Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: October 2026

8,685 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 4 of 87

  • CVE-2026-85494
    34Monitor

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and bina

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-86325
    37Monitor

    A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface.

    CriticalCVSS 9.4No exploitEPSS 0%

    moxa · mgate mb3170 seriesOct 2, 2026

  • CVE-2026-86326
    34Monitor

    An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify th

    HighCVSS 8.6No exploitEPSS 0%

    moxa · mgate mb3170 seriesOct 2, 2026

  • CVE-2026-91135
    36Monitor

    Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)

    CriticalCVSS 9.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-91137
    34Monitor

    Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-93925
    34Monitor

    Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-93926
    34Monitor

    Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94633
    34Monitor

    Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94642
    34Monitor

    Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94644
    32Monitor

    Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94645
    32Monitor

    Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94650
    32Monitor

    Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion)

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94651
    32Monitor

    Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96990
    32Monitor

    Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-104410
    34Monitor

    SiYuan before 3.8.5 Information Disclosure via /api/export/preview

    HighCVSS 8.7No exploitEPSS 0%

    siyuan-note · siyuanOct 2, 2026

  • CVE-2026-104411
    34Monitor

    Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

    HighCVSS 8.5No exploitEPSS 0%

    tryghost · ghostOct 2, 2026

  • CVE-2026-104413
    34Monitor

    Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

    HighCVSS 8.5No exploitEPSS 0%

    tryghost · ghostOct 2, 2026

  • CVE-2026-104414
    34Monitor

    Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses

    HighCVSS 8.6No exploitEPSS 0%

    tryghost · ghostOct 2, 2026

  • CVE-2026-104416
    30Monitor

    Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API

    HighCVSS 7.7No exploitEPSS 0%

    tryghost · ghostOct 2, 2026

  • CVE-2026-104418
    34Monitor

    Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

    HighCVSS 8.6No exploitEPSS 0%

    tryghost · ghostOct 2, 2026

  • CVE-2026-104422
    34Monitor

    Zebra before 6.3.0 Block Sync Denial of Service via Coinbase scriptSig Rewrite

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104423
    34Monitor

    Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104426
    32Monitor

    Zebra before 6.1.0 Quadratic Complexity DoS via Block Transparent Value Check

    HighCVSS 8.2No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104427
    32Monitor

    Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry

    HighCVSS 8.2No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104430
    34Monitor

    Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104431
    34Monitor

    Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104434
    28Monitor

    Zebra before 8.0.0 Denial of Service via z_listunifiedreceivers RPC

    HighCVSS 7.1No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104435
    33Monitor

    Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

    HighCVSS 8.3No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104437
    33Monitor

    Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

    HighCVSS 8.3No exploitEPSS 0%

    zcashfoundation · zebraOct 2, 2026

  • CVE-2026-104438
    34Monitor

    YesWiki before 4.6.7 Information Disclosure via listpagestag and includepages Actions

    HighCVSS 8.7No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104439
    28Monitor

    YesWiki before 4.6.7 User Enumeration via Lost-Password Flow

    HighCVSS 7.1No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104440
    27Monitor

    YesWiki before 4.6.7 Blind SSRF via bazarlist API idtypeannonce Parameter

    MediumCVSS 6.9No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104441
    27Monitor

    YesWiki before 4.6.7 Unauthenticated SSRF via valeur Action

    MediumCVSS 6.9No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104443
    28Monitor

    YesWiki before 4.6.7 Scope Bypass via Triples Delete API

    HighCVSS 7.2No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104444
    28Monitor

    YesWiki before 4.6.7 Authorization Bypass via Comments API editComment

    HighCVSS 7.1No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104445
    35Monitor

    YesWiki before 4.6.7 Authentication Bypass via ActivityPub Inbox Actor Spoofing

    HighCVSS 8.8No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104446
    27Monitor

    YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler

    MediumCVSS 6.9No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104447
    28Monitor

    YesWiki before 4.6.7 CSRF Package Deletion via autoupdate UpdateAction

    HighCVSS 7.1No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104448
    28Monitor

    YesWiki before 4.6.7 CSRF Page Deletion via ajaxdeletepage Handler

    HighCVSS 7.2No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104449
    33Monitor

    YesWiki before 4.6.7 Unauthenticated Page Overwrite via Bazar id_fiche

    HighCVSS 8.3No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104450
    32Monitor

    YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

    HighCVSS 8.2No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104456
    28Monitor

    YesWiki before 4.6.7 Second-Order SQL Injection via ACL Username

    HighCVSS 7.2No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104457
    35Monitor

    YesWiki before 4.6.7 SQL Injection via filtertags filterN parameter

    HighCVSS 8.8No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104458
    33Monitor

    YesWiki before 4.6.7 SSRF Guard Bypass via IPv6 Transition Addresses

    HighCVSS 8.3No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104460
    34Monitor

    YesWiki before 4.6.7 Unauthenticated Blind SQL Injection via newtextsearch

    HighCVSS 8.7No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104462
    35Monitor

