СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-113202 Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... Google / Chrome · google / chrome | Высокий | 8.8 | 0,56 % | 21.10.2026 | ||
| CVE-2026-113127 Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... Google / Chrome · google / chrome | Высокий | 8.8 | 0,53 % | 21.10.2026 | ||
| CVE-2026-113118 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... Google / Chrome · google / chrome | Критический | 8.8 | 0,37 % | PoC | 21.10.2026 | |
| CVE-2026-113099 Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47... Google / Chrome · google / chrome | Критический | 8.8 | 0,42 % | PoC | 21.10.2026 | |
| CVE-2026-113301 Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote... Google / Chrome · google / chrome | Высокий | 8.8 | 0,56 % | 21.10.2026 | ||
| CVE-2026-113247 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... Google / Chrome · google / chrome | Высокий | 8.8 | 0,44 % | 21.10.2026 | ||
| CVE-2026-113190 Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... Google / Chrome · google / chrome | Высокий | 8.8 | 0,39 % | 21.10.2026 | ||
| CVE-2026-113152 Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... Google / Chrome · google / chrome | Высокий | 8.8 | 0,43 % | 21.10.2026 | ||
| CVE-2026-113024 Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote... Google / Chrome · google / chrome | Высокий | 8.8 | 0,56 % | 21.10.2026 | ||
| CVE-2026-58877 In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass... Google / Android | Средний | 4.0 | 0,12 % | 02.11.2026 | ||
| CVE-2026-121198 Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... Google / Chrome | Информационный | — | — | 03.11.2026 | ||
| CVE-2026-121108 Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote... Google / Chrome | Информационный | — | — | 03.11.2026 | ||
| CVE-2026-121171 Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... Google / Chrome | Информационный | — | — | 03.11.2026 | ||
| CVE-2026-59015 In multiple locations, there is a possible permission bypass due to a confused deputy. This could... Google / Android | Средний | 4.0 | 0,12 % | 02.11.2026 | ||
| CVE-2026-55264 In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak... Google / Android | Средний | 4.0 | 0,11 % | 02.11.2026 | ||
| CVE-2026-49906 An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER`... Google / Android | Высокий | 7.8 | 0,18 % | 02.11.2026 | ||
| CVE-2026-105311 Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy Red Hat / StreamsHub Console for Apache Kafka® · Red Hat / streams for Apache Kafka 2 | Высокий | 7.7 | 0,3 % | 20.10.2026 | ||
| CVE-2026-59028 In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-59000 In multiple locations, there is a possible permission bypass due to a confused deputy. This could... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58970 In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58965 In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58957 In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58944 In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58943 In run of AddAccountSettings.java, there is a possible background activity launch due to a... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58885 In multiple locations, there is a possible permission bypass due to a confused deputy. This could... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-58884 In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-55289 In multiple functions in multiple locations, there is a possible execution of sensitive USSD... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-55271 In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-49931 In onActivityResult in multiple locations, there is a possible contact leak from protected... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 | ||
| CVE-2026-49922 In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission... Google / Android | Высокий | 8.4 | 0,1 % | 02.11.2026 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.