Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-106242 — Google Chrome Omnibox Information Disclosure Vulnerability

Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (C…

android chrome chrome edge_chromium | Remote | Information Disclosure
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
9.6 CRITICAL
CVE-2026-106241 — Google Chrome Android Search Authorization Bypass Vulnerability

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandb…

android chrome chrome edge_chromium | Remote | Authorization
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.8 HIGH
CVE-2026-106240 — Google Chrome V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.6 CRITICAL
CVE-2026-106239 — Google Chrome WebGL Integer Overflow

Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium …

android chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.3 HIGH
CVE-2026-106238 — Google Chrome Fonts Race Condition Vulnerability

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a craf…

chrome chrome edge_chromium | Remote | Race Condition
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.6 CRITICAL
CVE-2026-106237 — Google Chrome Permissions Site Isolation Bypass

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

chrome chrome edge_chromium | Remote | Information Disclosure
Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
5.4 MEDIUM
CVE-2026-106236 — Google Chrome Chromoting UI Spoofing Vulnerability

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chr…

chrome chrome windows edge_chromium | Remote | Misconfiguration
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.8 HIGH
CVE-2026-106235 — Google Chrome WebAudio Use-After-Free Vulnerability

Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.6 CRITICAL
CVE-2026-106234 — Google Chrome Network Use-After-Free Vulnerability

Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrom…

chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.3 HIGH
CVE-2026-106233 — Google Chrome Metrics Use-After-Free Vulnerability

Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML p…

chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
5.4 MEDIUM
CVE-2026-106232 — Google Chrome UI Spoofing Vulnerability

UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severi…

chrome chrome edge_chromium | Remote | Cross-Site Scripting
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
4.7 MEDIUM
CVE-2026-106231 — Google Chrome Dawn Uninitialized Memory Exposure

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Hig…

chrome macos chrome edge_chromium | Remote | Information Disclosure
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
5.3 MEDIUM
CVE-2026-106230 — Google Chrome Offline Information Disclosure Vulnerability

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via …

android chrome chrome edge_chromium | Remote | Information Disclosure
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
5.4 MEDIUM
CVE-2026-106229 — Google Chrome FileSystem UI Misrepresentation Vulnerability

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chrom…

chrome chrome edge_chromium | Remote | Misconfiguration
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.3 HIGH
CVE-2026-106228 — Google Chrome Google Lens Confused Deputy Vulnerability

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via…

chrome chrome edge_chromium | Remote | Misconfiguration
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
9.6 CRITICAL
CVE-2026-106227 — Google Chrome Core Use-After-Free Vulnerability

Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

chrome chrome edge_chromium | Remote | Memory Corruption
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
4.2 MEDIUM
CVE-2026-106226 — Google Chromium Compositing Address Bar Spoofing Vulnerability

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chro…

chrome chrome edge_chromium | Remote | Information Disclosure
Oct 06, 2026 Oct 07, 2026
Oct 06, 2026
Oct 07, 2026
8.8 HIGH
CVE-2026-106225 — Google Chrome Autofill Missing Authorization Vulnerability

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium se…

chrome chrome edge_chromium | Remote | Authorization
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
3.1 LOW
CVE-2026-106224 — Google Chrome Google Lens Missing Authorization Vulnerability

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (C…

chrome chrome edge_chromium | Remote | Authorization
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
4.7 MEDIUM
CVE-2026-106223 — Google Chrome GPU Uninitialized Memory Read

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: …

android chrome chrome | Remote | Memory Corruption
Oct 06, 2026 Oct 08, 2026
Oct 06, 2026
Oct 08, 2026
Showing 20 of 16845 Results