Advisories
When the HARD app says something on your Mac needs updating, it links here: what's missing, whether any of it is being used in attacks, and the sources. Checked against Google, Apple and CISA on 23 Oct 2026.
Searches all 1,754 flaws on CISA’s list of vulnerabilities known to be used in attacks. Or browse them by company: Microsoft, Cisco, Apple, Adobe, Google and more.
- Brave on Chromium 152
1,086 security fixes behind, 41 critical. One of them is being used in attacks.
What it's missing, and what to do - Chrome before 156.0.8078.47
353 security fixes in the latest release alone, 6 critical. Older than 153.0.8010.36: also flaws used in attacks.
What it's missing, and what to do - macOS Sequoia before 15.8.1
One security fix in 15.8.1, being used in attacks. More the further back you are.
What it's missing, and what to do - Apps built on Electron 41
No security fixes since 24 Aug 2026. Chromium has fixed 1,451 flaws since, 53 critical.
What it's missing, and what to do
Being used in attacks
Each flaw the HARD app has seen being used in attacks gets its own page: what it is, who's affected, the fix and the sources.
- CVE-2026-86950
A memory flaw in Apple's graphics code that lets a booby-trapped file run code. On CISA's list of flaws used in attacks since 29 Sep 2026.
- CVE-2026-87491
A memory flaw in Chrome's JavaScript engine that lets a web page run code. On CISA's list of flaws used in attacks since 9 Sep 2026.
- CVE-2026-85046
A flaw that makes Chrome's JavaScript engine mix up types of data, letting a web page run code. On CISA's list of flaws used in attacks since 4 Sep 2026.
- CVE-2026-65400
A flaw in macOS Screen Sharing that lets an attacker on the network in without a password. On CISA's list of flaws used in attacks since 18 Aug 2026.
- CVE-2026-11645
A flaw that lets Chrome's JavaScript engine reach memory it shouldn't, letting a web page run code. On CISA's list of flaws used in attacks since 9 Jun 2026.
By company
Every flaw CISA lists as being used in attacks, grouped by the company that makes the product: 94 companies, from Microsoft (390) down.