2026 CVEs (page 14)
Page 14 of 659 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-95356 | Critical | 9.6 | 2026-09-29 | Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary… |
CVE-2026-95355 | High | 8.3 | 2026-09-29 | Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to p… |
CVE-2026-95354 | High | 8.3 | 2026-09-29 | Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar… |
CVE-2026-95353 | High | 8.8 | 2026-09-29 | Use after free in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95352 | Medium | 5.4 | 2026-09-29 | Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy… |
CVE-2026-95351 | High | 8.3 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ou… |
CVE-2026-95350 | Critical | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-95349 | Critical | 9.6 | 2026-09-29 | Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sand… |
CVE-2026-95348 | High | 8.3 | 2026-09-29 | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute a… |
CVE-2026-95347 | Critical | 9.6 | 2026-09-29 | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… |
CVE-2026-95346 | Medium | 4.8 | 2026-09-29 | UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted network traffic. (Chromiu… |
CVE-2026-95345 | High | 8.8 | 2026-09-29 | Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-95344 | High | 8.0 | 2026-09-29 | Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a craft… |
CVE-2026-95343 | High | 8.8 | 2026-09-29 | Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95342 | Medium | 4.3 | 2026-09-29 | Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium se… |
CVE-2026-95341 | High | 8.3 | 2026-09-29 | Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-95340 | Medium | 4.3 | 2026-09-29 | Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origi… |
CVE-2026-95339 | Critical | 9.6 | 2026-09-29 | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted H… |
CVE-2026-95338 | High | 8.8 | 2026-09-29 | Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file… |
CVE-2026-95337 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Messages in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially s… |
CVE-2026-95336 | Medium | 6.5 | 2026-09-29 | Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive i… |
CVE-2026-95335 | High | 8.3 | 2026-09-29 | Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra… |
CVE-2026-95334 | High | 8.3 | 2026-09-29 | Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to pote… |
CVE-2026-95333 | High | 8.1 | 2026-09-29 | Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network t… |
CVE-2026-95332 | Medium | 4.7 | 2026-09-29 | Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a… |
CVE-2026-95331 | Critical | 9.6 | 2026-09-29 | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
CVE-2026-95330 | Medium | 6.5 | 2026-09-29 | Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTM… |
CVE-2026-95329 | Critical | 9.6 | 2026-09-29 | Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the… |
CVE-2026-95328 | Medium | 6.5 | 2026-09-29 | Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive info… |
CVE-2026-95327 | Medium | 6.5 | 2026-09-29 | Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromi… |
CVE-2026-95326 | | 2026-09-29 | Incomplete cleanup in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restric… | |
CVE-2026-95325 | Critical | 9.6 | 2026-09-29 | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-95324 | Low | 3.4 | 2026-09-29 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside… |
CVE-2026-95323 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof address bar… |
CVE-2026-95322 | High | 8.3 | 2026-09-29 | Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute… |
CVE-2026-95321 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page… |
CVE-2026-95320 | Medium | 5.4 | 2026-09-29 | Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address… |
CVE-2026-95319 | High | 8.3 | 2026-09-29 | Use after free in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute ar… |
CVE-2026-95318 | Critical | 9.6 | 2026-09-29 | Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craf… |
CVE-2026-95317 | Low | 3.1 | 2026-09-29 | Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin… |
CVE-2026-95316 | Low | 2.9 | 2026-09-29 | Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. (Chromiu… |
CVE-2026-95315 | High | 7.8 | 2026-09-29 | Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Intera… |
CVE-2026-95314 | High | 8.1 | 2026-09-29 | Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system acce… |
CVE-2026-95313 | Critical | 9.6 | 2026-09-29 | Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
CVE-2026-95312 | Low | 3.1 | 2026-09-29 | Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin… |
CVE-2026-95311 | Critical | 9.6 | 2026-09-29 | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitra… |
CVE-2026-95310 | Critical | 9.6 | 2026-09-29 | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p… |
CVE-2026-95309 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chrom… |
CVE-2026-95308 | Low | 3.4 | 2026-09-29 | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memo… |
