Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87576 | low | 3.4 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the render... | 2026-09-09 |
| CVE-2026-87635 | medium | 5.4 | No | UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML p... | 2026-09-09 |
| CVE-2026-87655 | medium | 5.4 | No | Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elemen... | 2026-09-09 |
| CVE-2026-87657 | low | 3.1 | No | Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memo... | 2026-09-09 |
| CVE-2026-87550 | medium | 4.3 | No | Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web o... | 2026-09-09 |
| CVE-2026-87545 | medium | 6.5 | No | Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to leak... | 2026-09-09 |
| CVE-2026-87555 | medium | 4.7 | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the san... | 2026-09-09 |
| CVE-2026-87559 | medium | 4.2 | No | UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI eleme... | 2026-09-09 |
| CVE-2026-87598 | medium | 4.3 | No | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a... | 2026-09-09 |
| CVE-2026-87602 | medium | 4.7 | No | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outsi... | 2026-09-09 |
| CVE-2026-87614 | low | 3.1 | No | Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer... | 2026-09-09 |
| CVE-2026-87619 | medium | 4.3 | No | Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted... | 2026-09-09 |
| CVE-2026-87622 | medium | 4.3 | No | Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted H... | 2026-09-09 |
| CVE-2026-87632 | medium | 4.3 | No | Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a cra... | 2026-09-09 |
| CVE-2026-87562 | medium | 4.3 | No | Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially s... | 2026-09-09 |
| CVE-2026-87568 | medium | 4.3 | No | Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer pro... | 2026-09-09 |
| CVE-2026-87567 | medium | 4.3 | No | UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spo... | 2026-09-09 |
| CVE-2026-87564 | medium | 4.3 | No | Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML... | 2026-09-09 |
| CVE-2026-85506 | critical | 9.8 | No | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-... | 2026-09-09 |
| CVE-2026-79617 | high | 7.1 | No | Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightD... | 2026-09-09 |