Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121190 | not reported | — | No | UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof... | 2026-11-03 |
| CVE-2026-121175 | not reported | — | No | Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted H... | 2026-11-03 |
| CVE-2026-121173 | not reported | — | No | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c... | 2026-11-03 |
| CVE-2026-121169 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121167 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr... | 2026-11-03 |
| CVE-2026-121164 | not reported | — | No | Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering t... | 2026-11-03 |
| CVE-2026-121160 | not reported | — | No | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafte... | 2026-11-03 |
| CVE-2026-121159 | not reported | — | No | Incorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121157 | not reported | — | No | Incorrect authorization in Chromoting in Google Chrome prior to 157.0.8103.38 allowed a local attacker to bypass system access restrictions... | 2026-11-03 |
| CVE-2026-121143 | not reported | — | No | Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-121142 | not reported | — | No | Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121136 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-28853 | high | 7.8 | No | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate pri... | 2026-11-03 |
| CVE-2026-121115 | not reported | — | No | Improper input validation in Shopping in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions... | 2026-11-03 |
| CVE-2026-121111 | not reported | — | No | Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a... | 2026-11-03 |
| CVE-2026-121109 | not reported | — | No | Inadequate encryption strength in SSL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin pol... | 2026-11-03 |
| CVE-2026-121103 | not reported | — | No | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a cr... | 2026-11-03 |
| CVE-2026-121101 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121096 | not reported | — | No | Incomplete cleanup in V8 in Google Chrome prior to 157.0.8103.38 allowed a local attacker to read memory via a local program. (Chromium secu... | 2026-11-03 |
| CVE-2026-121095 | not reported | — | No | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a c... | 2026-11-03 |