CVE-2026-95307 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via… |
CVE-2026-95306 | High | 8.8 | 2026-09-29 | Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-95305 | Medium | 4.8 | 2026-09-29 | UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via cra… |
CVE-2026-95304 | High | 8.8 | 2026-09-29 | Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-95303 | Medium | 6.5 | 2026-09-29 | Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restric… |
CVE-2026-95302 | Low | 2.9 | 2026-09-29 | Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installe… |
CVE-2026-95301 | High | 8.1 | 2026-09-29 | Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site i… |
CVE-2026-95300 | Medium | 4.8 | 2026-09-29 | Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restr… |
CVE-2026-95299 | Critical | 9.6 | 2026-09-29 | Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page… |
CVE-2026-95298 | High | 7.8 | 2026-09-29 | Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Int… |
CVE-2026-95297 | Medium | 6.5 | 2026-09-29 | Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page… |
CVE-2026-95296 | Medium | 4.3 | 2026-09-29 | Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin… |
CVE-2026-95295 | Medium | 4.6 | 2026-09-29 | Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chrom… |
CVE-2026-95294 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a craf… |
CVE-2026-95293 | Medium | 4.7 | 2026-09-29 | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Ch… |
CVE-2026-95292 | Medium | 4.8 | 2026-09-29 | Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via crafted netw… |
CVE-2026-95291 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML… |
CVE-2026-95290 | Medium | 5.4 | 2026-09-29 | Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access… |
CVE-2026-95289 | Medium | 4.3 | 2026-09-29 | Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data v… |
CVE-2026-95288 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chrom… |
CVE-2026-95287 | Medium | 5.4 | 2026-09-29 | Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site i… |
CVE-2026-95286 | High | 8.8 | 2026-09-29 | Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95285 | | 2026-09-29 | Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to by… | |
CVE-2026-95284 | Critical | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-95283 | Critical | 9.6 | 2026-09-29 | Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandb… |
CVE-2026-95282 | High | 8.8 | 2026-09-29 | Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-95281 | Critical | 9.6 | 2026-09-29 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr… |
CVE-2026-95280 | High | 7.5 | 2026-09-29 | Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-95279 | Medium | 5.4 | 2026-09-29 | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. (… |
CVE-2026-95278 | | 2026-09-29 | Missing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system a… | |
CVE-2026-95277 | Critical | 9.6 | 2026-09-29 | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-95276 | High | 8.3 | 2026-09-29 | Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially e… |
CVE-2026-95275 | Medium | 6.5 | 2026-09-29 | Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged p… |
CVE-2026-95274 | High | 8.3 | 2026-09-29 | Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… |
CVE-2026-94954 | High | 8.8 | 2026-09-29 | A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable throu… |
CVE-2026-84842 | High | 8.1 | 2026-09-29 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacke… |
CVE-2026-84440 | High | 7.5 | 2026-09-29 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence… |
CVE-2026-84436 | Critical | 9.1 | 2026-09-29 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user… |
CVE-2026-84422 | High | 7.2 | 2026-09-29 | IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated p… |
CVE-2026-84421 | High | 8.8 | 2026-09-29 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths during ar… |
CVE-2026-84414 | High | 7.8 | 2026-09-29 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-co… |
CVE-2026-12345 | | 2026-09-29 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a… | |
CVE-2026-102811 | High | 7.5 | 2026-09-29 | Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, al… |
CVE-2026-102810 | High | 7.5 | 2026-09-29 | Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitr… |
CVE-2026-102809 | Medium | 6.5 | 2026-09-29 | PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size para… |
CVE-2026-102808 | Medium | 6.5 | 2026-09-29 | PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without val… |
CVE-2026-102807 | Medium | 5.3 | 2026-09-29 | OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tool… |
CVE-2026-102806 | Medium | 6.3 | 2026-09-29 | OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between… |
CVE-2026-102762 | | 2026-09-29 | The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the netw… | |
CVE-2026-102761 | | 2026-09-29 | NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound b… | |
CVE-2026-102760 | | 2026-09-29 | When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP laye… |