026 |
| CVE-2026-13785 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-13784 Google Chrome | HIGH8.8 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-13783 Google Chrome | HIGH8.8 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-13782 Google Chrome | CRITICAL10.0 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-13781 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.4% | Jun 30, 2026 |
| CVE-2026-13780 Google Chrome | CRITICAL9.6 | Google Chrome | CWE-20 Improper Input Validation | 0.4% | Jun 30, 2026 |
| CVE-2026-13777 Google Chrome | HIGH8.8 | Google Chrome | CWE-20 Improper Input Validation | 0.3% | Jun 30, 2026 |
| CVE-2026-13776 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-843 | 0.3% | Jun 30, 2026 |
| CVE-2026-13775 Google Chrome | CRITICAL9.8 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-13774 Google Chrome | HIGH8.1 | Google Chrome | CWE-416 Use After Free | 0.3% | Jun 30, 2026 |
| CVE-2026-11720 Google Mcp Toolbox For Databases | CRITICAL9.3 | Google Mcp Toolbox For Databases | CWE-22 Path Traversal | 0.5% | Jun 29, 2026 |
| CVE-2026-12537 Google Gemini-Cli | CRITICAL10.0 | Google Gemini-Cli | CWE-20 Improper Input Validation | 0.2% | Jun 24, 2026 |
| CVE-2026-11719 Google Mcp Toolbox For Databases | HIGH8.6 | Google Mcp Toolbox For Databases | CWE-862 Missing Authorization | 0.1% | Jun 18, 2026 |
| CVE-2026-11718 Google Mcp Toolbox For Databases | CRITICAL9.3 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.2% | Jun 18, 2026 |
| CVE-2026-11717 Google Mcp Toolbox For Databases | CRITICAL9.3 | Google Mcp Toolbox For Databases | CWE-287 Improper Authentication | 0.2% | Jun 18, 2026 |
| CVE-2026-28615 Google Android | CRITICAL10.0 | Google Android | CWE-862 Missing Authorization | 0.2% | Jun 17, 2026 |
| CVE-2026-0083 Google Android | CRITICAL10.0 | Google Android | CWE-362 Race Condition | 0.1% | Jun 17, 2026 |
| CVE-2026-0082 Google Android | CRITICAL10.0 | Google Android | CWE-453 | 0.2% | Jun 17, 2026 |
| CVE-2026-0081 Google Android | CRITICAL10.0 | Google Android | CWE-862 Missing Authorization | 0.1% | Jun 17, 2026 |
| CVE-2026-0071 Google Android | CRITICAL10.0 | Google Android | CWE-862 Missing Authorization | 0.2% | Jun 17, 2026 |
| CVE-2026-0068 Google Android | CRITICAL10.0 | Google Android | CWE-362 Race Condition | 0.1% | Jun 17, 2026 |
Page 1 of 3
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications