Эксплуатируемые и новые серьёзные CVE: октябрь 2026 г.

Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain se

• Без аутентификации

google · chrome20 окт. 2026 г.

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proce

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the san

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Confused deputy in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to

• Без аутентификации

google · chrome20 окт. 2026 г.

Observable discrepancy in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafte

• Без аутентификации

google · chrome20 окт. 2026 г.

UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging soci

• Без аутентификации

google · chrome20 окт. 2026 г.

Insufficient verification of data authenticity in Variations in Google Chrome prior to 156.0.8078.47 allowed an adjacent attacker to bypass

• Без аутентификации

google · chrome20 окт. 2026 г.

UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML pa

• Без аутентификации

google · chrome20 окт. 2026 г.

Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass system ac

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Information leak in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak

• Без аутентификации
• Утечка информации

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the s

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Incorrect authorization in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Injection in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements v

• Без аутентификации

google · chrome20 окт. 2026 г.

Incorrect authorization in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to byp

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a craf

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use of released resource in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer pr

• Без аутентификации

google · chrome20 окт. 2026 г.

Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineeri

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Race condition in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process an

• Без аутентификации
• Состояние гонки

google · chrome20 окт. 2026 г.

Missing authorization in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engine

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces

• Без аутентификации

google · chrome20 окт. 2026 г.

Missing authorization in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

UI misrepresentation in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI el

• Без аутентификации

google · chrome20 окт. 2026 г.

Missing authorization in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Incorrect authorization in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Improper signature verification in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via

• Без аутентификации
• Слабая криптография

google · chrome20 окт. 2026 г.

UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI

• Без аутентификации

google · chrome20 окт. 2026 г.

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtai

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use after free in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to execu

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Race condition in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proc

• RCE без входа
• Состояние гонки

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a c

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Missing authorization in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the

• RCE без входа

google · chrome20 окт. 2026 г.

Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web ori

• Без аутентификации

google · chrome20 окт. 2026 г.

Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data

• Без аутентификации
• Состояние гонки

google · chrome20 окт. 2026 г.

Missing authorization in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proce

• RCE без входа
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

UI misrepresentation in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a c

• Без аутентификации

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the s

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Information leak in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a crafted HTML

• Без аутентификации
• Утечка информации

google · chrome20 окт. 2026 г.

Missing authorization in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to sp

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Confused deputy in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensit

• Без аутентификации

google · chrome20 окт. 2026 г.

Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Missing authorization in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrict

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Integer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside th

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Improper input validation in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy v

• Без аутентификации

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the rend

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Incorrect authorization in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a crafte

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrar

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Improper privilege management in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering

• Без аутентификации

google · chrome20 окт. 2026 г.

Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and lever

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to e

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Missing authorization in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Improper state validation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof U

• Без аутентификации

google · chrome20 окт. 2026 г.

Improper input validation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering

• Без аутентификации

google · chrome20 окт. 2026 г.

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obt

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to byp

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Out of bounds read in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandb

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Uninitialized resource in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a cr

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Information leak in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to

• Без аутентификации
• Утечка информации

google · chrome20 окт. 2026 г.

Missing authorization in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proce

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proces

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Incorrect authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer pro

• RCE без входа
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Buffer overflow in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Cross-site scripting in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTM

• Без аутентификации
• XSS

google · chrome20 окт. 2026 г.

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass syste

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker leveraging social enginee

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof

• Без аутентификации

google · chrome20 окт. 2026 г.

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Missing authorization in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer pr

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Race condition in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process

• Без аутентификации
• Состояние гонки

google · chrome20 окт. 2026 г.

Improper privilege management in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a local attacker to execut

• RCE без входа

google · chrome20 окт. 2026 г.

Use after free in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the s

• Без аутентификации
• Ошибки памяти

google · chrome20 окт. 2026 г.

Missing authorization in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proc

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Incorrect authorization in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Information leak in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sensitive i

• Без аутентификации
• Утечка информации

google · chrome20 окт. 2026 г.

Incorrect authorization in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML

• Без аутентификации

google · chrome20 окт. 2026 г.

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof address bar via a c

• Без аутентификации

google · chrome20 окт. 2026 г.

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outsi

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafte

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

UI misrepresentation in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the rend

• Без аутентификации

google · chrome20 окт. 2026 г.

Incorrect authorization in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Observable discrepancy in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to leak sens

• Без аутентификации

google · chrome20 окт. 2026 г.

Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions via

• Без аутентификации

google · chrome20 окт. 2026 г.

Missing authorization in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain cross-origin data via a craf

• Без аутентификации
• Нарушение контроля доступа (IDOR)

google · chrome20 окт. 2026 г.

Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to pote

• RCE без входа
• Ошибки памяти

google · chrome20 окт. 2026 г.

Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypa

• Без аутентификации

google · chrome20 окт. 2026 г.

UI misrepresentation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted Chro

• Без аутентификации

google · chrome20 окт. 2026 г.

Inappropriate implementation in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer proc

• Без аутентификации

google · chrome20 окт. 2026 г.

Race condition in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass site isolation via a crafted HTM

• Без аутентификации
• Состояние гонки

google · chrome20 окт. 2026 г.