Threats affecting pkg:generic/flyway

171,869 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.6	EPSS 0.3%	CVE-2026-106419ANGLE · Chromium CVE-2026-106419: Use after free Critical9.6EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106419 CVE-2026-106419 is a use-after-free vulnerability in the ANGLE component of Chromium. This flaw affects Chromium versions prior to 155.0.4283.48 and was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. There are no known exploits in the wild at this time. EPSS 0.3%Report on CVE-2026-106419 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Critical	9.6	EPSS 0.3%	CVE-2026-106414Mobile · Chromium CVE-2026-106414: Improper input validation Critical9.6EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106414 CVE-2026-106414 is a vulnerability in Chromium related to improper input validation in the mobile context. Affected versions are up to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106414 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.5	EPSS 0.2%	CVE-2026-106408Mobile · Chromium CVE-2026-106408: Protection mechanism failure Medium6.5EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106408 CVE-2026-106408 is a vulnerability in Chromium related to a protection mechanism failure on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106408 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106406Mobile · Chromium CVE-2026-106406: Missing authorization Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106406 CVE-2026-106406 is a vulnerability in Chromium related to missing authorization in the mobile context. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106406 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.0	EPSS <0.1%	CVE-2026-106405CustomTabs · Chromium CVE-2026-106405: Race condition Medium6.0EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106405 CVE-2026-106405 is a race condition vulnerability in the CustomTabs component of Chromium. Affected versions are those before 155.0.4283.48, with the issue fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS <0.1%Report on CVE-2026-106405 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106400Messages · Chromium CVE-2026-106400: Clickjacking Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106400 CVE-2026-106400 is a clickjacking vulnerability affecting Chromium-based Microsoft products. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106400 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.1	EPSS 0.2%	CVE-2026-106397Mobile · Chromium CVE-2026-106397: Incorrect authorization Medium6.1EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106397 CVE-2026-106397 is an incorrect authorization vulnerability affecting the Chromium component in Microsoft products. The issue was addressed in version 155.0.4283.48. No CVSS score or detailed impact description is provided. EPSS 0.2%Report on CVE-2026-106397 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.7	EPSS 0.2%	CVE-2026-106395Dawn · Chromium CVE-2026-106395: Uninitialized resource Medium4.7EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106395 CVE-2026-106395 is a vulnerability in the Chromium component Dawn involving an uninitialized resource. Affected versions are prior to 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106395 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.8	EPSS 0.3%	CVE-2026-106387Mobile · Chromium CVE-2026-106387: Missing authorization High8.8EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106387 CVE-2026-106387 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106387 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106380Chromium CVE-2026-106380: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106380 CVE-2026-106380 is a vulnerability in Chromium involving UI misrepresentation. The issue was addressed and fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106380 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106368Chromium CVE-2026-106368: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106368 CVE-2026-106368 is a vulnerability in Chromium related to UI misrepresentation. It affects versions prior to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106368 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.4	EPSS <0.1%	CVE-2026-106367Mobile · Chromium CVE-2026-106367: Missing authorization High8.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106367 CVE-2026-106367 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS <0.1%Report on CVE-2026-106367 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106366CustomTabs · Chromium CVE-2026-106366: Incomplete cleanup Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106366 CVE-2026-106366 is a vulnerability in Chromium related to incomplete cleanup in the CustomTabs component. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106366 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.5	EPSS 0.3%	CVE-2026-106361Microsoft · Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile Medium6.5EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106361 CVE-2026-106361 is a vulnerability in Chromium related to incorrect provision of specified functionality on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106361 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.5	EPSS 0.2%	CVE-2026-106353Mobile · Chromium CVE-2026-106353: Improper input validation Medium6.5EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106353 CVE-2026-106353 is a vulnerability in Chromium related to improper input validation in the mobile component. Affected versions include all versions prior to 155.0.4283.48, which contains the fix. EPSS 0.2%Report on CVE-2026-106353 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106337Chromium CVE-2026-106337: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106337 CVE-2026-106337 is a vulnerability in Microsoft Chromium-based software involving UI misrepresentation. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106337 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.4	EPSS <0.1%	CVE-2026-106326UI · Chromium CVE-2026-106326: Confused deputy Medium4.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106326 CVE-2026-106326 is a vulnerability in Chromium described as a confused deputy issue in the user interface. It affects Microsoft-distributed Chromium versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS <0.1%Report on CVE-2026-106326 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.2	EPSS 0.2%	CVE-2026-106320UI · Chromium CVE-2026-106320: Use of released resource Medium4.2EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106320 CVE-2026-106320 is a vulnerability in Chromium involving the use of a released resource in the user interface. This flaw affects versions prior to and including 155.0.4283.48. A fix is available in version 155.0.4283.48. There are no known exploits in the wild and no CVSS score has been assigned. EPSS 0.2%Report on CVE-2026-106320 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106317FullScreen · Chromium CVE-2026-106317: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106317 CVE-2026-106317 is a vulnerability in Chromium related to UI misrepresentation in FullScreen mode. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106317 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.1	EPSS <0.1%	CVE-2026-106313Browser · Chromium CVE-2026-106313: Incorrect authorization Medium5.1EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106313 CVE-2026-106313 is a vulnerability in Chromium related to incorrect authorization in the browser. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS <0.1%Report on CVE-2026-106313 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26

Page 7 of 8,594