CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 7:10 AM ET)

What this means for you

This week: 3,061 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,061; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 9; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product microsoft:edge_chromium. Show all products

106 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2020-16009 Known exploited	High 8.8	Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 2, 2020
CVE-2022-4135 Known exploited	Critical 9.6	Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Assigned by Chrome	Nov 24, 2022
CVE-2023-4762 Known exploited	High 8.8	Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Assigned by Chrome	Sep 5, 2023
CVE-2023-4863 Known exploited	High 8.8	Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Assigned by Chrome	Sep 12, 2023
CVE-2023-5217 Known exploited	High 8.8	Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Sep 28, 2023
CVE-2023-6345 Known exploited	Critical 9.6	Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. Assigned by Chrome	Nov 29, 2023
CVE-2024-7965 Known exploited	High 8.8	Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Aug 21, 2024
CVE-2025-5419 Known exploited	High 8.8	Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Jun 2, 2025
CVE-2025-60711	Medium 6.3	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Assigned by microsoft	Oct 31, 2025
CVE-2025-62223	Medium 4.3	Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability Assigned by microsoft	Dec 4, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.