Browse All CVEs
13,586 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-68750 |
high | 8.2 | 0.0080 | 2026-10-29 | Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrrene html_sa | |
CVE-2024-39024 |
high | 8.8 | 0.0079 | 2026-10-29 | In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execu | |
CVE-2026-11803 |
high | 7.8 | 0.0019 | 2026-10-29 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bo | |
CVE-2026-19111 |
high | 8.6 | 0.0052 | 2026-10-29 | Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_mem | |
CVE-2026-19137 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19138 |
high | 8.3 | 0.0033 | 2026-10-29 | Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a | |
CVE-2026-19139 |
high | 7.4 | 0.0009 | 2026-10-29 | Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a l | |
CVE-2026-19140 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker w | |
CVE-2026-19141 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a | |
CVE-2026-19142 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19143 |
high | 8.6 | 0.0013 | 2026-10-29 | Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to | |
CVE-2026-19144 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19145 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote atta | |
CVE-2026-19147 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote | |
CVE-2026-19148 |
high | 8.3 | 0.0030 | 2026-10-29 | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a rem | |
CVE-2026-19150 |
high | 8.8 | 0.0041 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19151 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to | |
CVE-2026-19152 |
high | 8.3 | 0.0030 | 2026-10-29 | Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 all | |
CVE-2026-19153 |
high | 8.1 | 0.0033 | 2026-10-29 | Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922 | |
CVE-2026-19154 |
high | 8.3 | 0.0035 | 2026-10-29 | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remot | |
CVE-2026-19155 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attac | |
CVE-2026-19156 |
high | 7.5 | 0.0025 | 2026-10-29 | Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker | |
CVE-2026-19158 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19159 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19162 |
high | 8.8 | 0.0041 | 2026-10-29 | Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attack | |
CVE-2026-19163 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19165 |
high | 7.5 | 0.0027 | 2026-10-29 | Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker | |
CVE-2026-19168 |
high | 8.8 | 0.0041 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19169 |
high | 8.8 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 1 | |
CVE-2026-19172 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19173 |
high | 8.3 | 0.0034 | 2026-10-29 | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote atta | |
CVE-2026-19174 |
high | 8.8 | 0.0041 | 2026-10-29 | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19176 |
high | 7.5 | 0.0053 | 2026-10-29 | Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker | |
CVE-2026-19177 |
high | 8.3 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 | |
CVE-2026-1289 |
high | 7.8 | 0.0019 | 2026-10-29 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After- | |
CVE-2026-43627 |
high | 8.5 | 0.0020 | 2026-10-29 | llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llam | |
CVE-2026-43628 |
high | 8.5 | 0.0023 | 2026-10-29 | llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read v | |
CVE-2026-48079 |
high | 7.4 | 0.0050 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48080 |
high | 8.0 | 0.0047 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48081 |
high | 8.1 | 0.0024 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-48084 |
high | 7.4 | 0.0039 | 2026-10-29 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-53984 |
high | 8.8 | 0.0073 | 2026-10-29 | Ground Station prior to 0.6.0 contains an unauthenticated database-destruction and arbitra | |
CVE-2026-62857 |
high | 8.8 | 0.0042 | 2026-10-29 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub. | |
CVE-2026-63637 |
high | 8.6 | 0.0041 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.8, maybeQuoteArg in g | |
CVE-2026-63725 |
high | 8.6 | 0.0044 | 2026-10-29 | sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.p | |
CVE-2026-64665 |
high | 8.1 | 0.0054 | 2026-10-29 | Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.74.1 and | |
CVE-2026-67422 |
high | 7.5 | 0.0061 | 2026-10-29 | pymdown-extensions is a collection of extensions for the Python Markdown library. In versi | |
CVE-2026-67434 |
high | 7.3 | 0.0106 | 2026-10-29 | PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding stan | |
CVE-2026-67621 |
high | 7.2 | 0.0042 | 2026-10-29 | Flowise through 3.1.4 contains a missing authorization vulnerability that allows authentic | |
CVE-2026-67622 |
high | 8.5 | 0.0048 | 2026-10-29 | Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the Op |