{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Google vulnerabilities","home_page_url":"https://patchfirst.co/vendor/google/","feed_url":"https://patchfirst.co/feed/vendor/google.json","description":"New and newly exploited Google CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-119261","url":"https://patchfirst.co/cve/CVE-2026-119261/","title":"CVE-2026-119261: Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.2% (higher than 11.6% of CVEs). CVSS 9.6 CRITICAL. Priority 9.7 of 100.","summary":"Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially…","date_published":"2026-10-30T00:00:00.000Z","date_modified":"2026-10-31T04:18:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":9.7,"kev":null,"epss":{"score":0.00213,"percentile":0.11601},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-119263","url":"https://patchfirst.co/cve/CVE-2026-119263/","title":"CVE-2026-119263: Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.2% (higher than 9.7% of CVEs). CVSS 9.6 CRITICAL. Priority 9.3 of 100.","summary":"Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to…","date_published":"2026-10-30T00:00:00.000Z","date_modified":"2026-10-31T04:18:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":9.3,"kev":null,"epss":{"score":0.00198,"percentile":0.09689},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-111497#kev","url":"https://patchfirst.co/cve/CVE-2026-111497/","title":"[KEV] CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability","content_text":"Google · Brotli. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.8 of 100.","summary":"Google Brotli Unchecked Return Value Vulnerability","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-30T20:30:11.000Z","tags":["kev","public-exploit","T1190","T1005","T1059","T1499.004"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2026-10-27","ransomware":false},"epss":{"score":0.82641,"percentile":0.99666},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Brotli","techniqueIds":["T1190","T1005","T1059","T1499.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-118306","url":"https://patchfirst.co/cve/CVE-2026-118306/","title":"CVE-2026-118306: Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 30.7% of CVEs). CVSS 9.6 CRITICAL. Priority 14.2 of 100.","summary":"Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T16:00:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00369,"percentile":0.30743},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118305","url":"https://patchfirst.co/cve/CVE-2026-118305/","title":"CVE-2026-118305: Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 30.7% of CVEs). CVSS 9.6 CRITICAL. Priority 14.2 of 100.","summary":"Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T16:00:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.2,"kev":null,"epss":{"score":0.00369,"percentile":0.30742},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118340","url":"https://patchfirst.co/cve/CVE-2026-118340/","title":"CVE-2026-118340: Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 29.1% of CVEs). CVSS 9.6 CRITICAL. Priority 13.9 of 100.","summary":"Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:40:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00354,"percentile":0.29122},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118321","url":"https://patchfirst.co/cve/CVE-2026-118321/","title":"CVE-2026-118321: Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 29.1% of CVEs). CVSS 9.6 CRITICAL. Priority 13.9 of 100.","summary":"Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:41:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00354,"percentile":0.29122},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118312","url":"https://patchfirst.co/cve/CVE-2026-118312/","title":"CVE-2026-118312: Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.6 CRITICAL. Priority 12.8 of 100.","summary":"Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T15:59:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.8,"kev":null,"epss":{"score":0.00307,"percentile":0.23557},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118310","url":"https://patchfirst.co/cve/CVE-2026-118310/","title":"CVE-2026-118310: Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.6 CRITICAL. Priority 12.8 of 100.","summary":"Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T15:59:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.8,"kev":null,"epss":{"score":0.00307,"percentile":0.23557},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118309","url":"https://patchfirst.co/cve/CVE-2026-118309/","title":"CVE-2026-118309: Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.6 CRITICAL. Priority 12.8 of 100.","summary":"Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T16:00:02.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.8,"kev":null,"epss":{"score":0.00307,"percentile":0.23557},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118308","url":"https://patchfirst.co/cve/CVE-2026-118308/","title":"CVE-2026-118308: Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 23.6% of CVEs). CVSS 9.6 CRITICAL. Priority 12.8 of 100.","summary":"Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T16:00:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.8,"kev":null,"epss":{"score":0.00307,"percentile":0.23556},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118355","url":"https://patchfirst.co/cve/CVE-2026-118355/","title":"CVE-2026-118355: Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 22.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:39:49.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.00295,"percentile":0.22174},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118342","url":"https://patchfirst.co/cve/CVE-2026-118342/","title":"CVE-2026-118342: Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 22.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:40:11.