Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121204 | high | 8.8 | No | Incomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted H... | 2026-11-04 |
| CVE-2026-121198 | high | 8.8 | No | Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origi... | 2026-11-04 |
| CVE-2026-121195 | high | 8.8 | No | Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a... | 2026-11-04 |
| CVE-2026-91537 | high | 7.8 | No | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily e... | 2026-11-04 |
| CVE-2026-121186 | medium | 5.4 | No | UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering... | 2026-11-04 |
| CVE-2026-121177 | medium | 5.4 | No | UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a craf... | 2026-11-04 |
| CVE-2026-121174 | high | 8.8 | No | Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a... | 2026-11-04 |
| CVE-2026-121172 | medium | 5.4 | No | Incorrect authorization in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTM... | 2026-11-04 |
| CVE-2026-121171 | high | 8.8 | No | Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web or... | 2026-11-04 |
| CVE-2026-121170 | high | 8.8 | No | Improper resource control in WebCodecs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a c... | 2026-11-04 |
| CVE-2026-121165 | medium | 5.4 | No | UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering... | 2026-11-04 |
| CVE-2026-121162 | medium | 5.4 | No | UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engi... | 2026-11-04 |
| CVE-2026-121138 | medium | 6.5 | No | Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted H... | 2026-11-04 |
| CVE-2026-121135 | high | 8.8 | No | Security issue in Platform in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML... | 2026-11-04 |
| CVE-2026-121134 | high | 8.8 | No | Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craf... | 2026-11-04 |
| CVE-2026-121122 | medium | 5.4 | No | UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-11-04 |
| CVE-2026-121121 | medium | 5.4 | No | UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML p... | 2026-11-04 |
| CVE-2026-121120 | high | 8.8 | No | Improper input validation in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr... | 2026-11-04 |
| CVE-2026-121110 | medium | 5.4 | No | UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a... | 2026-11-04 |
| CVE-2026-121108 | high | 8.8 | No | Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy... | 2026-11-04 |