Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118305 | critical | 9.6 | No | Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsid... | 2026-10-29 |
| CVE-2026-118306 | critical | 9.6 | No | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs... | 2026-10-29 |
| CVE-2026-118307 | high | 8.8 | No | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s... | 2026-10-29 |
| CVE-2026-118308 | critical | 9.6 | No | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sa... | 2026-10-29 |
| CVE-2026-118309 | critical | 9.6 | No | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit... | 2026-10-29 |
| CVE-2026-118310 | critical | 9.6 | No | Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar... | 2026-10-29 |
| CVE-2026-113697 | not reported | — | No | Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execu... | 2026-10-29 |
| CVE-2026-113696 | not reported | — | No | Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allo... | 2026-10-29 |
| CVE-2026-113695 | not reported | — | No | Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01,... | 2026-10-29 |
| CVE-2026-113694 | not reported | — | No | Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allo... | 2026-10-29 |
| CVE-2026-113693 | not reported | — | No | Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 2... | 2026-10-29 |
| CVE-2026-113692 | not reported | — | No | Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authe... | 2026-10-29 |
| CVE-2026-113691 | not reported | — | No | Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.... | 2026-10-29 |
| CVE-2026-113690 | not reported | — | No | Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allo... | 2026-10-29 |
| CVE-2026-113689 | not reported | — | No | Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allo... | 2026-10-29 |
| CVE-2026-113688 | not reported | — | No | Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26... | 2026-10-29 |
| CVE-2026-33924 | high | 7.2 | No | Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the upda... | 2026-10-29 |
| CVE-2026-33923 | high | 7.2 | No | A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update... | 2026-10-29 |
| CVE-2026-118311 | high | 8.8 | No | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th... | 2026-10-29 |
| CVE-2026-118312 | critical | 9.6 | No | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside t... | 2026-10-29 |