CVE-20XX-?
agent?

Browser & mail CVEs.

Published CVEs that affect browser & mail software, ranked by exploit odds.

9 CVEs · updated 2026-11-11 15:05 UTC

Reset all
  1. CVE-2026-122518

    Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

    Memory safety Browser & mail

    6.5 MEDIUM No fix listed
  2. CVE-2026-125349

    Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    Memory safety Browser & mail

    3.4 LOW No fix listed
  3. CVE-2026-125350

    Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    exploited Memory safety Browser & mail Google Chrome

    8.8 HIGH Fix listed
  4. CVE-2026-125342

    Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    Memory safety Browser & mail

    4.7 MEDIUM No fix listed
  5. CVE-2026-125343

    Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    8.3 HIGH No fix listed
  6. CVE-2026-125344

    Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    8.8 HIGH No fix listed
  7. CVE-2026-125345

    Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    4.7 MEDIUM No fix listed
  8. CVE-2026-125346

    Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    8.8 HIGH No fix listed
  9. CVE-2026-125348

    Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

    Memory safety Browser & mail

    8.8 HIGH No fix listed

CVEs that affect browser & mail, sorted by how likely they are to be exploited (EPSS).