{"schema_version":"1","data":[{"id":13034,"advisory_id":"e6edd823-878a-430d-8012-64713c563938","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106196","source_published_at":"2026-10-06T18:41:20.523+00:00","published_at":"2026-10-25T00:17:49.412071+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106196"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106196","summary":"Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106196","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106196","aliases":["CVE-2026-106196"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T16:56:47.934Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504215649"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.6,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106196","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T16:56:43.063600Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T16:56:47.934Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:20.523Z"}}},"related_cves":[{"value":"CVE-2026-106196","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":13032,"advisory_id":"9b96c889-2332-41b6-8f0b-865cd17df4ea","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106408","source_published_at":"2026-10-06T18:41:20.928+00:00","published_at":"2026-10-25T00:17:48.257577+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106408"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106408","summary":"Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106408","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106408","aliases":["CVE-2026-106408"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T16:42:00.054Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/504227656"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106408","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T16:41:45.790411Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T16:42:00.054Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:20.928Z"}}},"related_cves":[{"value":"CVE-2026-106408","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":13029,"advisory_id":"c58e6798-8a6e-461c-8878-ac8927da6ca7","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106389","source_published_at":"2026-10-06T18:41:20.197+00:00","published_at":"2026-10-25T00:17:46.588081+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106389"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106389","summary":"Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106389","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106389","aliases":["CVE-2026-106389"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T16:48:34.020Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/503625361"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106389","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T16:48:29.134427Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T16:48:34.020Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:20.197Z"}}},"related_cves":[{"value":"CVE-2026-106389","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":13016,"advisory_id":"91e5020d-692f-477f-9e43-190c1fb960af","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106198","source_published_at":"2026-10-06T18:41:21.699+00:00","published_at":"2026-10-25T00:17:32.945824+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106198"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106198","summary":"Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106198","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106198","aliases":["CVE-2026-106198"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:57:05.331Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/510773353"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106198","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T15:56:46.616306Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:57:05.331Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:21.699Z"}}},"related_cves":[{"value":"CVE-2026-106198","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12979,"advisory_id":"232f5e6f-f765-4536-b45e-e097e75730db","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106361","source_published_at":"2026-10-06T18:41:22.739+00:00","published_at":"2026-10-25T00:16:29.076873+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106361"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106361","summary":"Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106361","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106361","aliases":["CVE-2026-106361"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:52:46.851Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/513781133"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106361","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T15:52:33.213147Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:52:46.851Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:22.739Z"}}},"related_cves":[{"value":"CVE-2026-106361","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12978,"advisory_id":"6c1154e5-b2cc-456b-9381-65c076ba4312","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106326","source_published_at":"2026-10-06T18:41:21.838+00:00","published_at":"2026-10-25T00:16:28.487355+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106326"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106326","summary":"Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106326","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106326","aliases":["CVE-2026-106326"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:54:47.566Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/511745101"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106326","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T15:53:55.806366Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:54:47.566Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:21.838Z"}}},"related_cves":[{"value":"CVE-2026-106326","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12969,"advisory_id":"d6d1999f-3abb-43db-8dcd-44fdf04b9a4f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106405","source_published_at":"2026-10-06T18:41:24.571+00:00","published_at":"2026-10-25T00:16:23.234814+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106405"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106405","summary":"Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106405","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106405","aliases":["CVE-2026-106405"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:47:16.558Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517150523"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106405","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T15:46:13.844675Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:47:16.558Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:24.571Z"}}},"related_cves":[{"value":"CVE-2026-106405","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12968,"advisory_id":"a766390b-268d-4b2d-a65f-39931596b23a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106363","source_published_at":"2026-10-06T18:41:18.784+00:00","published_at":"2026-10-25T00:16:22.620958+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106363"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106363","summary":"Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106363","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106363","aliases":["CVE-2026-106363"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