Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121242 | not reported | — | No | Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via... | 2026-11-03 |
| CVE-2026-121240 | not reported | — | No | Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictio... | 2026-11-03 |
| CVE-2026-121237 | not reported | — | No | Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to b... | 2026-11-03 |
| CVE-2026-121231 | not reported | — | No | Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions v... | 2026-11-03 |
| CVE-2026-121227 | not reported | — | No | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-121225 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to by... | 2026-11-03 |
| CVE-2026-121223 | not reported | — | No | Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-11-03 |
| CVE-2026-121220 | not reported | — | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t... | 2026-11-03 |
| CVE-2026-121209 | not reported | — | No | UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page... | 2026-11-03 |
| CVE-2026-121207 | not reported | — | No | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbo... | 2026-11-03 |
| CVE-2026-121197 | not reported | — | No | Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox v... | 2026-11-03 |
| CVE-2026-121196 | not reported | — | No | Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictio... | 2026-11-03 |
| CVE-2026-121193 | not reported | — | No | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions... | 2026-11-03 |
| CVE-2026-121190 | not reported | — | No | UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof... | 2026-11-03 |
| CVE-2026-121175 | not reported | — | No | Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted H... | 2026-11-03 |
| CVE-2026-121173 | not reported | — | No | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c... | 2026-11-03 |
| CVE-2026-121169 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121167 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr... | 2026-11-03 |
| CVE-2026-121164 | not reported | — | No | Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering t... | 2026-11-03 |
| CVE-2026-121160 | not reported | — | No | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafte... | 2026-11-03 |