Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121136 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-28853 | high | 7.8 | No | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate pri... | 2026-11-03 |
| CVE-2026-121115 | not reported | — | No | Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions... | 2026-11-03 |
| CVE-2026-121111 | not reported | — | No | Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a... | 2026-11-03 |
| CVE-2026-121109 | not reported | — | No | Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin pol... | 2026-11-03 |
| CVE-2026-121103 | not reported | — | No | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a cr... | 2026-11-03 |
| CVE-2026-121101 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121096 | not reported | — | No | Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium secu... | 2026-11-03 |
| CVE-2026-121095 | not reported | — | No | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c... | 2026-11-03 |
| CVE-2026-121093 | not reported | — | No | Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the sand... | 2026-11-03 |
| CVE-2026-121085 | not reported | — | No | Incorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into... | 2026-11-03 |
| CVE-2026-121075 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121066 | not reported | — | No | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to byp... | 2026-11-03 |
| CVE-2026-121063 | not reported | — | No | Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer p... | 2026-11-03 |
| CVE-2026-121062 | not reported | — | No | Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-121055 | not reported | — | No | Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a... | 2026-11-03 |
| CVE-2026-121051 | not reported | — | No | UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafte... | 2026-11-03 |
| CVE-2026-121046 | not reported | — | No | Incorrect authorization in WebAppInstalls in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to... | 2026-11-03 |
| CVE-2026-121042 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system acce... | 2026-11-03 |
| CVE-2026-121040 | not reported | — | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t... | 2026-11-03 |