By publication date

Exploited and new serious CVEs: October 2026

8,751 records · 22 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 11 of 88

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2026-106234No exploit	Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exegoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106235No exploit	Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106237No exploit	Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTMgoogle · chrome · CWE-200 Pre-auth Info leak	Critical9.6	—	0.2%	Oct 6, 2026
33Monitor	CVE-2026-106238No exploit	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentgoogle · chrome · CWE-362 pre-auth RCE Race condition	High8.3	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106239No exploit	Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cgoogle · chrome · CWE-190 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Oct 6, 2026
35Monitor	CVE-2026-106240No exploit	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.5%	Oct 6, 2026
38Monitor	CVE-2026-106241No exploit	Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineergoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106247No exploit	Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potengoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.3	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106248No exploit	Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vigoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106249No exploit	Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive infogoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106252No exploit	Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code insidegoogle · chrome · CWE-697 pre-auth RCE	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106255No exploit	Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-362 pre-auth RCE Race condition	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106256No exploit	Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering google · chrome · CWE-200 Pre-auth Info leak	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106257No exploit	Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106268No exploit	Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106269No exploit	Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
32Monitor	CVE-2026-106271No exploit	Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-862 Broken access control (IDOR)	High8.1	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106274No exploit	Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engigoogle · chrome · CWE-706 Pre-auth	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106278No exploit	Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrargoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
29Monitor	CVE-2026-106279No exploit	Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised tgoogle · chrome · CWE-706 RCE	High7.4	—	0.0%	Oct 6, 2026
38Monitor	CVE-2026-106281No exploit	Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106283No exploit	Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially egoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106291No exploit	Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106292No exploit	Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potengoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.3	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106293No exploit	Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentgoogle · chrome · CWE-843 pre-auth RCE	High8.3	—	0.3%	Oct 6, 2026
36Monitor	CVE-2026-106294No exploit	Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restricgoogle · chrome · CWE-459 Pre-auth	Critical9.1	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106298No exploit	Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
32Monitor	CVE-2026-106301No exploit	Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-441 Pre-auth	High8.1	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106308No exploit	Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging socialgoogle · chrome · CWE-706 Pre-auth	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106309No exploit	Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informagoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106314No exploit	Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via agoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106315No exploit	Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106318No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106323No exploit	Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social enginegoogle · chrome · CWE-862 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106329No exploit	Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potgoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106334No exploit	Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensigoogle · chrome · CWE-200 Pre-auth Info leak	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106335No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106341No exploit	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106342No exploit	Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a craftedgoogle · chrome · CWE-200 Pre-auth Info leak	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106346No exploit	Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary codgoogle · chrome · CWE-754 pre-auth RCE	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106347No exploit	Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106349No exploit	Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106350No exploit	Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a cgoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106352No exploit	Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtgoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106357No exploit	Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.5%	Oct 6, 2026
38Monitor	CVE-2026-106358No exploit	Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.5%	Oct 6, 2026
33Monitor	CVE-2026-106363No exploit	Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer procegoogle · chrome · CWE-862 Pre-auth Broken access control (IDOR)	High8.3	—	0.2%	Oct 6, 2026
33Monitor	CVE-2026-106367No exploit	Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineeringgoogle · chrome · CWE-862 RCE Broken access control (IDOR)	High8.4	—	0.0%	Oct 6, 2026
35Monitor	CVE-2026-106371No exploit	Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sgoogle · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.8	—	0.2%	Oct 6, 2026
