Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106242 | medium | 6.5 | No | Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to... | 2026-10-08 |
| CVE-2026-106201 | high | 8.8 | No | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-08 |
| CVE-2026-106202 | medium | 4.7 | No | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the s... | 2026-10-08 |
| CVE-2026-106203 | high | 8.8 | No | Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to... | 2026-10-08 |
| CVE-2026-106204 | high | 8.8 | No | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-08 |
| CVE-2026-106205 | high | 8.1 | No | Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the r... | 2026-10-08 |
| CVE-2026-106206 | medium | 5.9 | No | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informat... | 2026-10-08 |
| CVE-2026-106207 | high | 8.8 | No | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-08 |
| CVE-2025-55081 | critical | 9.1 | No | In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length veri... | 2026-10-08 |
| CVE-2025-11736 | critical | 9.8 | No | A flaw has been found in itsourcecode Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /index... | 2026-10-08 |
| CVE-2025-9064 | critical | 9.1 | No | A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on the same network as th... | 2026-10-08 |
| CVE-2025-9063 | critical | 9.8 | No | An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exploitation of this vul... | 2026-10-08 |
| CVE-2025-7328 | critical | 9.8 | No | Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks o... | 2026-10-08 |
| CVE-2025-11717 | critical | 9.1 | No | When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen wa... | 2026-10-08 |
| CVE-2025-27258 | critical | 9.8 | No | Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege... | 2026-10-08 |
| CVE-2025-11665 | critical | 9.8 | No | A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of the component Firmw... | 2026-10-08 |
| CVE-2025-11664 | critical | 9.8 | No | A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown funct... | 2026-10-08 |
| CVE-2025-11662 | critical | 9.8 | No | A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking... | 2026-10-08 |
| CVE-2025-11661 | critical | 9.8 | No | A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an un... | 2026-10-08 |
| CVE-2025-11660 | critical | 9.8 | No | A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by t... | 2026-10-08 |