Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA, the probability of exploitation (EPSS) and public exploits – each one researched individually: what is affected, what helps, what to do.
Per day (UTC); hover over a bar for the figures.
| Day | Critical | High | Medium | Low | Not rated | Total |
|---|---|---|---|---|---|---|
| Mon, 2 Nov 2026 | 11 | 23 | 51 | 14 | 62 | 161 |
| Sun, 1 Nov 2026 | 8 | 24 | 27 | 15 | 24 | 98 |
| Sat, 31 Oct 2026 | 11 | 44 | 51 | 1 | 5 | 112 |
| Fri, 30 Oct 2026 | 45 | 217 | 259 | 30 | 118 | 669 |
| Thu, 29 Oct 2026 | 66 | 191 | 218 | 22 | 40 | 537 |
| Wed, 28 Oct 2026 | 35 | 215 | 209 | 31 | 136 | 626 |
| Tue, 27 Oct 2026 | 69 | 188 | 177 | 33 | 181 | 648 |
| Mon, 26 Oct 2026 | 21 | 130 | 245 | 55 | 287 | 738 |
| Sun, 25 Oct 2026 | 3 | 31 | 66 | 26 | 5 | 131 |
| Sat, 24 Oct 2026 | 12 | 19 | 35 | 6 | 1 | 73 |
| Fri, 23 Oct 2026 | 40 | 169 | 90 | 27 | 166 | 492 |
| Thu, 22 Oct 2026 | 69 | 160 | 206 | 55 | 2 | 492 |
| Wed, 21 Oct 2026 | 50 | 218 | 225 | 47 | 2 | 542 |
| Tue, 20 Oct 2026 | 169 | 813 | 812 | 127 | 2 | 1,923 |
| Mon, 19 Oct 2026 | 29 | 128 | 204 | 66 | 10 | 437 |
| Sun, 18 Oct 2026 | 10 | 55 | 65 | 19 | 400 | 549 |
| Sat, 17 Oct 2026 | 4 | 42 | 50 | 4 | 0 | 100 |
| Fri, 16 Oct 2026 | 53 | 179 | 219 | 14 | 0 | 465 |
| Thu, 15 Oct 2026 | 51 | 232 | 244 | 19 | 0 | 546 |
| Wed, 14 Oct 2026 | 92 | 374 | 285 | 30 | 43 | 824 |
| Tue, 13 Oct 2026 | 170 | 1,361 | 729 | 43 | 0 | 2,303 |
| Mon, 12 Oct 2026 | 48 | 264 | 282 | 80 | 0 | 674 |
| Sun, 11 Oct 2026 | 16 | 73 | 101 | 39 | 0 | 229 |
| Sat, 10 Oct 2026 | 78 | 143 | 178 | 13 | 0 | 412 |
| Fri, 9 Oct 2026 | 42 | 152 | 105 | 11 | 5 | 315 |
| Thu, 8 Oct 2026 | 62 | 194 | 220 | 21 | 0 | 497 |
| Wed, 7 Oct 2026 | 53 | 131 | 145 | 9 | 2 | 340 |
| Tue, 6 Oct 2026 | 105 | 371 | 345 | 38 | 155 | 1,014 |
| Mon, 5 Oct 2026 | 31 | 119 | 210 | 45 | 0 | 405 |
| Sun, 4 Oct 2026 | 13 | 16 | 28 | 11 | 0 | 68 |
767 vulnerabilities · Vendor: Google
A use-after-free vulnerability (CWE-416) in Tint, the WebGPU shader compiler of Google Chrome before 155.0.8059.39, allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. The attacker only needs to lure a user to a crafted HTML page, and no privileges are required. Google rates the Chromium security severity as High and the CVSS score as 9.6 (Critical).
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Google Chrome before 155.0.8059.39 contains a use-after-free vulnerability in the Select component (CWE-416). A remote attacker who lures a user to a crafted HTML page through social engineering can execute arbitrary code inside the browser sandbox. The description does not cover a further sandbox escape, so this is not a complete takeover from a web visit alone. NVD rates the issue CVSS 8.8 (High).
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Google Chrome on macOS contains an incorrect reference resolution flaw in the Browser component. A remote attacker who uses social engineering can get a user to open a crafted HTML page and obtain sensitive information. Chromium rates the issue Medium; the NVD score is 8.8, but the described impact is limited to information disclosure.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Missing authorization in the Workers component of Google Chrome allows a remote attacker to bypass site isolation via a crafted PDF file. The attacker must first have compromised the renderer process, for example with a separate browser exploit, so this is a second-stage flaw. NVD rates it 8.1 (High) under CVSS 3.1, and Chromium rates it as Medium severity.
Google · Chrome
Research and translation in progress – available shortly.
A use-after-free vulnerability in the CSS component of Google Chrome before 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker must lure a victim to a crafted HTML page, for example via a phishing link or a compromised website. NVD rates the issue CVSS 8.8 (High), while Google rates it Low in its Chromium severity scale.
Google · Chrome
A use-after-free flaw in the WebRTC component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker only needs to lure a user to a crafted HTML page, and the user must visit it. The description does not report a sandbox escape, so full system compromise would require a further exploit chain.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free vulnerability (CWE-416) in HTML handling in Google Chrome before 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker must lure a user to a crafted HTML page; no authentication is required. A full compromise usually needs an additional sandbox escape, which is not described in the CVE record. Chromium rates the issue High.
Google · Chrome
The tracker combines official, freely usable data sources – updated continuously:
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.