38Monitor	CVE-2026-106372No exploit	Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsidgoogle · chrome · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106373No exploit	Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside thegoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106374No exploit	Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crgoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106375No exploit	Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside tgoogle · chrome · CWE-459 pre-auth RCE	Critical9.6	—	0.4%	Oct 6, 2026
33Monitor	CVE-2026-106377No exploit	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to executgoogle · chrome · CWE-362 pre-auth RCE Race condition	High8.3	—	0.2%	Oct 6, 2026
33Monitor	CVE-2026-106378Proof of concept	Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer google · chrome · CWE-250 pre-auth RCE	High8.3	—	0.4%	Oct 6, 2026
38Monitor	CVE-2026-106382No exploit	Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106383No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106387No exploit	Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering togoogle · chrome · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106393No exploit	Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.3	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106401No exploit	Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsidegoogle · chrome · CWE-787 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
32Monitor	CVE-2026-106403No exploit	Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer google · chrome · CWE-863 Pre-auth Broken access control (IDOR)	High8.1	—	0.2%	Oct 6, 2026
33Monitor	CVE-2026-106409No exploit	Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromgoogle · chrome · CWE-706 pre-auth RCE	High8.3	—	0.2%	Oct 6, 2026
35Monitor	CVE-2026-106411No exploit	Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106412No exploit	Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process google · chrome · CWE-367 pre-auth RCE Race condition	High8.3	—	0.2%	Oct 6, 2026
38Monitor	CVE-2026-106414No exploit	Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeringoogle · chrome · CWE-20 pre-auth RCE	Critical9.6	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106417No exploit	Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside thgoogle · chrome · CWE-190 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
38Monitor	CVE-2026-106419No exploit	Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside thgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106421No exploit	Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cgoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
35Monitor	CVE-2026-106423No exploit	Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via agoogle · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Oct 6, 2026
33Monitor	CVE-2026-106426No exploit	Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the google · chrome · CWE-362 pre-auth RCE Race condition	High8.3	—	0.2%	Oct 6, 2026
34Monitor	CVE-2026-106439No exploit	Hydra: Mutable instantiate policy sets allow target blocklist bypasshydra-ecosystem · hydra · CWE-470 Local privilege escalation	High8.5	—	0.4%	Oct 6, 2026
31Monitor	CVE-2026-106440No exploit	Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodhydra-ecosystem · hydra · CWE-470 Local privilege escalation	High7.8	—	0.2%	Oct 6, 2026
31Monitor	CVE-2026-106441No exploit	Hydra logging configuration permits unsafe callable resolutionhydra-ecosystem · hydra · CWE-94 RCE Local privilege escalation	High7.8	—	0.1%	Oct 6, 2026
31Monitor	CVE-2026-106442No exploit	Hydra instantiate target blacklist bypasses permit code executionhydra-ecosystem · hydra · CWE-184 Deserialization Local privilege escalation	High7.8	—	0.1%	Oct 6, 2026
35Monitor	CVE-2026-106443No exploit	WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCEkozea · weasyprint · CWE-20 RCE	High8.8	—	0.9%	Oct 6, 2026
39Monitor	CVE-2026-106511No exploit	MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract systmultiversx labs s.r.l. · multisig-improved · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.4%	Oct 6, 2026
33Monitor	CVE-2026-106512No exploit	MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSSmisp · sachertortephp · CWE-20 XSS	High8.4	—	0.3%	Oct 6, 2026
39Monitor	CVE-2026-55330No exploit	In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.google · android · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	0.2%	Oct 6, 2026
28Monitor	CVE-2026-56906No exploit	In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition.google · android · CWE-362 Local privilege escalation Race condition	High7.0	—	0.0%	Oct 6, 2026
28Monitor	CVE-2026-63697No exploit	Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability.dell · system update · CWE-295 Weak crypto	High7.2	—	0.2%	Oct 6, 2026
31Monitor	CVE-2026-71168No exploit	Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vudell · system update · CWE-22 Path traversal Local privilege escalation	High7.8	—	0.2%	Oct 6, 2026
39Monitor	CVE-2026-82162No exploit	Dell Command \| Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.dell · command\|configure · CWE-175 Pre-auth	Critical9.8	—	0.3%	Oct 6, 2026
28Monitor	CVE-2026-83550No exploit	Postgres-exporter: net/http/pprof exposed on metrics listenerred hat · multicluster global hub · CWE-489 Pre-auth	High7.1	—	0.2%	Oct 6, 2026
38Monitor	CVE-2026-86360No exploit	Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vudell · system update · CWE-22 pre-auth RCE Path traversal	Critical9.6	—	0.5%	Oct 6, 2026
32Monitor	CVE-2026-86361No exploit	Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.dell · system update · CWE-732 Local privilege escalation	High8.2	—	0.1%	Oct 6, 2026
32Monitor	CVE-2026-86362No exploit	Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.dell · system update · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.2	—	0.1%	Oct 6, 2026
34Monitor	CVE-2026-96890No exploit	Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hostsgithub · enterprise server · CWE-918 RCE SSRF	High8.7	—	0.4%	Oct 6, 2026
30Monitor	CVE-2026-101027No exploit	Gitea migration SSRF through ALLOWED_DOMAINS address check bypassgitea · gitea · CWE-346 SSRF	High7.7	—	0.2%	Oct 6, 2026
30Monitor	CVE-2026-101152No exploit	Security Advisory 0187arista networks · cloudvision portal · CWE-601 Pre-auth Open redirect	High7.6	—	0.3%	Oct 6, 2026
28Monitor	CVE-2026-101153No exploit	Security Advisory 0188arista networks · cloudvision portal · CWE-22 Path traversal	High7.2	—	0.3%	Oct 6, 2026
34Monitor	CVE-2026-101154No exploit	Security Advisory 0189arista networks · cloudvision portal · CWE-22 Path traversal	High8.6	—	0.5%	Oct 6, 2026
