CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)
An information leak vulnerability in Google Chrome prior to 155.0.8059.39 allows a remote attacker to leak sensitive information via a crafted HTML page. Chromium severity: Medium.
Improper input validation in Mobile in Google Chrome on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
A race condition in the Browser component in Google Chrome prior to 155.0.8059.39 allows a remote attacker who compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium severity: Low.
A race condition in Core in Google Chrome on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. This is a high severity issue.
A use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This is a high severity issue.
A missing authorization vulnerability in the Permissions component in Google Chrome prior to 155.0.8059.39 allows a remote attacker who compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium severity: Medium.
Incorrect reference resolution in WebAppInstalls in Google Chrome on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. This is a medium severity issue.
A protection mechanism failure in the Mobile component in Google Chrome on iOS prior to 155.0.8059.39 allows a remote attacker to bypass web origin policy via a crafted HTML page. Chromium severity: Medium.
An incorrect authorization vulnerability in the GetUserMedia component in Google Chrome prior to 155.0.8059.39 allows a remote attacker who compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium severity: Medium.
A missing authorization vulnerability in the Mobile component in Google Chrome on iOS prior to 155.0.8059.39 allows a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium severity: Medium.
A race condition in CustomTabs in Google Chrome on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. This is a medium severity vulnerability.
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. This is a medium severity vulnerability.
Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. This is a medium severity vulnerability.
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. This is a medium severity vulnerability.
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Clickjacking in Messages in Google Chrome on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. This is a medium severity vulnerability.
Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. This is a low severity vulnerability.
Incorrect authorization in the Media component in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Incorrect authorization in Mobile in Google Chrome on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. This is a medium severity vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS