Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-106252 | high | 8.8 | No | Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside... | 2026-10-07 |
| CVE-2026-106251 | medium | 5.4 | No | UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering... | 2026-10-07 |
| CVE-2026-106257 | high | 8.8 | No | Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-07 |
| CVE-2026-106415 | medium | 4.3 | No | Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted... | 2026-10-07 |
| CVE-2026-106416 | medium | 5.4 | No | Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI ele... | 2026-10-07 |
| CVE-2026-106417 | critical | 9.6 | No | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside th... | 2026-10-07 |
| CVE-2026-106419 | critical | 9.6 | No | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside th... | 2026-10-07 |
| CVE-2026-106420 | medium | 5.4 | No | Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering t... | 2026-10-07 |
| CVE-2026-106421 | high | 8.8 | No | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c... | 2026-10-07 |
| CVE-2025-54322 | critical | 9.8 | No | Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The... | 2026-10-07 |
| CVE-2025-66203 | critical | 9.1 | No | StreamVault is a video download integration solution. Prior to version 251126, a Remote Code Execution (RCE) vulnerability exists in the str... | 2026-10-07 |
| CVE-2025-15099 | critical | 9.8 | No | A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps/sim/lib/auth/intern... | 2026-10-07 |
| CVE-2025-15092 | critical | 9.8 | No | A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Suc... | 2026-10-07 |
| CVE-2025-15091 | critical | 9.8 | No | A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUr... | 2026-10-07 |
| CVE-2025-15090 | critical | 9.8 | No | A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfig... | 2026-10-07 |
| CVE-2025-15089 | critical | 9.8 | No | A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The man... | 2026-10-07 |
| CVE-2025-59683 | critical | 9.1 | No | Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office... | 2026-10-07 |
| CVE-2025-15078 | critical | 9.8 | No | A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_re... | 2026-10-07 |
| CVE-2025-15077 | critical | 9.8 | No | A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the... | 2026-10-07 |
| CVE-2025-15075 | critical | 9.8 | No | A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /s... | 2026-10-07 |