Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106292 | high | 8.3 | No | Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten... | 2026-10-07 |
| CVE-2026-106293 | high | 8.3 | No | Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent... | 2026-10-07 |
| CVE-2026-106295 | medium | 4.2 | No | Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende... | 2026-10-07 |
| CVE-2026-106298 | critical | 9.6 | No | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c... | 2026-10-07 |
| CVE-2026-106302 | medium | 5.4 | No | UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to... | 2026-10-07 |
| CVE-2026-106303 | medium | 5.3 | No | Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro... | 2026-10-07 |
| CVE-2026-102413 | medium | 6.2 | No | Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elas... | 2026-10-07 |
| CVE-2026-106305 | medium | 5.4 | No | UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a cr... | 2026-10-07 |
| CVE-2026-106308 | high | 8.8 | No | Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social... | 2026-10-07 |
| CVE-2026-106309 | high | 8.8 | No | Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informa... | 2026-10-07 |
| CVE-2026-106311 | medium | 5.4 | No | Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof U... | 2026-10-07 |
| CVE-2026-106312 | medium | 6.5 | No | Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain se... | 2026-10-07 |
| CVE-2026-106313 | medium | 5.1 | No | Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineer... | 2026-10-07 |
| CVE-2026-106314 | high | 8.8 | No | Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a... | 2026-10-07 |
| CVE-2026-106315 | high | 8.8 | No | Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sand... | 2026-10-07 |
| CVE-2026-106316 | medium | 5.4 | No | UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering... | 2026-10-07 |
| CVE-2026-106317 | medium | 5.4 | No | UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via... | 2026-10-07 |
| CVE-2026-106318 | high | 8.8 | No | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-07 |
| CVE-2026-106323 | critical | 9.6 | No | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engine... | 2026-10-07 |
| CVE-2026-90462 | medium | 5.4 | No | A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-ope... | 2026-10-07 |