:36:34.305Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501896592"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106363","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T15:36:16.857272Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:36:34.305Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:18.784Z"}}},"related_cves":[{"value":"CVE-2026-106363","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12967,"advisory_id":"e38a35ce-c502-4ce1-99a9-e6d8b1fbd9e0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106397","source_published_at":"2026-10-06T18:41:20.351+00:00","published_at":"2026-10-25T00:16:22.05501+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106397"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106397","summary":"Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106397","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106397","aliases":["CVE-2026-106397"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:38:46.999Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/503725788"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106397","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T15:37:38.179053Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:38:46.999Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:20.351Z"}}},"related_cves":[{"value":"CVE-2026-106397","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12966,"advisory_id":"b636f79e-0d31-4190-aaa4-a698f48f2038","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106324","source_published_at":"2026-10-06T18:41:15.206+00:00","published_at":"2026-10-25T00:16:21.481676+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106324"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106324","summary":"Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106324","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106324","aliases":["CVE-2026-106324"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:38:32.373Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501171258"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106324","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T15:38:00.498718Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:38:32.373Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:15.206Z"}}},"related_cves":[{"value":"CVE-2026-106324","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12965,"advisory_id":"6e2ec1bd-7423-4080-9cab-83369ca9bee5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106280","source_published_at":"2026-10-06T18:41:24.875+00:00","published_at":"2026-10-25T00:16:20.891755+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106280"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106280","summary":"Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106280","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106280","aliases":["CVE-2026-106280"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:37:31.505Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517366426"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106280","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T15:37:17.812317Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:37:31.505Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:24.875Z"}}},"related_cves":[{"value":"CVE-2026-106280","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12964,"advisory_id":"c8102213-2b30-43ba-ba00-809afc2a7ebc","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106322","source_published_at":"2026-10-06T18:41:24.716+00:00","published_at":"2026-10-25T00:16:20.300964+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106322"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106322","summary":"Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106322","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106322","aliases":["CVE-2026-106322"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:39:03.761Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/517213220"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106322","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T15:38:45.559799Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:39:03.761Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:24.716Z"}}},"related_cves":[{"value":"CVE-2026-106322","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12963,"advisory_id":"af740a25-66de-44b9-809a-48c477738ae6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106188","source_published_at":"2026-10-06T18:41:24.109+00:00","published_at":"2026-10-25T00:16:19.725113+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106188"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106188","summary":"Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106188","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106188","aliases":["CVE-2026-106188"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T15:39:03.062Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/515477538"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.1,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106188","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T15:36:59.249878Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T15:39:03.062Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:24.109Z"}}},"related_cves":[{"value":"CVE-2026-106188","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12454,"advisory_id":"9b7e5bdd-7c6c-417d-9d5b-f59885a7cfd9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106407","source_published_at":"2026-10-06T18:41:20.047+00:00","published_at":"2026-10-25T00:08:01.065575+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106407"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106407","summary":"Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106407","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106407","aliases":["CVE-2026-106407"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T12:05:00.611Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502648640"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106407","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T12:01:43.636444Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T12:05:00.611Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:20.047Z"}}},"related_cves":[{"value":"CVE-2026-106407","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12453,"advisory_id":"908384d4-a0ee-4129-a07d-1e70e87a24d4","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106244","source_published_at":"2026-10-06T18:41:19.904+00:00","published_at":"2026-10-25T00:08:00.449243+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106244"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106244","summary":"Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106244","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106244","aliases":["CVE-2026-106244"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T11:48:48.912Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502475175"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106244","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T11:48:44.423209Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T11:48:48.912Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:19.904Z"}}},"related_cves":[{"value":"CVE-2026-106244","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12452,"advisory_id":"9679f743-8610-4428-91ac-3f826e337d85","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106185","source_published