Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106388 | medium | 5.3 | No | Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer pro... | 2026-10-07 |
| CVE-2026-106390 | medium | 4.3 | No | Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sen... | 2026-10-07 |
| CVE-2026-106391 | medium | 4.2 | No | Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the... | 2026-10-07 |
| CVE-2026-106392 | medium | 4.3 | No | Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a c... | 2026-10-07 |
| CVE-2026-106393 | high | 8.3 | No | Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec... | 2026-10-07 |
| CVE-2026-106394 | medium | 4.3 | No | Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-ori... | 2026-10-07 |
| CVE-2026-106398 | medium | 4.3 | No | Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted H... | 2026-10-07 |
| CVE-2026-106245 | medium | 4.3 | No | Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted... | 2026-10-07 |
| CVE-2026-106400 | medium | 5.4 | No | Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to sp... | 2026-10-07 |
| CVE-2026-106401 | critical | 9.6 | No | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside... | 2026-10-07 |
| CVE-2026-106402 | medium | 4.8 | No | Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spo... | 2026-10-07 |
| CVE-2026-106406 | medium | 5.4 | No | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to... | 2026-10-07 |
| CVE-2026-106409 | high | 8.3 | No | Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had comprom... | 2026-10-07 |
| CVE-2026-106410 | medium | 4.2 | No | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proc... | 2026-10-07 |
| CVE-2026-106246 | medium | 5.4 | No | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML... | 2026-10-07 |
| CVE-2026-106411 | high | 8.8 | No | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-07 |
| CVE-2026-106247 | high | 8.3 | No | Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten... | 2026-10-07 |
| CVE-2026-106248 | high | 8.8 | No | Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-10-07 |
| CVE-2026-106249 | high | 8.8 | No | Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive info... | 2026-10-07 |
| CVE-2026-106412 | high | 8.3 | No | Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process... | 2026-10-07 |