vulnerability management

Chrome on iOS versions before 150.0.7871.47 are the affected assets identified in the supplied NVD record for CVE-2026-13915. The Chrome-sourced description says a remote attacker could use a crafted HTML page and persuade a user to perform specific interface gestures, potentially triggering...

CVE-2026-13914 is a medium-severity Chrome vulnerability that could allow a local attacker to obtain potentially sensitive information from browser process memory through a malicious file. The issue is associated with Chrome’s Passwords component, but the public record does not identify the...

CVE-2026-13912 is a medium-severity Safe Browsing interface flaw documented in Chrome on iOS versions before 150.0.7871.47. According to the Chrome-supplied description in the National Vulnerability Database, a remote attacker could use a crafted HTML page to perform user-interface spoofing...

Google fixed CVE-2026-13905 in Chrome for iOS version 150.0.7871.47, closing a medium-severity race condition that could allow a local attacker with physical access to obtain potentially sensitive information from the browser’s process memory on an iPhone running an earlier version. The narrow...

Google Chrome on iOS versions before 150.0.7871.47 are affected by CVE-2026-13892, a medium-severity interface flaw disclosed by Chrome and published by NVD on June 30, 2026, that can let a remote attacker use a crafted page and induced touch gestures to leak cross-origin data. The fixed-version...

Microsoft added CVE-2026-13862 to its Security Update Guide because the vulnerability affects Chromium Open Source Software consumed by Chromium-based Edge. The company’s stated product condition is that the latest Edge is no longer vulnerable. That is useful but incomplete for enterprise...

CVE-2026-13856 affects only Google Chrome on Android versions below 150.0.7871.47, according to the available CVE record. Update Chrome and verify that the installed version is 150.0.7871.47 or later. Android remediation Open Google Play Store. Tap the profile icon. Select Manage apps & device...

CVE-2026-13822 affects Google Chrome on Android before version 150.0.7871.47. According to the published description, a remote attacker who persuades a user to install a crafted malicious extension could bypass the browser’s same-origin policy. The documented remediation is version-based: move...

Google fixed CVE-2026-13816 in Chrome for Android 150.0.7871.47 after finding that earlier versions insufficiently validated untrusted input in the browser’s File Input component. According to the CVE description, a remote attacker could use a crafted HTML page to leak cross-origin data when a...

Google fixed CVE-2026-13795 in Chrome for iOS 150.0.7871.47. Only Chrome for iOS versions earlier than 150.0.7871.47 are listed as affected. Windows desktop Chrome is not part of the affected NVD configuration. The required action is to update the Chrome app on affected iPhones. The...

Chrome 150.0.7871.46 is outside the documented affected range for CVE-2026-14417, a Critical use-after-free vulnerability in Dawn that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The National Vulnerability Database record identifies applicable...

CVE-2026-14415: Update Chrome Past 150.0.7871.46—and Verify the Full Version After Relaunch Google fixed CVE-2026-14415 in Google Chrome 150.0.7871.46. Chrome installations below that complete four-part version are within the affected range identified by the National Vulnerability Database...

Google fixed CVE-2026-14398 in Chrome 150.0.7871.46. According to the National Vulnerability Database record for CVE-2026-14398, Chrome versions before 150.0.7871.46 are affected by a use-after-free vulnerability in ANGLE that could allow a remote attacker using a crafted HTML page to...

For end users, the update path is direct: Open the App Store on the iPhone or iPad. Search for Google Chrome. Tap Update. If the button says Open, the App Store is not currently offering a newer build to that device. Open Chrome. Tap … and go to Settings > Google Chrome. On releases where that...

CVE-2026-14428 affects Google Chrome on Android versions earlier than 150.0.7871.46. The remediation is direct: update Chrome on Android to version 150.0.7871.46 or later and verify the installed version afterward. The vulnerability is a potential sandbox escape that requires the attacker to...

June’s actionable signal is not merely 60 prioritized CVEs, but 57 listed by Recorded Future’s Insikt Group as actively exploited, 53 with public proof-of-concept exploits, and exploitation occurring in less than a day—so teams must prioritize exposed affected assets and compromise assessment...

Foxit Software released coordinated security updates on July 8, 2026, addressing more than 30 vulnerabilities in Foxit PDF Reader and Foxit PDF Editor across Windows and macOS. The fixed builds cover the current 2026.x line and supported 14.x and 13.2 Editor branches. The release includes...

Microsoft said on July 9, 2026, that Windows is expanding AI-powered vulnerability detection and remediation across its codebase, using tools including MDASH to find flaws earlier, validate fixes faster, and push organizations toward continuous, risk-driven patching instead of calendar-bound...

Microsoft’s Security Update Guide entry for CVE-2026-53332 tracks a Linux kernel flaw titled “slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd,” a Qualcomm SLIMbus controller initialization bug that can let callbacks hit uninitialized driver state during early hardware bring-up...

Google Chrome before 150.0.7871.47 is affected by CVE-2026-14017, a Navigation implementation flaw disclosed on June 30, 2026, that could let an attacker who already compromised Chrome’s renderer potentially escape the sandbox through a crafted HTML page. The short answer to the CPE question is...