_at":"2026-10-06T18:41:19.755+00:00","published_at":"2026-10-25T00:07:59.836443+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106185"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106185","summary":"Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106185","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106185","aliases":["CVE-2026-106185"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T11:34:58.884Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502462485"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106185","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T11:34:53.392199Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T11:34:58.884Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:19.755Z"}}},"related_cves":[{"value":"CVE-2026-106185","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12451,"advisory_id":"24b76928-fff5-4bca-9d5d-a5d66533c863","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106242","source_published_at":"2026-10-06T18:41:17.853+00:00","published_at":"2026-10-25T00:07:59.251102+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106242"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106242","summary":"Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106242","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106242","aliases":["CVE-2026-106242"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T11:26:35.753Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/501647772"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106242","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T11:26:31.200455Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T11:26:35.753Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:17.853Z"}}},"related_cves":[{"value":"CVE-2026-106242","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12450,"advisory_id":"7c2aa731-6973-4f20-b361-09195d34d75c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106189","source_published_at":"2026-10-06T18:41:19.068+00:00","published_at":"2026-10-25T00:07:58.505454+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106189"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106189","summary":"Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106189","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106189","aliases":["CVE-2026-106189"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-08T11:22:28.344Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502034469"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106189","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-08T11:20:09.006436Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T11:22:28.344Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:19.068Z"}}},"related_cves":[{"value":"CVE-2026-106189","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12292,"advisory_id":"e431c9ea-2e49-4202-af8c-3b4955e5f9e6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106427","source_published_at":"2026-10-06T18:41:35.793+00:00","published_at":"2026-10-25T00:05:14.702402+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106427"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106427","summary":"Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106427","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106427","aliases":["CVE-2026-106427"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:19.024Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/513423334"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106427","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:19.466418Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:19.024Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:35.793Z"}}},"related_cves":[{"value":"CVE-2026-106427","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12291,"advisory_id":"a50bcddb-a0a1-4714-8661-c96b57c55e66","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106344","source_published_at":"2026-10-06T18:41:34.221+00:00","published_at":"2026-10-25T00:05:14.085419+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106344"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106344","summary":"Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106344","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106344","aliases":["CVE-2026-106344"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:19.412Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/498375898"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106344","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:31.242367Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:19.412Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:34.221Z"}}},"related_cves":[{"value":"CVE-2026-106344","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12290,"advisory_id":"f92b6592-c23c-413f-be4e-f7e57c50a574","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106306","source_published_at":"2026-10-06T18:41:35.647+00:00","published_at":"2026-10-25T00:05:13.499718+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106306"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106306","summary":"Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106306","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106306","aliases":["CVE-2026-106306"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:19.158Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/513383360"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106306","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:22.594328Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:19.158Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:35.647Z"}}},"related_cves":[{"value":"CVE-2026-106306","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12289,"advisory_id":"3324ff91-c0f6-4865-be90-a80b9fd79cbb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106299","source_published_at":"2026-10-06T18:41:36.984+00:00","published_at":"2026-10-25T00:05:12.927595+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106299"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106299","summary":"Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106299","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106299","aliases":["CVE-2026-106299"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:18.897Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/519211890"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106299","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:16.141832Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:18.897Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:36.984Z"}}},"related_cves":[{"value":"CVE-2026-106299","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12288,"advisory_id":"4cf7498b-a83f-43aa-8d71-c9aa0a448e9e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106296","source_published_at":"2026-10-06T18:41:38.88+00:00","published_at":"2026-10-25T00:05:12.148639+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106296"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106296","summary":"Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106296","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106296","aliases":["CVE-2026-106296"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:18.644Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/540078886"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106296","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:11.567926Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:18.644Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:38.880Z"}}},"related_cves":[{"value":"CVE-2026-106296","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12287,"advisory_id":"fb2812f4-aaee-46ea-b508-8ffebc2b2dea","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106259","source_published_at":"2026-10-06T18:41:38.727+00:00","published_at":"2026-10-25T00:05:11.562814+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106259"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106259","summary":"Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106259","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106259","aliases":["CVE-2026-106259"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:18.766Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/540076586"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106259","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:13.576597Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:18.766Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:38.727Z"}}},"related_cves":[{"value":"CVE-2026-106259","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12286,"advisory_id":"f7af2a70-3a7e-4cbe-94ac-27ccb58249c8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106250","source_published_at":"2026-10-06T18:41:34.994+00:00","published_at":"2026-10-25T00:05:10.951408+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106250"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106250","summary":"Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106250","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106250","aliases":["CVE-2026-106250"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:34:19.279Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/502497790"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106250","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:26.903899Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:34:19.279Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:34.994Z"}}},"related_cves":[{"value":"CVE-2026-106250","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12267,"advisory_id":"54ed1ee4-2deb-4dcf-9a68-24bad9e85a30","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106288","source_published_at":"2026-10-06T18:41:40.4+00:00","published_at":"2026-10-25T00:04:59.047782+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106288"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106288","summary":"Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)","evidence":"cve:CVE-2026-106288","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106288","aliases":["CVE-2026-106288"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T20:24:21.261Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553274076"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106288","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T20:24:15.298416Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T20:24:21.261Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:40.400Z"}}},"related_cves":[{"value":"CVE-2026-106288","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12220,"advisory_id":"d5a023f9-0fe4-44ce-85e7-60324448f18f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106307","source_published_at":"2026-10-06T18:41:29.819+00:00","published_at":"2026-10-25T00:04:25.122524+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106307"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106307","summary":"Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106307","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106307","aliases":["CVE-2026-106307"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T19:55:12.020Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/537832408"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106307","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T19:54:39.414594Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T19:55:12.020Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:29.819Z"}}},"related_cves":[{"value":"CVE-2026-106307","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12219,"advisory_id":"39de4200-2f53-4ac6-b506-c3ace40c4b1d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106348","source_published_at":"2026-10-06T18:41:29.67+00:00","published_at":"2026-10-25T00:04:24.125479+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106348"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106348","summary":"Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106348","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106348","aliases":["CVE-2026-106348"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T19:54:05.877Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/537107728"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106348","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T19:53:37.981381Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T19:54:05.877Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:29.670Z"}}},"related_cves":[{"value":"CVE-2026-106348","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12218,"advisory_id":"071ea3b3-4ce4-436a-9d12-071938ea4ab8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106404","source_published_at":"2026-10-06T18:41:31.802+00:00","published_at":"2026-10-25T00:04:23.358076+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106404"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106404","summary":"Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106404","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106404","aliases":["CVE-2026-106404"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T19:58:00.783Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/553150261"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106404","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-07T19:57:38.337520Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T19:58:00.783Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:31.802Z"}}},"related_cves":[{"value":"CVE-2026-106404","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":12217,"advisory_id":"b3896dac-4016-4ab5-adb5-5307bfed492e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-106301","source_published_at":"2026-10-06T18:41:28.939+00:00","published_at":"2026-10-25T00:04:22.572785+00:00","extraction_method":"structured","technologies":["chrome","core-cve"],"cve_ids":["CVE-2026-106301"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-106301","summary":"Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)","evidence":"cve:CVE-2026-106301","products":[{"name":{"value":"Chrome","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-106301","aliases":["CVE-2026-106301"],"metrics":[],"affected":[{"vendor":"Google","product":"Chrome","versions":[{"status":"affected","version":"155.0.8059.39","lessThan":"155.0.8059.39","versionType":"custom"}]}],"modified":"2026-10-07T19:53:10.611Z","provider":"cve","references":["https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html","https://issues.chromium.org/issues/523750306"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-106301","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-07T19:52:42.698855Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T19:53:10.611Z"}}],"cna":{"orgId":"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28","shortName":"Chrome","dateUpdated":"2026-10-06T18:41:28.939Z"}}},"related_cves":[{"value":"CVE-2026-106301","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":13034,"next_before":12217}