Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110922 · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.2%Oct 15, 2026
Medium6.5Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…CVE-2026-110916 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Linux, Red HatEPSS 0.2%Oct 15, 2026
High8.8Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110915 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 15, 2026
High8.8Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110914 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 15, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110921 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.2%Oct 15, 2026
High8.8Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110920 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.2%Oct 15, 2026
High8.8Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.CVE-2026-110918 · Red Hat · Red Hat Enterprise Linux · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.2%Oct 15, 2026
High8.8Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.CVE-2026-110917 · Red Hat · Red Hat Enterprise Linux · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.2%Oct 15, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110919 · Red Hat · Red Hat Enterprise Linux · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.2%Oct 15, 2026
High8.8Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110913 · Red Hat · Red Hat Enterprise Linux · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 15, 2026
UnknownSecurity update for webkit2gtk3SUSE-SU-2026:4676-1 · OpenSSF OSV / OSV Scanner · Linux, SUSE Linux Enterprise 15Oct 14, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110172 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110171 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
Medium4.3Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.CVE-2026-110170 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.2%Oct 13, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110169 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110168 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110167 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110166 · google · chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
Critical9.6Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…CVE-2026-110165 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110164 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, GoogleEPSS 0.3%Oct 13, 2026
High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110163 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.CVE-2026-110162 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.3%Oct 13, 2026
Critical9.6Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic.CVE-2026-110161 · Google · Chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026
Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toCVE-2026-110160 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · Chrome, DebianEPSS 0.2%Oct 13, 2026
Critical9.6Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.CVE-2026-110159 · google · chrome · Chrome Releases · CVE.org · FIRST EPSS · Chrome, GoogleEPSS 0.3%Oct 13, 2026