CVE Vulnerability Database
Search and browse 425,022 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106381 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypa... |
| CVE-2026-106380 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeri... |
| CVE-2026-106379 | MEDIUM | 4.3 | — | Oct 6, 2026 | Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin ... |
| CVE-2026-106378 | HIGH | 8.3 | — | Oct 6, 2026 | Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compr... |
| CVE-2026-106377 | HIGH | 8.3 | — | Oct 6, 2026 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render... |
| CVE-2026-106376 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read ... |
| CVE-2026-106375 | CRITICAL | 9.6 | — | Oct 6, 2026 | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbi... |
| CVE-2026-106374 | HIGH | 8.8 | — | Oct 6, 2026 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-106373 | HIGH | 8.8 | — | Oct 6, 2026 | Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbit... |
| CVE-2026-106372 | CRITICAL | 9.6 | — | Oct 6, 2026 | Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute a... |
| CVE-2026-106371 | HIGH | 8.8 | — | Oct 6, 2026 | Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote ... |
| CVE-2026-106370 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had co... |
| CVE-2026-106369 | MEDIUM | 4.2 | 0.2% | Oct 6, 2026 | Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised... |
| CVE-2026-106368 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI e... |
| CVE-2026-106367 | HIGH | 8.4 | 0.1% | Oct 6, 2026 | Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveragin... |
| CVE-2026-106366 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypa... |
| CVE-2026-106365 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origi... |
| CVE-2026-106364 | MEDIUM | 5.3 | 0.2% | Oct 6, 2026 | Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised... |
| CVE-2026-106363 | HIGH | 8.3 | 0.3% | Oct 6, 2026 | Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromise... |
| CVE-2026-106362 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social en... |
| CVE-2026-106361 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a rem... |
| CVE-2026-106360 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin da... |
| CVE-2026-106359 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to by... |
| CVE-2026-106358 | CRITICAL | 9.6 | 0.4% | Oct 6, 2026 | Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-106357 | HIGH | 8.8 | 0.5% | Oct 6, 2026 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code ins... |