Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110163 | high | 8.8 | No | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-15 |
| CVE-2026-110162 | high | 8.8 | No | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-15 |
| CVE-2026-110161 | critical | 9.6 | No | Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi... | 2026-10-15 |
| CVE-2026-110159 | critical | 9.6 | No | Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sa... | 2026-10-15 |
| CVE-2026-110157 | high | 8.8 | No | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-15 |
| CVE-2026-110156 | high | 8.3 | No | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised... | 2026-10-15 |
| CVE-2026-110155 | high | 8.8 | No | Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-15 |
| CVE-2026-110154 | high | 8.8 | No | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the... | 2026-10-15 |
| CVE-2026-110153 | high | 8.8 | No | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-15 |
| CVE-2026-110152 | critical | 9.6 | No | Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary co... | 2026-10-15 |
| CVE-2026-110151 | high | 8.8 | No | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-15 |
| CVE-2026-110149 | critical | 9.6 | No | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox vi... | 2026-10-15 |
| CVE-2026-110148 | high | 8.8 | No | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-15 |
| CVE-2026-110147 | high | 8.8 | No | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-15 |
| CVE-2026-110145 | high | 8.3 | No | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to ex... | 2026-10-15 |
| CVE-2026-110144 | high | 8.6 | No | Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitr... | 2026-10-15 |
| CVE-2026-110142 | critical | 9.6 | No | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox... | 2026-10-15 |
| CVE-2026-110140 | high | 8.8 | No | Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-15 |
| CVE-2026-110138 | high | 8.3 | No | Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process... | 2026-10-15 |
| CVE-2026-110137 | high | 8.8 | No | Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-15 |