Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

UnknownCVE-2026-20705 is listed by GCP-2026-053.CVE-2026-20705 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.1%Oct 14, 2026
UnknownPublished: 2026-09-28 Description Description Severity Notes An Incorrect Authorization vulnerability was discovered in the task configuration in Application Integrati…CVE-2026-19759 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.2%Oct 14, 2026
UnknownPublished: 2026-07-22 Description Description Severity Notes A reflected Cross-Site Scripting (XSS) vulnerability was discovered in Google Cloud Looker.CVE-2026-15810 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.5%Oct 14, 2026
UnknownPublished: 2026-09-16 Description Description Severity Notes An Improper Privilege Management vulnerability in Google Security Operations SOAR was patched with version…CVE-2026-15587 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.2%Oct 14, 2026
UnknownPublished: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Ente…CVE-2026-14934 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.4%Oct 14, 2026
UnknownPublished: 2026-08-26 Description Description Severity Notes An Improper Input Validation vulnerability was discovered in the JDBC driver in BigQuery Data Transfer Ser…CVE-2026-12717 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.5%Oct 14, 2026
UnknownCVE-2025-35973 is listed by GCP-2026-053.CVE-2025-35973 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.1%Oct 14, 2026
UnknownCVE-2025-31938 is listed by GCP-2026-053.CVE-2025-31938 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.1%Oct 14, 2026
UnknownCVE-2025-31356 is listed by GCP-2026-053.CVE-2025-31356 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.1%Oct 14, 2026
UnknownPublished: 2026-06-25 Description Description Severity Notes A vulnerability was detected in Application Integration's JavaScript task, which was using the Rhino JavaS…CVE-2025-0982 · Google · Google Cloud · CVE.org · FIRST EPSS · Google Cloud Security Bulletins · Google Cloud, GoogleEPSS 0.3%Oct 14, 2026
UnknownExtended Stable Update for DesktopCVE-2026-106184 · Google · Chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110172 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110171 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
Medium4.3Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.CVE-2026-110170 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.2%Oct 13, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110169 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110168 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110167 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110166 · google · chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
Critical9.6Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…CVE-2026-110165 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110164 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110163 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110162 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
Critical9.6Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic.CVE-2026-110161 · Google · Chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toCVE-2026-110160 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.2%Oct 13, 2026
Critical9.6Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.CVE-2026-110159 · google · chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026