CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome CSS Use-After-Free Vulnerability (CVE-2026-2441) Technical Security Advisory
[Affected Scope] Google Chrome browser versions prior to 145.0.7632.75
[Impact] Remote attackers can execute arbitrary code inside the browser sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (145.0.7632.75 or higher)
Google Chrome Visuals Use-After-Free Vulnerability (CVE-2024-4671) Technical Analysis and Mitigation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise
Microsoft Edge Chakra Engine Type Confusion Remote Code Execution Vulnerability (CVE-2016-7201)
[Affected Scope] Microsoft Edge browser and applications utilizing the legacy Chakra JavaScript scripting engine
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site
[Mitigation] Apply the MS16-129 cumulative security update or transition to the modern Chromium-based Microsoft Edge browser
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CVE-2016-3351) Technical Advisory
[Affected Scope] Microsoft Internet Explorer 9, 10, and 11, and Microsoft Edge
[Impact] Remote attackers can determine the presence of specific applications, MIME types, and security software on the host system via crafted web content
[Mitigation] Apply official Microsoft security updates (MS16-104, MS16-105) or transition to modern Chromium-based browsers
Mozilla Firefox and Thunderbird Remote Code Execution Vulnerability via onreadystatechange Event Handling (CVE-2013-1690)
[Affected Scope] Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7
[Impact] Remote attackers can trigger an application crash (Denial of Service) or execute arbitrary code by luring users to a crafted website that attempts to execute data at an unmapped memory location
[Mitigation] Immediately upgrade all affected installations to Firefox 22.0, Thunderbird 17.0.7, or later versions