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.00295,"percentile":0.22173},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118332","url":"https://patchfirst.co/cve/CVE-2026-118332/","title":"CVE-2026-118332: Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 22.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:40:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.00295,"percentile":0.22173},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118316","url":"https://patchfirst.co/cve/CVE-2026-118316/","title":"CVE-2026-118316: Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.3% (higher than 22.2% of CVEs). CVSS 9.6 CRITICAL. Priority 12.5 of 100.","summary":"Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-29T17:42:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.00295,"percentile":0.22174},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118337","url":"https://patchfirst.co/cve/CVE-2026-118337/","title":"CVE-2026-118337: Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.2% (higher than 9.2% of CVEs). CVSS 9.3 CRITICAL. Priority 9.7 of 100.","summary":"Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-30T14:16:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":9.7,"kev":null,"epss":{"score":0.00195,"percentile":0.09233},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-118333","url":"https://patchfirst.co/cve/CVE-2026-118333/","title":"CVE-2026-118333: Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.2% (higher than 9.2% of CVEs). CVSS 9.3 CRITICAL. Priority 9.7 of 100.","summary":"Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin…","date_published":"2026-10-27T00:00:00.000Z","date_modified":"2026-10-30T14:16:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":9.7,"kev":null,"epss":{"score":0.00195,"percentile":0.09232},"cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113263","url":"https://patchfirst.co/cve/CVE-2026-113263/","title":"CVE-2026-113263: Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. Priority 21.7 of 100.","summary":"Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":21.7,"kev":null,"epss":{"score":0.00465,"percentile":0.40261},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-113072","url":"https://patchfirst.co/cve/CVE-2026-113072/","title":"CVE-2026-113072: Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.8% of CVEs). CVSS 9.6 CRITICAL. Priority 17.2 of 100.","summary":"Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.005,"percentile":0.42813},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113336","url":"https://patchfirst.co/cve/CVE-2026-113336/","title":"CVE-2026-113336: Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.4% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.4245},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113328","url":"https://patchfirst.co/cve/CVE-2026-113328/","title":"CVE-2026-113328: Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42452},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113300","url":"https://patchfirst.co/cve/CVE-2026-113300/","title":"CVE-2026-113300: Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42451},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113252","url":"https://patchfirst.co/cve/CVE-2026-113252/","title":"CVE-2026-113252: Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42451},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113235","url":"https://patchfirst.co/cve/CVE-2026-113235/","title":"CVE-2026-113235: Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42451},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113089","url":"https://patchfirst.co/cve/CVE-2026-113089/","title":"CVE-2026-113089: Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42452},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113023","url":"https://patchfirst.co/cve/CVE-2026-113023/","title":"CVE-2026-113023: Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42451},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113020","url":"https://patchfirst.co/cve/CVE-2026-113020/","title":"CVE-2026-113020: Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T17:10:48.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42452},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113014","url":"https://patchfirst.co/cve/CVE-2026-113014/","title":"CVE-2026-113014: Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 42.5% of CVEs). CVSS 9.6 CRITICAL. Priority 17.1 of 100.","summary":"Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00495,"percentile":0.42452},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-105772","url":"https://patchfirst.co/cve/CVE-2026-105772/","title":"CVE-2026-105772: Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0…","content_text":"Google · ADK TypeScript (@google/adk). Not in CISA KEV. EPSS 0.5% (higher than 43.7% of CVEs). CVSS 9.1 CRITICAL. Priority 17.0 of 100.","summary":"Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-20T20:06:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17,"kev":null,"epss":{"score":0.00513,"percentile":0.43729},"cvss":{"score":9.1,"severity":"CRITICAL","version":"4.0"},"vendor":"Google","product":"ADK TypeScript (@google/adk)","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113342","url":"https://patchfirst.co/cve/CVE-2026-113342/","title":"CVE-2026-113342: Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41061},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113283","url":"https://patchfirst.co/cve/CVE-2026-113283/","title":"CVE-2026-113283: Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41062},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113270","url":"https://patchfirst.co/cve/CVE-2026-113270/","title":"CVE-2026-113270: Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41061},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113261","url":"https://patchfirst.co/cve/CVE-2026-113261/","title":"CVE-2026-113261: Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41062},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113189","url":"https://patchfirst.co/cve/CVE-2026-113189/","title":"CVE-2026-113189: Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41061},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113186","url":"https://patchfirst.co/cve/CVE-2026-113186/","title":"CVE-2026-113186: Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 