Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-102111 | medium | 4.9 | No | Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set t... | 2026-10-07 |
| CVE-2026-102107 | medium | 4.6 | No | Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appea... | 2026-10-07 |
| CVE-2026-106260 | medium | 4.3 | No | Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak... | 2026-10-07 |
| CVE-2026-106262 | medium | 4.2 | No | Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proces... | 2026-10-07 |
| CVE-2026-106238 | high | 8.3 | No | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent... | 2026-10-07 |
| CVE-2026-106264 | medium | 5.4 | No | Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to... | 2026-10-07 |
| CVE-2026-106239 | critical | 9.6 | No | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c... | 2026-10-07 |
| CVE-2026-106265 | medium | 5.4 | No | UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI ele... | 2026-10-07 |
| CVE-2026-106240 | high | 8.8 | No | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-07 |
| CVE-2026-106241 | critical | 9.6 | No | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer... | 2026-10-07 |
| CVE-2026-106268 | high | 8.8 | No | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-10-07 |
| CVE-2026-106269 | high | 8.8 | No | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-07 |
| CVE-2026-106243 | medium | 5.3 | No | Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via cr... | 2026-10-07 |
| CVE-2026-106270 | medium | 5.4 | No | Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a craft... | 2026-10-07 |
| CVE-2026-106276 | medium | 5.4 | No | UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-10-07 |
| CVE-2026-106277 | medium | 4.3 | No | Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML... | 2026-10-07 |
| CVE-2026-106330 | medium | 4.3 | No | Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML... | 2026-10-07 |
| CVE-2026-106332 | medium | 4.3 | No | Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted... | 2026-10-07 |
| CVE-2026-106335 | high | 8.8 | No | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-07 |
| CVE-2026-106336 | medium | 4.3 | No | Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-10-07 |