Security feed

24 October 2026

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95313

Use after free in Fullscreen in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chrome CVE-2026-95313

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95313

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95313
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4140 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:47:20 GMT
Publisher date: Tue, 29 Sep 2026 17:31:36 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95315

Use after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

Chrome CVE-2026-95315

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95315

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95315
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4139 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:47:19 GMT
Publisher date: Tue, 29 Sep 2026 17:31:38 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95310

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chrome CVE-2026-95310

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95310

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95310
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4138 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:16 GMT
Publisher date: Tue, 29 Sep 2026 17:31:37 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95311

Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Chrome CVE-2026-95311

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95311

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95311
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4137 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:15 GMT
Publisher date: Tue, 29 Sep 2026 17:31:54 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95308

Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Chrome CVE-2026-95308

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95308

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95308
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4136 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:15 GMT
Publisher date: Tue, 29 Sep 2026 17:31:57 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95298

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

Chrome CVE-2026-95298

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95298

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95298
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4135 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:14 GMT
Publisher date: Tue, 29 Sep 2026 17:31:38 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95306

Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95306

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95306

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95306
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4134 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:14 GMT
Publisher date: Tue, 29 Sep 2026 17:31:43 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95304

Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95304

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95304

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95304
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4133 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:13 GMT
Publisher date: Tue, 29 Sep 2026 17:31:43 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95299

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95299

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95299

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95299
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4132 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:12 GMT
Publisher date: Tue, 29 Sep 2026 17:31:43 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95293

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95293

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95293

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95293
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4131 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:12 GMT
Publisher date: Tue, 29 Sep 2026 17:31:40 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95286

Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95286

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95286

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95286
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4130 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:11 GMT
Publisher date: Tue, 29 Sep 2026 17:31:42 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95283

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95283

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95283

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95283
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4129 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:11 GMT
Publisher date: Tue, 29 Sep 2026 17:31:39 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95282

Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95282

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95282

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95282
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4128 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:10 GMT
Publisher date: Tue, 29 Sep 2026 17:31:40 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chrome CVE-2026-95281

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95281

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95281
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4127 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:09 GMT
Publisher date: Tue, 29 Sep 2026 17:31:35 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95280

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95280

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95280

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95280
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4126 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:09 GMT
Publisher date: Tue, 29 Sep 2026 17:31:42 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95277

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95277

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95277

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95277
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4125 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:08 GMT
Publisher date: Tue, 29 Sep 2026 17:31:40 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95276

Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)

Chrome CVE-2026-95276

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95276

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95276
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4124 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:08 GMT
Publisher date: Tue, 29 Sep 2026 17:31:49 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Chrome CVE-2026-95274

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-95274

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-95274
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4123 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:07 GMT
Publisher date: Tue, 29 Sep 2026 17:31:40 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102331

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Chrome CVE-2026-102331

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102331

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102331
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4114 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:01 GMT
Publisher date: Tue, 29 Sep 2026 19:45:01 GMT

Read the original announcement

advisoryOfficial CVE List24 Oct 2026

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Chrome CVE-2026-102327

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-102327

Chrome

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-102327
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #4113 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:46:01 GMT
Publisher date: Tue, 29 Sep 2026 19:45:07 GMT

Read the original announcement

Older events