Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-110164
High · 8.8
CWE-416 Oct 13, 2026
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110163
High · 8.8
CWE-416 Oct 13, 2026
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110162
High · 8.8
CWE-416 Oct 13, 2026
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110161
Critical · 9.6
CWE-416 Oct 13, 2026
Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical)
CVE-2026-110158
High · 8.3
CWE-416 Oct 13, 2026
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who...
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110157
High · 8.8
CWE-416 Oct 13, 2026
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110154
High · 8.8
CWE-416 Oct 13, 2026
Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110153
High · 8.8
CWE-416 Oct 13, 2026
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110151
High · 8.8
CWE-416 Oct 13, 2026
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-110149
Critical · 9.6
CWE-416 Oct 13, 2026
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-110148
High · 8.8
CWE-416 Oct 13, 2026
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-110147
High · 8.8
CWE-416 Oct 13, 2026
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110145
High · 8.3
CWE-416 Oct 13, 2026
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who...
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110142
Critical · 9.6
CWE-416 Oct 13, 2026
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-110139
High · 8.8
CWE-416 Oct 13, 2026
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110138
High · 8.3
CWE-416 Oct 13, 2026
Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote...
Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110137
High · 8.8
CWE-416 Oct 13, 2026
Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-110136
Critical · 9.6
CWE-416 Oct 13, 2026
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to...
Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVE-2026-85876
High · 7.0
CWE-416 Oct 13, 2026
Microsoft SQL Server Elevation of Privilege Vulnerability
Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-103843
High · 7.8
CWE-416 Oct 13, 2026
Substance3D - Stager | Use After Free (CWE-416)
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-97816
Critical · 9.8
CWE-416 Oct 13, 2026
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVE-2026-97809
High · 7.8
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97808
High · 7.0
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97807
High · 7.8
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-97806
High · 7.8
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.