Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91731 | high | 8.8 | No | Type confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox... | 2026-09-17 |
| CVE-2026-91730 | low | 3.1 | No | Incomplete cleanup in GetUserMedia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer proces... | 2026-09-17 |
| CVE-2026-91729 | critical | 9.6 | No | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to exec... | 2026-09-17 |
| CVE-2026-91728 | critical | 9.6 | No | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-09-17 |
| CVE-2026-91727 | high | 8.1 | No | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised... | 2026-09-17 |
| CVE-2026-91726 | medium | 4.7 | No | Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandb... | 2026-09-17 |
| CVE-2026-91725 | medium | 5.3 | No | Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted... | 2026-09-17 |
| CVE-2026-91724 | high | 8.3 | No | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potent... | 2026-09-17 |
| CVE-2026-91722 | high | 8.8 | No | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the... | 2026-09-17 |
| CVE-2026-91720 | medium | 4.7 | No | Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a c... | 2026-09-17 |
| CVE-2026-92416 | medium | 4.3 | No | A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_session_report_request of the fi... | 2026-09-17 |
| CVE-2026-92184 | medium | 6.3 | No | A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/... | 2026-09-17 |
| CVE-2026-84558 | medium | 5.5 | No | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause... | 2026-09-17 |
| CVE-2026-84551 | medium | 4.4 | No | A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchO... | 2026-09-17 |
| CVE-2026-76872 | medium | 5.4 | No | Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, inclu... | 2026-09-17 |
| CVE-2026-76867 | medium | 5.4 | No | Netcore NR255-V firmware version 1.5.130703 contains a stored cross-site scripting vulnerability in routing and NAT configuration CGI compon... | 2026-09-17 |
| CVE-2026-76862 | high | 8.8 | No | Netcore NR255-V version 1.5.130703 contains an os command argument injection vulnerability in the Nettools tcpdump launch paths, including n... | 2026-09-17 |
| CVE-2026-76857 | medium | 6.5 | No | Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns_wan_list_show.cgi endpoint... | 2026-09-17 |
| CVE-2026-76852 | high | 8.8 | No | Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity che... | 2026-09-17 |
| CVE-2026-69218 | high | 7.5 | No | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame w... | 2026-09-17 |