Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106339 | low | 3.1 | No | Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process... | 2026-10-07 |
| CVE-2026-62874 | critical | 9.8 | No | Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network. | 2026-10-07 |
| CVE-2026-106371 | high | 8.8 | No | Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain s... | 2026-10-07 |
| CVE-2026-106372 | critical | 9.6 | No | Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsid... | 2026-10-07 |
| CVE-2026-106373 | high | 8.8 | No | Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the... | 2026-10-07 |
| CVE-2026-106374 | high | 8.8 | No | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-07 |
| CVE-2026-106375 | critical | 9.6 | No | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside t... | 2026-10-07 |
| CVE-2026-106377 | high | 8.3 | No | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execut... | 2026-10-07 |
| CVE-2026-106378 | high | 8.3 | No | Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer... | 2026-10-07 |
| CVE-2026-106379 | medium | 4.3 | No | Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted H... | 2026-10-07 |
| CVE-2026-106380 | medium | 5.4 | No | UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI eleme... | 2026-10-07 |
| CVE-2026-106382 | critical | 9.6 | No | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox... | 2026-10-07 |
| CVE-2026-106383 | high | 8.8 | No | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-07 |
| CVE-2026-106278 | high | 8.8 | No | Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrar... | 2026-10-07 |
| CVE-2026-106279 | high | 7.4 | No | Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised t... | 2026-10-07 |
| CVE-2026-106281 | critical | 9.6 | No | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the s... | 2026-10-07 |
| CVE-2026-106282 | medium | 5.4 | No | UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML pag... | 2026-10-07 |
| CVE-2026-106283 | high | 8.8 | No | Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially e... | 2026-10-07 |
| CVE-2026-106285 | medium | 5.4 | No | UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to by... | 2026-10-07 |
| CVE-2026-106291 | high | 8.8 | No | Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the s... | 2026-10-07 |