41.1% of CVEs). CVSS 9.6 CRITICAL. Priority 16.8 of 100.","summary":"Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00475,"percentile":0.41062},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113222","url":"https://patchfirst.co/cve/CVE-2026-113222/","title":"CVE-2026-113222: Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.4034},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113171","url":"https://patchfirst.co/cve/CVE-2026-113171/","title":"CVE-2026-113171: Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40338},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113169","url":"https://patchfirst.co/cve/CVE-2026-113169/","title":"CVE-2026-113169: Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40339},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113138","url":"https://patchfirst.co/cve/CVE-2026-113138/","title":"CVE-2026-113138: Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40339},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113126","url":"https://patchfirst.co/cve/CVE-2026-113126/","title":"CVE-2026-113126: Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40338},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113116","url":"https://patchfirst.co/cve/CVE-2026-113116/","title":"CVE-2026-113116: Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40339},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113056","url":"https://patchfirst.co/cve/CVE-2026-113056/","title":"CVE-2026-113056: Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40338},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113007","url":"https://patchfirst.co/cve/CVE-2026-113007/","title":"CVE-2026-113007: Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40338},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-112992","url":"https://patchfirst.co/cve/CVE-2026-112992/","title":"CVE-2026-112992: Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 40.3% of CVEs). CVSS 9.6 CRITICAL. Priority 16.7 of 100.","summary":"Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:23.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00466,"percentile":0.40339},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113211","url":"https://patchfirst.co/cve/CVE-2026-113211/","title":"CVE-2026-113211: Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.5% (higher than 39.2% of CVEs). CVSS 9.6 CRITICAL. Priority 16.5 of 100.","summary":"Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.5,"kev":null,"epss":{"score":0.00451,"percentile":0.39172},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113084","url":"https://patchfirst.co/cve/CVE-2026-113084/","title":"CVE-2026-113084: Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 36.7% of CVEs). CVSS 9.6 CRITICAL. Priority 16.0 of 100.","summary":"Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-22T23:18:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16,"kev":null,"epss":{"score":0.00424,"percentile":0.36717},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-113078","url":"https://patchfirst.co/cve/CVE-2026-113078/","title":"CVE-2026-113078: Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 36.7% of CVEs). CVSS 9.6 CRITICAL. Priority 16.0 of 100.","summary":"Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to…","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-26T18:39:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16,"kev":null,"epss":{"score":0.00424,"percentile":0.36716},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103091","url":"https://patchfirst.co/cve/CVE-2026-103091/","title":"CVE-2026-103091: Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy…","content_text":"Google · SAM. Not in CISA KEV. EPSS 0.6% (higher than 50.7% of CVEs). CVSS 9.3 CRITICAL. Priority 18.2 of 100.","summary":"Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy…","date_published":"2026-10-19T00:00:00.000Z","date_modified":"2026-10-19T21:13:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.2,"kev":null,"epss":{"score":0.00642,"percentile":0.50738},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"Google","product":"SAM","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102503","url":"https://patchfirst.co/cve/CVE-2026-102503/","title":"CVE-2026-102503: Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress…","content_text":"Google · SAM. Not in CISA KEV. EPSS 0.4% (higher than 37.2% of CVEs). CVSS 9.3 CRITICAL. Priority 15.5 of 100.","summary":"Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress…","date_published":"2026-10-19T00:00:00.000Z","date_modified":"2026-10-19T21:13:39.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.5,"kev":null,"epss":{"score":0.00429,"percentile":0.37207},"cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"vendor":"Google","product":"SAM","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-110916","url":"https://patchfirst.co/cve/CVE-2026-110916/","title":"CVE-2026-110916: Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially…","content_text":"Google · Chrome. Not in CISA KEV. EPSS 0.4% (higher than 30.1% of CVEs). CVSS 9.6 CRITICAL. Priority 14.9 of 100.","summary":"Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially…","date_published":"2026-10-15T00:00:00.000Z","date_modified":"2026-10-19T19:04:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.9,"kev":null,"epss":{"score":0.00363,"percentile":0.30122},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Google","product":"Chrome","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}