CVE-2026-106491 - Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugi

CVE-2026-106490 - Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin

CVE-2026-106489 - Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin

CVE-2026-106488 - Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugi

CVE-2026-106487 - Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plug

CVE-2026-106486 - Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-

CVE-2026-106463 - Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin

CVE-2026-106462 - Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-co

CVE-2026-106461 - Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin

CVE-2026-106460 - Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, th

CVE-2026-106459 - Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstag

CVE-2026-106458 - Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backsta

CVE-2026-106457 - Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstag

CVE-2026-106456 - Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backsta

CVE-2026-106455 - Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5,

CVE-2026-106062 - A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a cra

CVE-2026-106032 - Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Am

CVE-2026-105812 - Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore St

CVE-2026-105811 - Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sam

CVE-2026-104046 - A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authenticat

CVE-2026-104045 - A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race co

CVE-2026-101258 - A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it c

CVE-2026-96589 - When a private repository is transferred to a user who lacks access, Gitea grants that recipient tem

CVE-2026-96580 - Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size

CVE-2026-96404 - When Gitea's web installer is reachable against a database that already contains users, such as afte

CVE-2026-96400 - With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gite

CVE-2026-96399 - A repository's external issue tracker regular expression containing alternating capture groups could

CVE-2026-95112 - When processing issue and comment bodies, Gitea scanned the entire preceding text for action keyword

CVE-2026-95106 - Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consisten

CVE-2026-94205 - Gitea Actions decided whether a fork pull request run needed approval based on the user who triggere

CVE-2026-94114 - Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their s

CVE-2026-89430 - Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only

CVE-2026-79960 - When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher,

CVE-2026-79818 - A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remot

CVE-2026-79817 - A sensitive information disclosure vulnerability exists in the client software of HPE Networking Cle

CVE-2026-79816 - A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unau

CVE-2026-79815 - A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an au

CVE-2026-79814 - An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow mali

CVE-2026-79813 - A local privilege escalation vulnerability exists in the ClearPass client software. Successful explo

CVE-2026-79812 - A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Man

CVE-2026-79811 - A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authentica

CVE-2026-79810 - Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Po

CVE-2026-79809 - An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manage

CVE-2026-79808 - A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful

CVE-2026-79807 - A missing integrity verification vulnerability in the Windows client software for ClearPass Policy M

CVE-2026-79806 - A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow

CVE-2026-79805 - An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploit

CVE-2026-79803 - A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploita

CVE-2026-79802 - A command injection vulnerability exists in the client software of ClearPass Policy Manager. Success

CVE-2026-79801 - A missing integrity verification vulnerability in the client agent software of HPE Networking ClearP

CVE-2026-79800 - An authenticated path traversal vulnerability exists in the command line interface of ClearPass Poli

CVE-2026-79799 - A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an una

CVE-2026-79798 - SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager coul

CVE-2026-79797 - An improper access control vulnerability exists in the Android client application for HPE Networking

CVE-2026-79796 - Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that coul

CVE-2026-79794 - A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager coul

CVE-2026-76754 - A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated

CVE-2026-76753 - A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Ma

CVE-2026-76752 - Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Ne

CVE-2026-76751 - A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manag

CVE-2026-76750 - Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking Clear

CVE-2026-76749 - A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allo

CVE-2026-76748 - A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow

CVE-2026-76747 - Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation co

CVE-2026-76746 - An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allo

CVE-2026-76745 - Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent a

CVE-2026-76744 - Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation co

CVE-2026-76743 - A vulnerability have been identified in the management interface of AOS-S that could potentially all

CVE-2026-76742 - Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exp

CVE-2026-76741 - Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation co

CVE-2026-76061 - A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mou

CVE-2026-73278 - Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is

CVE-2026-70357 - Gitea validates a repository migration hostname against its network allow and block lists before inv

CVE-2026-106454 - Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and

CVE-2026-106453 - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses g

CVE-2026-106452 - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStr

CVE-2026-106451 - yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.

CVE-2026-106450 - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStr

CVE-2026-106449 - yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStr

CVE-2026-106448 - StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablel

CVE-2026-106447 - StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablel

CVE-2026-106446 - Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.

CVE-2026-106445 - Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.

CVE-2026-106444 - Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.

CVE-2026-106063 - A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with

CVE-2026-105244 - Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net.

CVE-2026-105243 - Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were tr

CVE-2026-105242 - Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of

CVE-2026-105241 - Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net.

CVE-2026-105240 - Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender

CVE-2026-105239 - Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apach

CVE-2026-105111 - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i

CVE-2026-104636 - Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated

CVE-2026-104632 - Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until

CVE-2026-104626 - A user who can open a fork pull request can place workflow content with a shared run-level concurren

CVE-2026-104048 - A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Bas

CVE-2026-104047 - A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly

CVE-2026-103670 - When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were

CVE-2026-103667 - Gitea's container registry served blob downloads with a `Content-Type` taken from the media type dec

CVE-2026-103504 - Changing an organization team's permission through the API with only the `permission` field did not

CVE-2026-103059 - When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key wa

CVE-2026-103009 - Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information

CVE-2026-103008 - Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially craf

CVE-2026-103007 - Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated

CVE-2026-103006 - Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially craf

CVE-2026-103005 - Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service

CVE-2026-102413 - Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially craft

CVE-2026-102412 - Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessi

CVE-2026-102411 - Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial o

CVE-2026-102410 - Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functiona

CVE-2026-102409 - Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privilege

CVE-2026-102408 - Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service

CVE-2026-102407 - Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification

CVE-2026-102406 - Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data

CVE-2026-102404 - Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exces

CVE-2026-102169 - On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless clie

