Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates
14,934 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.
CVE-2026-95331
Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:45.155Z. Updated 2026-09-30T03:56:56.337Z.
CVE-2026-95381
Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:44.921Z. Updated 2026-09-30T03:56:35.143Z.
CVE-2026-95382
Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:44.686Z. Updated 2026-09-29T18:12:36.567Z.
CVE-2026-95366
Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:44.441Z. Updated 2026-09-30T19:41:45.550Z.
CVE-2026-95287
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:44.202Z. Updated 2026-09-30T12:40:30.069Z.
CVE-2026-95351
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:43.958Z. Updated 2026-09-30T03:56:35.855Z.
CVE-2026-95299
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:43.711Z. Updated 2026-09-30T03:56:57.041Z.
CVE-2026-95306
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:43.481Z. Updated 2026-09-30T03:56:45.130Z.
CVE-2026-95304
Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:43.216Z. Updated 2026-09-30T03:56:46.666Z.
CVE-2026-95280
Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:42.989Z. Updated 2026-09-30T03:56:48.102Z.
CVE-2026-95343
Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:42.767Z. Updated 2026-09-30T03:56:48.845Z.
CVE-2026-95365
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:42.482Z. Updated 2026-09-30T03:56:49.575Z.
CVE-2026-95286
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:42.242Z. Updated 2026-09-30T03:56:51.925Z.
CVE-2026-95318
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:41.956Z. Updated 2026-09-30T03:56:57.765Z.
CVE-2026-95338
Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:41.713Z. Updated 2026-09-30T03:56:50.500Z.
CVE-2026-95335
Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:41.480Z. Updated 2026-09-30T03:56:36.583Z.
CVE-2026-95348
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:41.213Z. Updated 2026-09-30T03:56:37.302Z.
CVE-2026-95277
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:40.992Z. Updated 2026-09-30T03:57:02.183Z.
CVE-2026-95373
Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:40.739Z. Updated 2026-09-30T03:56:53.352Z.
CVE-2026-95282
Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-29T17:31:40.498Z. Updated 2026-09-30T03:56:52.616Z.