Browse All CVEs
13,201 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14009 |
high | 8.8 | 0.0034 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14011 |
high | 8.1 | 0.0033 | 2026-10-29 | Out of bounds read in SurfaceCapture in Google Chrome prior to 150.0.7871.47 allowed a rem | |
CVE-2026-14018 |
high | 7.8 | 0.0014 | 2026-10-29 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a loc | |
CVE-2026-14024 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14025 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Views in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14027 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in SignIn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-14032 |
high | 8.1 | 0.0032 | 2026-10-29 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed an atta | |
CVE-2026-14036 |
high | 8.8 | 0.0034 | 2026-10-29 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allow | |
CVE-2026-14040 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an attacker w | |
CVE-2026-14041 |
high | 8.8 | 0.0034 | 2026-10-29 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14060 |
high | 7.8 | 0.0013 | 2026-10-29 | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior | |
CVE-2026-14064 |
high | 7.5 | 0.0036 | 2026-10-29 | Use after free in PageInfo in Google Chrome on Android prior to 150.0.7871.47 allowed a re | |
CVE-2026-14067 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a | |
CVE-2026-14078 |
high | 8.8 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in WebRTC in Google Chrome prior to 150.0.7871. | |
CVE-2026-14084 |
high | 8.8 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 150.0.7 | |
CVE-2026-14086 |
high | 8.8 | 0.0041 | 2026-10-29 | Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a r | |
CVE-2026-14087 |
high | 8.8 | 0.0037 | 2026-10-29 | Heap buffer overflow in WebNN in Google Chrome on Windows prior to 150.0.7871.47 allowed a | |
CVE-2026-14090 |
high | 8.1 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in CameraCapture in Google Chrome on ChromeOS p | |
CVE-2026-14091 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-14094 |
high | 7.8 | 0.0011 | 2026-10-29 | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a l | |
CVE-2026-14099 |
high | 8.8 | 0.0032 | 2026-10-29 | Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a | |
CVE-2026-14102 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14107 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Scheduling in Google Chrome prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-14108 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in PDFium in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-14111 |
high | 8.1 | 0.0038 | 2026-10-29 | Use after free in WebProtect in Google Chrome prior to 150.0.7871.47 allowed an attacker w | |
CVE-2026-14114 |
high | 7.5 | 0.0023 | 2026-10-29 | Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0. | |
CVE-2026-14115 |
high | 7.5 | 0.0030 | 2026-10-29 | Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 | |
CVE-2026-14122 |
high | 8.1 | 0.0029 | 2026-10-29 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows p | |
CVE-2026-14124 |
high | 7.8 | 0.0012 | 2026-10-29 | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 15 | |
CVE-2026-14149 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in Audio in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14151 |
high | 8.3 | 0.0033 | 2026-10-29 | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-52193 |
high | 7.5 | 0.0051 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52195 |
high | 7.5 | 0.0052 | 2026-10-29 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote a | |
CVE-2026-52197 |
high | 7.5 | 0.0049 | 2026-10-29 | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a de | |
CVE-2026-56320 |
high | 7.1 | 0.0028 | 2026-10-29 | Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that a | |
CVE-2026-54592 |
high | 7.5 | 0.0033 | 2026-10-29 | Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In vers | |
CVE-2026-20458 |
high | 7.5 | 0.0033 | 2026-10-29 | In Modem, there is a possible memory corruption due to a missing bounds check. This could | |
CVE-2026-7829 |
high | 7.2 | 0.0085 | 2026-10-29 | UltraVNC repeater through 1.8.2.2 contains a post-authentication out-of-bounds write in th | |
CVE-2026-7830 |
high | 7.4 | 0.0029 | 2026-10-29 | UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication sc | |
CVE-2026-7831 |
high | 7.6 | 0.0074 | 2026-10-29 | UltraVNC viewer through 1.8.2.2 contains an off-by-one stack buffer overflow in the RFB Se | |
CVE-2026-7838 |
high | 8.7 | 0.0187 | 2026-10-29 | UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap buffer over | |
CVE-2026-11823 |
high | 7.5 | 0.0046 | 2026-10-29 | The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injecti | |
CVE-2026-12579 |
high | 7.4 | 0.0046 | 2026-10-29 | AS228T with Authentication Bypass Vulnerability | |
CVE-2026-14193 |
high | 7.5 | 0.0046 | 2026-10-29 | DVP80ES300T with Improper Validation of Array Index Vulnerability | |
CVE-2026-12575 |
high | 7.5 | 0.0046 | 2026-10-29 | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | |
CVE-2026-12576 |
high | 7.5 | 0.0023 | 2026-10-29 | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communica | |
CVE-2026-12577 |
high | 8.7 | 0.0043 | 2026-10-29 | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | |
CVE-2026-50043 |
high | 8.6 | 0.0171 | 2026-10-29 | Improper neutralization of special elements used in an OS command ('OS Command Injection') | |
CVE-2026-13323 |
high | 8.7 | 0.0033 | 2026-10-29 | In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-supplied HTML f | |
CVE-2026-53902 |
high | 7.1 | 0.0034 | 2026-10-29 | MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/pro |