CVE Vulnerability Database
Search and browse 425,023 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-106306 | MEDIUM | 5.4 | 0.1% | Oct 6, 2026 | Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system ac... |
| CVE-2026-106305 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof ... |
| CVE-2026-106304 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the... |
| CVE-2026-106303 | MEDIUM | 5.3 | — | Oct 6, 2026 | Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi... |
| CVE-2026-106302 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging s... |
| CVE-2026-106301 | HIGH | 8.1 | 0.2% | Oct 6, 2026 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromise... |
| CVE-2026-106300 | MEDIUM | 4.7 | 0.1% | Oct 6, 2026 | Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the... |
| CVE-2026-106299 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromi... |
| CVE-2026-106298 | CRITICAL | 9.6 | — | Oct 6, 2026 | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially... |
| CVE-2026-106297 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web or... |
| CVE-2026-106296 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveragi... |
| CVE-2026-106295 | MEDIUM | 4.2 | — | Oct 6, 2026 | Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had c... |
| CVE-2026-106294 | CRITICAL | 9.1 | 0.3% | Oct 6, 2026 | Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass s... |
| CVE-2026-106293 | HIGH | 8.3 | — | Oct 6, 2026 | Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the render... |
| CVE-2026-106292 | HIGH | 8.3 | — | Oct 6, 2026 | Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the rende... |
| CVE-2026-106291 | HIGH | 8.8 | — | Oct 6, 2026 | Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitra... |
| CVE-2026-106290 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had co... |
| CVE-2026-106289 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin po... |
| CVE-2026-106288 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social eng... |
| CVE-2026-106287 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy v... |
| CVE-2026-106286 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy... |
| CVE-2026-106285 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging soci... |
| CVE-2026-106284 | MEDIUM | 4.7 | 0.2% | Oct 6, 2026 | Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had c... |
| CVE-2026-106283 | HIGH | 8.8 | — | Oct 6, 2026 | Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer... |
| CVE-2026-106282 | MEDIUM | 5.4 | — | Oct 6, 2026 | UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements vi... |