Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121126 | critical | 9.6 | No | Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the s... | 2026-11-04 |
| CVE-2026-121181 | high | 8.8 | No | Use after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-121185 | critical | 9.6 | No | Use after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execut... | 2026-11-04 |
| CVE-2026-121188 | high | 8.8 | No | Use after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the san... | 2026-11-04 |
| CVE-2026-121203 | high | 8.8 | No | Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-11-04 |
| CVE-2026-121131 | critical | 9.6 | No | Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrar... | 2026-11-04 |
| CVE-2026-121140 | high | 8.3 | No | Out of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t... | 2026-11-04 |
| CVE-2026-121148 | critical | 9.6 | No | Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via... | 2026-11-04 |
| CVE-2026-121156 | critical | 9.6 | No | Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the... | 2026-11-04 |
| CVE-2026-121166 | high | 8.8 | No | Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-121178 | high | 8.3 | No | Use after free in Aura in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potenti... | 2026-11-04 |
| CVE-2026-121179 | high | 8.8 | No | Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-121180 | high | 8.8 | No | Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-87393 | medium | 6.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-87394 | high | 8.2 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-87395 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-87396 | medium | 6.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-87397 | high | 8.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-87398 | high | 7.5 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-83396 | critical | 9.8 | No | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versio... | 2026-11-04 |