CVE Vulnerability Database
Search and browse 425,022 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106406 | MEDIUM | 5.4 | — | Oct 6, 2026 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging s... |
| CVE-2026-106405 | MEDIUM | 6 | 0.1% | Oct 6, 2026 | Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass we... |
| CVE-2026-106404 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi... |
| CVE-2026-106403 | HIGH | 8.1 | 0.2% | Oct 6, 2026 | Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compr... |
| CVE-2026-106402 | MEDIUM | 4.8 | — | Oct 6, 2026 | Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia... |
| CVE-2026-106401 | CRITICAL | 9.6 | — | Oct 6, 2026 | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute ar... |
| CVE-2026-106400 | MEDIUM | 5.4 | — | Oct 6, 2026 | Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging soci... |
| CVE-2026-106399 | LOW | 3.3 | 0.1% | Oct 6, 2026 | Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineerin... |
| CVE-2026-106398 | MEDIUM | 4.3 | — | Oct 6, 2026 | Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin ... |
| CVE-2026-106397 | MEDIUM | 6.1 | 0.2% | Oct 6, 2026 | Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging... |
| CVE-2026-106396 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker lev... |
| CVE-2026-106395 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read m... |
| CVE-2026-106394 | MEDIUM | 4.3 | — | Oct 6, 2026 | Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeri... |
| CVE-2026-106393 | HIGH | 8.3 | — | Oct 6, 2026 | Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rend... |
| CVE-2026-106392 | MEDIUM | 4.3 | — | Oct 6, 2026 | Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross... |
| CVE-2026-106391 | MEDIUM | 4.2 | — | Oct 6, 2026 | Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who ... |
| CVE-2026-106390 | MEDIUM | 4.3 | — | Oct 6, 2026 | Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote ... |
| CVE-2026-106389 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engin... |
| CVE-2026-106388 | MEDIUM | 5.3 | — | Oct 6, 2026 | Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi... |
| CVE-2026-106387 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging s... |
| CVE-2026-106386 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory insi... |
| CVE-2026-106385 | MEDIUM | 5.3 | 0.2% | Oct 6, 2026 | Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee... |
| CVE-2026-106384 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had comprom... |
| CVE-2026-106383 | HIGH | 8.8 | — | Oct 6, 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-106382 | CRITICAL | 9.6 | — | Oct 6, 2026 | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code... |