    YesWiki before 4.6.7 SQL Injection via nuagetag tags parameter

    HighCVSS 8.8No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104463
    33Monitor

    YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox

    HighCVSS 8.3No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104464
    35Monitor

    YesWiki before 4.6.7 SSRF via Bazar abonnements sync actor parameter

    HighCVSS 8.8No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104467
    36Monitor

    YesWiki before 4.6.7 Authorization Bypass via Public API Mode

    CriticalCVSS 9.2No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104469
    30Monitor

    YesWiki before 4.6.7 Session Fixation via Login in AuthController.php

    HighCVSS 7.6No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104471
    34Monitor

    YesWiki before 4.6.7 Unrestricted File Upload via Bazar CSV Import

    HighCVSS 8.6No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-104472
    34Monitor

    YesWiki before 4.6.7 Missing Authorization via Attachment Download Handler

    HighCVSS 8.7No exploitEPSS 0%

    yeswiki · yeswikiOct 2, 2026

  • CVE-2026-61373
    34Monitor

    Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-82458
    34Monitor

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-82459
    32Monitor

    Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-86535
    34Monitor

    Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-86537
    34Monitor

    Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-87117
    34Monitor

    Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-90440
    32Monitor

    Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94636
    32Monitor

    Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94637
    32Monitor

    Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94646
    34Monitor

    Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94648
    32Monitor

    Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94653
    32Monitor

    Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96288
    32Monitor

    Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96292
    32Monitor

    Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96294
    34Monitor

    Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-104610
    37Monitor

    Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

    CriticalCVSS 9.3No exploitEPSS 0%

    tenda · hg7Oct 2, 2026

  • CVE-2026-104611
    34Monitor

    Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

    HighCVSS 8.5No exploitEPSS 0%

    tenda · ac9Oct 2, 2026

  • CVE-2026-104733
    29Monitor

    User Impersonation/Authorization Bypass in XMPP Server ejabberd

    HighCVSS 7.4No exploitEPSS 0%

    processone · ejabberdOct 2, 2026

  • CVE-2026-61374
    28Monitor

    Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit

    HighCVSS 7.1No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-63772
    34Monitor

    Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-66055
    32Monitor

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the config

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-66081
    34Monitor

    Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-66837
    34Monitor

    Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-66858
    34Monitor

    Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Pe

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-66859
    34Monitor

    Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-83632
    36Monitor

    Apache Thrift: C++ THttpTransport grows its line buffer without bound

    CriticalCVSS 9.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-83663
    34Monitor

    Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-83745
    34Monitor

    Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-85476
    32Monitor

    Apache Thrift: c_glib `read_all` spins when the underlying read returns 0

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94654
    32Monitor

    Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94655
    32Monitor

    Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94656
    32Monitor

    Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94657
    32Monitor

    Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-94658
    34Monitor

    Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96277
    34Monitor

    Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception

    HighCVSS 8.7No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96286
    32Monitor

    Apache Thrift: Perl servers end `serve()` when serving one connection fails

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96287
    32Monitor

    Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-96289
    32Monitor

    Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard

    HighCVSS 8.2No exploitEPSS 0%

    apache software foundation · apache thriftOct 2, 2026

  • CVE-2026-19652
    39Monitor

    Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter

    CriticalCVSS 9.8No exploitEPSS 0%

    diviengine · divi membershipOct 2, 2026

  • CVE-2026-85215
    28Monitor

    SQL Injection in GG Soft's Paperwork

    HighCVSS 7.1No exploitEPSS 0%

    gg soft software services inc. · paperworkOct 2, 2026

  • CVE-2026-93875
    28Monitor

    JetAppointment <= 2.5.2.1 - Unauthenticated Stored Cross-Site Scripting via 'friendlyTime' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    crocoblock · jetappointmentOct 2, 2026

  • CVE-2026-94422
    34Monitor

    xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

    HighCVSS 8.7No exploitEPSS 0%

    fedora · fedoraOct 2, 2026

  • CVE-2026-104026
    31Monitor

    In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs.

    HighCVSS 7.8No exploitEPSS 0%

    meta platforms, inc · sapling scmOct 2, 2026

  • CVE-2026-90970
    44Plan

    Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

    CriticalCVSS 9.9Proof of conceptEPSS 17%

    gitlab · gitlab ai gatewayOct 2, 2026

  • CVE-2026-103622
    35Monitor

    Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    HighCVSS 8.8No exploitEPSS 0%

    google · chromeOct 2, 2026

  • CVE-2026-103623
    35Monitor

    Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox

    HighCVSS 8.8No exploitEPSS 0%

    google · chromeOct 2, 2026

  • CVE-2026-103624
    33Monitor

    Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the r

    HighCVSS 8.3No exploitEPSS 0%

    google · chromeOct 2, 2026

  • CVE-2026-103625
    35Monitor

    Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    HighCVSS 8.8No exploitEPSS 0%

    google · chromeOct 2, 2026