Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121199 | medium | 5.5 | No | Missing authorization in Chromoting in Google Chrome on on Mac prior to 157.0.8103.38 allowed a local attacker to obtain sensitive informati... | 2026-11-04 |
| CVE-2026-121194 | medium | 5.3 | No | Missing authorization in SiteIsolation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr... | 2026-11-04 |
| CVE-2026-121187 | medium | 5.3 | No | Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a craf... | 2026-11-04 |
| CVE-2026-121158 | medium | 6.5 | No | Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HT... | 2026-11-04 |
| CVE-2026-121130 | medium | 5.3 | No | Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a craf... | 2026-11-04 |
| CVE-2026-121125 | medium | 5.3 | No | Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process... | 2026-11-04 |
| CVE-2026-121116 | medium | 5.3 | No | Missing authorization in WebView in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the ren... | 2026-11-04 |
| CVE-2026-121113 | high | 8.8 | No | Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-121106 | medium | 6.5 | No | Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information vi... | 2026-11-04 |
| CVE-2026-121099 | medium | 6.5 | No | Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a cr... | 2026-11-04 |
| CVE-2026-121091 | medium | 5.3 | No | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer pr... | 2026-11-04 |
| CVE-2026-121081 | medium | 5.9 | No | UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain... | 2026-11-04 |
| CVE-2026-119746 | medium | 5.9 | No | ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a login lockout bypass in the integrated module web page. The account l... | 2026-11-04 |
| CVE-2026-119745 | medium | 4.3 | No | Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated user, including Subsc... | 2026-11-04 |
| CVE-2026-118516 | not reported | — | No | The Symfony Routing components CompiledUrlMatcher and UrlMatcher interpret the host and path information differently, allowing path-based au... | 2026-11-04 |
| CVE-2026-121041 | medium | 6.5 | No | Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a craft... | 2026-11-04 |
| CVE-2026-121039 | medium | 5.3 | No | Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information v... | 2026-11-04 |
| CVE-2026-118513 | not reported | — | No | Authentication bypass by spoofing in X509Authenticator and X509AuthenticationListener of Symfony versions prior to 5.4.56, 6.x prior to 6.4.... | 2026-11-04 |
| CVE-2026-117927 | medium | 6.3 | No | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, an... | 2026-11-04 |
| CVE-2026-117926 | high | 8.1 | No | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thun... | 2026-11-04 |