Security feed

24 October 2026

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102328

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102328

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102328

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102328
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4112 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:00 GMT
Publisher date: Tue, 29 Sep 2026 19:45:04 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102326

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102326

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102326

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102326
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4111 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:59 GMT
Publisher date: Tue, 29 Sep 2026 19:45:03 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102324

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102324

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102324
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4110 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:59 GMT
Publisher date: Tue, 29 Sep 2026 19:45:05 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102321

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102321

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102321
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4109 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:58 GMT
Publisher date: Tue, 29 Sep 2026 19:45:06 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102323

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102323

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102323

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102323
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4108 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:58 GMT
Publisher date: Tue, 29 Sep 2026 19:45:03 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102316

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102316

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102316

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102316
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4107 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:57 GMT
Publisher date: Tue, 29 Sep 2026 19:45:04 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102308

Chrome CVE-2026-102308

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102308

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102308
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4106 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:56 GMT
Publisher date: Tue, 29 Sep 2026 19:45:05 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102309

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102309

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102309
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4105 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:56 GMT
Publisher date: Tue, 29 Sep 2026 19:45:04 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102302

Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102302

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102302

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102302
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4104 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:55 GMT
Publisher date: Tue, 29 Sep 2026 19:45:06 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102306

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102306

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102306

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102306
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4103 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:55 GMT
Publisher date: Tue, 29 Sep 2026 19:45:02 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102304

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102304

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102304

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102304
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4102 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:54 GMT
Publisher date: Tue, 29 Sep 2026 19:45:04 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102301

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102301

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102301

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102301
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4101 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:53 GMT
Publisher date: Tue, 29 Sep 2026 19:45:05 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102299

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102299

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102299
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4100 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:53 GMT
Publisher date: Tue, 29 Sep 2026 19:45:02 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95359

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Chrome CVE-2026-95359

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95359

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95359
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4048 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:19 GMT
Publisher date: Tue, 29 Sep 2026 17:31:46 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Chrome CVE-2026-95384

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95384

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95384
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4046 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:17 GMT
Publisher date: Tue, 29 Sep 2026 17:31:51 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95332

Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Chrome CVE-2026-95332

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95332

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95332
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4045 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:16 GMT
Publisher date: Tue, 29 Sep 2026 17:31:53 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95295

Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical access. (Chromium security severity: Medium)

Chrome CVE-2026-95295

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95295

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95295
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4044 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:16 GMT
Publisher date: Tue, 29 Sep 2026 17:31:49 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102319

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102319

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102319

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102319
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4034 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:09 GMT
Publisher date: Tue, 29 Sep 2026 19:45:05 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102318

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102318

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102318

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102318
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4033 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:08 GMT
Publisher date: Tue, 29 Sep 2026 19:45:05 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-102315

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102315

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102315
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4032 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:45:08 GMT
Publisher date: Tue, 29 Sep 2026 19:45:06 GMT

Read the original announcement

Older events