Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106452 | medium | 5.3 | No | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compress... | 2026-10-07 |
| CVE-2026-106444 | medium | 4.7 | No | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedS... | 2026-10-07 |
| CVE-2026-102118 | high | 7.8 | No | A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service... | 2026-10-07 |
| CVE-2026-102115 | critical | 9.8 | No | Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the ema... | 2026-10-07 |
| CVE-2026-102114 | high | 7.2 | No | A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-syst... | 2026-10-07 |
| CVE-2026-102113 | high | 7.8 | No | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend... | 2026-10-07 |
| CVE-2026-102112 | high | 7.8 | No | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend... | 2026-10-07 |
| CVE-2026-102150 | high | 7.2 | No | A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use... | 2026-10-07 |
| CVE-2026-102111 | medium | 4.9 | No | Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set t... | 2026-10-07 |
| CVE-2026-102107 | medium | 4.6 | No | Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appea... | 2026-10-07 |
| CVE-2026-106260 | medium | 4.3 | No | Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak... | 2026-10-07 |
| CVE-2026-106262 | medium | 4.2 | No | Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces... | 2026-10-07 |
| CVE-2026-106238 | high | 8.3 | No | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent... | 2026-10-07 |
| CVE-2026-106264 | medium | 5.4 | No | Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to... | 2026-10-07 |
| CVE-2026-106239 | critical | 9.6 | No | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c... | 2026-10-07 |
| CVE-2026-106265 | medium | 5.4 | No | UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI ele... | 2026-10-07 |
| CVE-2026-106240 | high | 8.8 | No | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-07 |
| CVE-2026-106241 | critical | 9.6 | No | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer... | 2026-10-07 |
| CVE-2026-106268 | high | 8.8 | No | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-07 |
| CVE-2026-106269 | high | 8.8 | No | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-07 |