Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-118309 | critical | 9.6 | No | Incorrect reference resolution in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker leveraging social engin... | 2026-11-03 |
| CVE-2026-118308 | critical | 9.6 | No | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-11-03 |
| CVE-2026-118307 | high | 8.8 | No | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-11-03 |
| CVE-2026-118306 | critical | 9.6 | No | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outside the sandbox... | 2026-11-03 |
| CVE-2026-118305 | critical | 9.6 | No | Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-11-03 |
| CVE-2026-118304 | high | 8.8 | No | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-11-03 |
| CVE-2026-115541 | not reported | — | No | HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the friendship confirmation dialog. An authenticated... | 2026-11-03 |
| CVE-2026-115779 | not reported | — | No | Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applications. From @effect/pl... | 2026-11-03 |
| CVE-2026-113949 | high | 8.8 | No | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 2... | 2026-11-03 |
| CVE-2026-113344 | high | 8.8 | No | Improper state validation in Performance in Google Chrome prior to 156.0.8078.47 allowed a local attacker to read memory via a local program... | 2026-11-03 |
| CVE-2026-113343 | high | 8.8 | No | Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces... | 2026-11-03 |
| CVE-2026-113342 | critical | 9.6 | No | Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web... | 2026-11-03 |
| CVE-2026-113341 | medium | 6.5 | No | Use after free in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the... | 2026-11-03 |
| CVE-2026-113340 | medium | 6.5 | No | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the s... | 2026-11-03 |
| CVE-2026-113339 | high | 8.8 | No | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san... | 2026-11-03 |
| CVE-2026-113337 | high | 8.8 | No | Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the... | 2026-11-03 |
| CVE-2026-113336 | critical | 9.6 | No | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox... | 2026-11-03 |
| CVE-2026-113335 | high | 8.8 | No | Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web o... | 2026-11-03 |
| CVE-2026-113334 | high | 8.8 | No | Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside t... | 2026-11-03 |
| CVE-2026-113333 | medium | 6.5 | No | Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass syste... | 2026-11-03 |