CVE-2026-102168 - On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless clie

CVE-2026-102167 - On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's w

CVE-2026-102165 - On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the captu

CVE-2026-102164 - On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configura

CVE-2026-102163 - On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthe

CVE-2026-102162 - On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at le

CVE-2026-102161 - An unauthenticated attacker located on an adjacent private network (or any attacker routed through a

CVE-2026-102160 - An operating system (OS) command injection vulnerability in CloudVision CUE backup management may al

CVE-2026-102159 - An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access

CVE-2026-102158 - Improper validation of selected CloudVision CUE application programming interface (API) request para

CVE-2026-102157 - An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface

CVE-2026-102156 - Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may all

CVE-2026-102155 - An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application all

CVE-2026-101158 - A missing input validation vulnerability in the Fileserver upload API allows an authenticated attack

CVE-2026-101157 - A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacen

CVE-2026-101156 - A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege adminis

CVE-2026-101155 - An authenticated remote attacker with specific permissions can read or write files on the platform f

CVE-2026-101154 - An authenticated remote attacker with specific permissions can read or write files on the platform f

CVE-2026-101153 - On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vul

CVE-2026-101152 - Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated

CVE-2026-101151 - Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to c

CVE-2026-101150 - Insufficient validation of OIDC bearer token configuration could allow a user with specific high pri

CVE-2026-101149 - Insufficient validation of OIDC SSO provider configuration could allow a user with specific high pri

CVE-2026-101029 - Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that re

CVE-2026-101027 - When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted

CVE-2026-9226 - Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earli

CVE-2026-96890 - A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that a

CVE-2026-86362 - Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A

CVE-2026-86361 - Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Criti

CVE-2026-86360 - Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Re

CVE-2026-83550 - A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints

CVE-2026-82162 - Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed En

CVE-2026-71168 - Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Re

CVE-2026-70414 - Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password

CVE-2026-63697 - Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerabi

CVE-2026-56952 - In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to

CVE-2026-56936 - In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missin

CVE-2026-56906 - In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could le

CVE-2026-55330 - In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a

CVE-2026-55307 - In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic

CVE-2026-106513 - MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core

CVE-2026-106512 - The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Dispos

CVE-2026-106511 - MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of the

CVE-2026-106443 - WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in we

CVE-2026-106442 - Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.

CVE-2026-106441 - Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9,

CVE-2026-106440 - Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.

CVE-2026-106439 - Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.

CVE-2026-106427 - Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106426 - Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potenti

CVE-2026-106425 - Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106424 - Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had

CVE-2026-106423 - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute

CVE-2026-106422 - Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to

CVE-2026-106421 - Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute a

CVE-2026-106420 - Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote

CVE-2026-106419 - Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106418 - Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker l

CVE-2026-106417 - Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to poten

CVE-2026-106416 - Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker lever

CVE-2026-106415 - Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to

CVE-2026-106414 - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remo

CVE-2026-106413 - Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had

CVE-2026-106412 - Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker w

CVE-2026-106411 - Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execut

CVE-2026-106410 - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attack

CVE-2026-106409 - Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 a

CVE-2026-106408 - Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a r

CVE-2026-106407 - Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote att

CVE-2026-106406 - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote a

CVE-2026-106405 - Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local a

CVE-2026-106404 - Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106403 - Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote at

CVE-2026-106402 - Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106401 - Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to po

CVE-2026-106400 - Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote atta

CVE-2026-106399 - Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveragi

CVE-2026-106398 - Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker t

CVE-2026-106397 - Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote

CVE-2026-106396 - Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a

CVE-2026-106395 - Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remot

CVE-2026-106394 - Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leverag

CVE-2026-106393 - Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had

CVE-2026-106392 - Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to po

CVE-2026-106391 - Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a

CVE-2026-106390 - Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.

CVE-2026-106389 - Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker lev

CVE-2026-106388 - Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106387 - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote a

CVE-2026-106386 - Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106385 - Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker lever

CVE-2026-106384 - Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote atta

CVE-2026-106383 - Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute

CVE-2026-106382 - Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ex

CVE-2026-106381 - Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a rem

CVE-2026-106380 - UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leverag

CVE-2026-106379 - Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to

CVE-2026-106378 - Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote at

CVE-2026-106377 - Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had co

CVE-2026-106376 - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remo

CVE-2026-106375 - Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to pote

CVE-2026-106374 - Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar

CVE-2026-106373 - Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106372 - Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to p

CVE-2026-106371 - Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.

CVE-2026-106370 - Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote

CVE-2026-106369 - Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106368 - UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote at

CVE-2026-106367 - Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a loca

CVE-2026-106366 - Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a rem

CVE-2026-106365 - Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106364 - Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106363 - Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106362 - Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106361 - Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8

CVE-2026-106360 - Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ob

CVE-2026-106359 - Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a r

CVE-2026-106358 - Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ex

CVE-2026-106357 - Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execut

CVE-2026-106356 - Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging soc

CVE-2026-106355 - Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remot

CVE-2026-106354 - Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote at

CVE-2026-106353 - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remo

CVE-2026-106352 - Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106351 - Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a r

CVE-2026-106350 - Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker

CVE-2026-106349 - Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute ar

CVE-2026-106348 - Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to l

CVE-2026-106347 - Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute

CVE-2026-106346 - Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attac

CVE-2026-106345 - Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacke

CVE-2026-106344 - Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attack

CVE-2026-106343 - Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allow

CVE-2026-106342 - Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to ob