CVE Vulnerability Database
Search and browse 425,022 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106356 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to s... |
| CVE-2026-106355 | MEDIUM | 5.3 | 0.3% | Oct 6, 2026 | Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had c... |
| CVE-2026-106354 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cro... |
| CVE-2026-106353 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveragi... |
| CVE-2026-106352 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging socia... |
| CVE-2026-106351 | MEDIUM | 5.3 | 0.2% | Oct 6, 2026 | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who h... |
| CVE-2026-106350 | HIGH | 8.8 | 0.2% | Oct 6, 2026 | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive... |
| CVE-2026-106349 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-106348 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive inform... |
| CVE-2026-106347 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-106346 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially e... |
| CVE-2026-106345 | MEDIUM | 4.2 | 0.2% | Oct 6, 2026 | Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromise... |
| CVE-2026-106344 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromis... |
| CVE-2026-106343 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker... |
| CVE-2026-106342 | HIGH | 8.8 | 0.2% | Oct 6, 2026 | Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive infor... |
| CVE-2026-106341 | HIGH | 8.8 | 0.3% | Oct 6, 2026 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary ... |
| CVE-2026-106340 | MEDIUM | 4.6 | 0.1% | Oct 6, 2026 | Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attack... |
| CVE-2026-106339 | LOW | 3.1 | — | Oct 6, 2026 | Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised t... |
| CVE-2026-106338 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker... |
| CVE-2026-106337 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI e... |
| CVE-2026-106336 | MEDIUM | 4.3 | — | Oct 6, 2026 | Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin d... |
| CVE-2026-106335 | HIGH | 8.8 | — | Oct 6, 2026 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code insi... |
| CVE-2026-106334 | HIGH | 8.8 | 0.2% | Oct 6, 2026 | Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social enginee... |
| CVE-2026-106333 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social eng... |
| CVE-2026-106332 | MEDIUM | 4.3 | — | Oct 6, 2026 | Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin... |