Vulnerability intelligence platform

Know your exposure.
Stay ahead of threats.

Threat intelligence, made actionable Browse the latest NVD vulnerability records, narrow them by technology and severity, and subscribe to the categories that matter.

56,981CVEs in selected period
6,671Critical
23,374High
19,955Medium

Explore vulnerabilities

2,975 matching records · 2026-11-03 03:30 UTC
Reset filters
CVE-2026-106406MEDIUM · 5.4
Published 2026-10-06 19:18:10 UTC · macOS / Apple

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106397MEDIUM · 6.1
Published 2026-10-06 19:18:09 UTC · macOS / Apple

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106387HIGH · 8.8
Published 2026-10-06 19:18:07 UTC · macOS / Apple

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106381MEDIUM · 6.5
Published 2026-10-06 19:18:07 UTC · macOS / Apple

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106378HIGH · 8.3
Published 2026-10-06 19:18:06 UTC · macOS / Apple

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106361MEDIUM · 6.5
Published 2026-10-06 19:18:05 UTC · macOS / Apple

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-106353MEDIUM · 6.5
Published 2026-10-06 19:18:04 UTC · macOS / Apple

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: Low)

CVE-2026-106351MEDIUM · 5.3
Published 2026-10-06 19:18:03 UTC · macOS / Apple

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106323CRITICAL · 9.6
Published 2026-10-06 19:18:00 UTC · macOS / Apple

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106316MEDIUM · 5.4
Published 2026-10-06 19:17:59 UTC · macOS / Apple

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

CVE-2026-106309HIGH · 8.8
Published 2026-10-06 19:17:59 UTC · macOS / Apple

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106298CRITICAL · 9.6
Published 2026-10-06 19:17:57 UTC · macOS / Apple

Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106296MEDIUM · 5.4
Published 2026-10-06 19:17:57 UTC · macOS / Apple

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106294CRITICAL · 9.1
Published 2026-10-06 19:17:57 UTC · macOS / Apple

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

CVE-2026-106279HIGH · 7.4
Published 2026-10-06 19:17:55 UTC · macOS / Apple

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

CVE-2026-106274HIGH · 8.8
Published 2026-10-06 19:17:55 UTC · macOS / Apple

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106251MEDIUM · 5.4
Published 2026-10-06 19:17:52 UTC · macOS / Apple

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)

CVE-2026-106231MEDIUM · 4.7
Published 2026-10-06 19:17:49 UTC · macOS / Apple

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106209MEDIUM · 5.4
Published 2026-10-06 19:17:47 UTC · macOS / Apple

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106206MEDIUM · 5.9
Published 2026-10-06 19:17:46 UTC · macOS / Apple

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

CVE-2026-106203HIGH · 8.8
Published 2026-10-06 19:17:46 UTC · macOS / Apple

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106196HIGH · 7.6
Published 2026-10-06 19:17:45 UTC · macOS / Apple

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-106195CRITICAL · 9.1
Published 2026-10-06 19:17:45 UTC · macOS / Apple

Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

CVE-2026-106192MEDIUM · 4.6
Published 2026-10-06 19:17:45 UTC · macOS / Apple

Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severity: Low)

CVE-2026-106189HIGH · 7.3
Published 2026-10-06 19:17:44 UTC · macOS / Apple

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)