34Monitor	CVE-2026-101155No exploit	Security Advisory 0189arista networks · cloudvision portal · CWE-22 Path traversal	High8.6	—	0.5%	Oct 6, 2026
37Monitor	CVE-2026-101157No exploit	Security Advisory 0192arista networks · cloudvision cue · CWE-79 Pre-auth XSS	Critical9.3	—	0.2%	Oct 6, 2026
37Monitor	CVE-2026-101158No exploit	Security Advisory 0185arista networks · cloudvision portal · CWE-79 XSS	Critical9.3	—	0.2%	Oct 6, 2026
28Monitor	CVE-2026-102155No exploit	Security Advisory 0190arista networks · cloudvision cue · CWE-611 XXE	High7.1	—	0.3%	Oct 6, 2026
28Monitor	CVE-2026-102158No exploit	Security Advisory 0190arista networks · cloudvision cue · CWE-74 SQL injection	High7.1	—	0.2%	Oct 6, 2026
37Monitor	CVE-2026-102159No exploit	Security Advisory 0190arista networks · cloudvision cue · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Oct 6, 2026
34Monitor	CVE-2026-102160No exploit	Security Advisory 0190arista networks · cloudvision cue · CWE-78 RCE Command injection	High8.6	—	1.3%	Oct 6, 2026
34Monitor	CVE-2026-102161No exploit	Security Advisory 0190arista networks · cloudvision cue · CWE-290 Pre-auth Auth bypass	High8.7	—	0.2%	Oct 6, 2026
37Monitor	CVE-2026-102162No exploit	Security Advisory 0193arista networks · wi-fi access points · CWE-121 pre-auth RCE Memory safety	Critical9.4	—	0.2%	Oct 6, 2026

CVE-2026-106234
38Monitor
Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially exe
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106235
35Monitor
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106237
38Monitor
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTM
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Info leak
google · chromeOct 6, 2026
CVE-2026-106238
33Monitor
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chromeOct 6, 2026
CVE-2026-106239
38Monitor
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106240
35Monitor
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106241
38Monitor
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineer
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106247
33Monitor
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106248
35Monitor
Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox vi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106249
35Monitor
Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive info
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106252
35Monitor
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106255
35Monitor
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chromeOct 6, 2026
CVE-2026-106256
35Monitor
Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Info leak
google · chromeOct 6, 2026
CVE-2026-106257
35Monitor
Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106268
35Monitor
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106269
35Monitor
Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106271
32Monitor
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106274
35Monitor
Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engi
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chromeOct 6, 2026
CVE-2026-106278
35Monitor
Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrar
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106279
29Monitor
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised t
HighCVSS 7.4No exploitEPSS 0%
- RCE
google · chromeOct 6, 2026
CVE-2026-106281
38Monitor
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the s
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106283
35Monitor
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially e
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106291
35Monitor
Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the s
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106292
33Monitor
Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to poten
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106293
33Monitor
Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potent
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106294
36Monitor
Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restric
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
google · chromeOct 6, 2026
CVE-2026-106298
38Monitor
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary c
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106301
32Monitor
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
google · chromeOct 6, 2026
CVE-2026-106308
35Monitor
Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chromeOct 6, 2026
CVE-2026-106309
35Monitor
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informa
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106314
35Monitor
Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106315
35Monitor
Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106318
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106323
38Monitor
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engine
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106329
38Monitor
Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to pot
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106334
35Monitor
Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensi
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Info leak
google · chromeOct 6, 2026
CVE-2026-106335
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106341
35Monitor
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sand
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106342
35Monitor
Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Info leak
google · chromeOct 6, 2026
CVE-2026-106346
35Monitor
Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary cod
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106347
35Monitor
Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106349
35Monitor
Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106350
35Monitor
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a c
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106352
35Monitor
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obt
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106357
35Monitor
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106358
38Monitor
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106363
33Monitor
Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer proce
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106367
33Monitor
Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106371
35Monitor
Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain s
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106372
38Monitor
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outsid
