Known CVEs for Windows applications shipped via the Microsoft Windows Package Manager community repository. Mapping is best-effort and limited to packages with a confirmed NVD CPE identity. Source: NVD (updated 3h ago) . Critical, last 90 days Highest severity critical 9.6 CVE-2026-110165 Oct 13, 2026 Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) critical 9.6 CVE-2026-110161 Oct 13, 2026 Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Critical) critical 9.6 CVE-2026-110159 Oct 13, 2026 Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) critical 9.6 CVE-2026-110152 Oct 13, 2026 Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) critical 9.6 CVE-2026-110149 Oct 13, 2026 Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) critical 9.6 CVE-2026-110142 Oct 13, 2026 Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) critical 9.6 CVE-2026-110136 Oct 13, 2026 Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) critical 9.4 CVE-2026-88092 Oct 13, 2026 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. Affects Visual Studio BuildTools 2026 Visual Studio BuildTools 2022 Microsoft ASP.NET Core Hosting Bundle 8.0 Microsoft ASP.NET Core Runtime 9.0 Visual Studio Community 2022 Microsoft ASP.NET Core Hosting Bundle 9.0 Microsoft ASP.NET Core Runtime 8.0 Microsoft ASP.NET Core Runtime 10.0 + 24 more Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. critical 10.0 CVE-2026-97229 Oct 13, 2026 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code... Affects GLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code... critical 9.6 CVE-2026-86360 Oct 6, 2026 Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerab... Affects Dell System Update

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerab... New advisories this month medium 6.7 CVE-2026-111096 Oct 15, 2026 In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible Affects JetBrains TeamCity T TeamCityCLI In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible high 8.0 CVE-2026-111095 Oct 15, 2026 In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible Affects JetBrains TeamCity T TeamCityCLI In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible high 8.1 CVE-2026-111094 Oct 15, 2026 In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible Affects JetBrains TeamCity T TeamCityCLI In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible high 8.8 CVE-2026-110172 Oct 13, 2026 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) high 8.8 CVE-2026-110171 Oct 13, 2026 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) medium 4.3 CVE-2026-110170 Oct 13, 2026 Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) high 8.8 CVE-2026-110169 Oct 13, 2026 Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) high 8.8 CVE-2026-110168 Oct 13, 2026 Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) high 8.8 CVE-2026-110167 Oct 13, 2026 Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) high 8.8 CVE-2026-110166 Oct 13, 2026 Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) Affects Google Chrome Google Chrome (EXE) Google Chrome Beta (EXE) Google Chrome Canary Google Chrome Beta Google Chrome Dev (EXE) Google Chrome Dev Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)