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106373
35Monitor
Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106374
35Monitor
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106375
38Monitor
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside t
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106377
33Monitor
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execut
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chromeOct 6, 2026
CVE-2026-106378
33Monitor
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer
HighCVSS 8.3Proof of conceptEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106382
38Monitor
Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106383
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106387
35Monitor
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106393
33Monitor
Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to exec
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106401
38Monitor
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106403
32Monitor
Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
google · chromeOct 6, 2026
CVE-2026-106409
33Monitor
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had comprom
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106411
35Monitor
Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106412
33Monitor
Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chromeOct 6, 2026
CVE-2026-106414
38Monitor
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineerin
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeOct 6, 2026
CVE-2026-106417
38Monitor
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside th
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106419
38Monitor
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside th
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106421
35Monitor
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a c
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106423
35Monitor
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeOct 6, 2026
CVE-2026-106426
33Monitor
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Race condition
google · chromeOct 6, 2026
CVE-2026-106439
34Monitor
Hydra: Mutable instantiate policy sets allow target blocklist bypass
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
hydra-ecosystem · hydraOct 6, 2026
CVE-2026-106440
31Monitor
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
hydra-ecosystem · hydraOct 6, 2026
CVE-2026-106441
31Monitor
Hydra logging configuration permits unsafe callable resolution
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
hydra-ecosystem · hydraOct 6, 2026
CVE-2026-106442
31Monitor
Hydra instantiate target blacklist bypasses permit code execution
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
- Local privilege escalation
hydra-ecosystem · hydraOct 6, 2026
CVE-2026-106443
35Monitor
WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
HighCVSS 8.8No exploitEPSS 0%
- RCE
kozea · weasyprintOct 6, 2026
CVE-2026-106511
39Monitor
MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract syst
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
multiversx labs s.r.l. · multisig-improvedOct 6, 2026
CVE-2026-106512
33Monitor
MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
HighCVSS 8.4No exploitEPSS 0%
- XSS
misp · sachertortephpOct 6, 2026
CVE-2026-55330
39Monitor
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · androidOct 6, 2026
CVE-2026-56906
28Monitor
In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
google · androidOct 6, 2026
CVE-2026-63697
28Monitor
Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability.
HighCVSS 7.2No exploitEPSS 0%
- Weak crypto
dell · system updateOct 6, 2026
CVE-2026-71168
31Monitor
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu
HighCVSS 7.8No exploitEPSS 0%
- Path traversal
- Local privilege escalation
dell · system updateOct 6, 2026
CVE-2026-82162
39Monitor
Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
dell · command|configureOct 6, 2026
CVE-2026-83550
28Monitor
Postgres-exporter: net/http/pprof exposed on metrics listener
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
red hat · multicluster global hubOct 6, 2026
CVE-2026-86360
38Monitor
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vu
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Path traversal
dell · system updateOct 6, 2026
CVE-2026-86361
32Monitor
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
dell · system updateOct 6, 2026
CVE-2026-86362
32Monitor
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
dell · system updateOct 6, 2026
CVE-2026-96890
34Monitor
Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SSRF
github · enterprise serverOct 6, 2026
CVE-2026-101027
30Monitor
Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
HighCVSS 7.7No exploitEPSS 0%
- SSRF
gitea · giteaOct 6, 2026
CVE-2026-101152
30Monitor
Security Advisory 0187
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Open redirect
arista networks · cloudvision portalOct 6, 2026
CVE-2026-101153
28Monitor
Security Advisory 0188
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
arista networks · cloudvision portalOct 6, 2026
CVE-2026-101154
34Monitor
Security Advisory 0189
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
arista networks · cloudvision portalOct 6, 2026
CVE-2026-101155
34Monitor
Security Advisory 0189
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
arista networks · cloudvision portalOct 6, 2026
CVE-2026-101157
37Monitor
Security Advisory 0192
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- XSS
arista networks · cloudvision cueOct 6, 2026
CVE-2026-101158
37Monitor
Security Advisory 0185
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
arista networks · cloudvision portalOct 6, 2026
CVE-2026-102155
28Monitor
Security Advisory 0190
HighCVSS 7.1No exploitEPSS 0%
- XXE
arista networks · cloudvision cueOct 6, 2026
CVE-2026-102158
28Monitor
Security Advisory 0190
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
arista networks · cloudvision cueOct 6, 2026
CVE-2026-102159
37Monitor
Security Advisory 0190
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
arista networks · cloudvision cueOct 6, 2026
CVE-2026-102160
34Monitor
Security Advisory 0190
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
arista networks · cloudvision cueOct 6, 2026
CVE-2026-102161
34Monitor
Security Advisory 0190
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
arista networks · cloudvision cueOct 6, 2026
CVE-2026-102162
37Monitor
Security Advisory 0193
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
- Memory safety
arista networks · wi-fi access pointsOct 6, 2026