Browse All CVEs
13,198 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14389 |
high | 8.3 | 0.0025 | 2026-10-29 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker | |
CVE-2026-14393 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to | |
CVE-2026-14394 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to | |
CVE-2026-14395 |
high | 8.8 | 0.0041 | 2026-10-29 | Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacke | |
CVE-2026-14400 |
high | 8.3 | 0.0024 | 2026-10-29 | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote atta | |
CVE-2026-14401 |
high | 8.3 | 0.0024 | 2026-10-29 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 1 | |
CVE-2026-14403 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to | |
CVE-2026-14407 |
high | 8.8 | 0.0044 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remot | |
CVE-2026-14409 |
high | 7.5 | 0.0036 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remot | |
CVE-2026-14412 |
high | 8.3 | 0.0025 | 2026-10-29 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-14413 |
high | 8.3 | 0.0021 | 2026-10-29 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14415 |
high | 8.8 | 0.0034 | 2026-10-29 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remot | |
CVE-2026-14422 |
high | 8.8 | 0.0037 | 2026-10-29 | Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a rem | |
CVE-2026-14426 |
high | 7.5 | 0.0036 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who | |
CVE-2026-14427 |
high | 8.3 | 0.0026 | 2026-10-29 | Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote atta | |
CVE-2026-14428 |
high | 8.3 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 15 | |
CVE-2026-14429 |
high | 8.3 | 0.0024 | 2026-10-29 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 | |
CVE-2026-14430 |
high | 8.8 | 0.0041 | 2026-10-29 | Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker t | |
CVE-2026-14431 |
high | 8.8 | 0.0050 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to | |
CVE-2026-14432 |
high | 8.8 | 0.0041 | 2026-10-29 | Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to | |
CVE-2026-14440 |
high | 7.6 | 0.0020 | 2026-10-29 | Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's | |
CVE-2026-50284 |
high | 7.1 | 0.0039 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4 | |
CVE-2026-55790 |
high | 7.4 | 0.0046 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4 | |
CVE-2026-50279 |
high | 7.6 | 0.0036 | 2026-10-29 | Craft CMS is a content management system (CMS). IN versions 5.0.0-RC1 and above prior to 5 | |
CVE-2026-55794 |
high | 8.7 | 0.0041 | 2026-10-29 | Craft CMS is a content management system (CMS). In versions 5.9.0 and above prior to 5.10. | |
CVE-2026-13125 |
high | 8.8 | 0.0038 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-13131 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-13132 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57264 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57265 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57266 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57267 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57268 |
high | 8.3 | 0.0045 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57269 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57270 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57271 |
high | 8.3 | 0.0037 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57272 |
high | 8.3 | 0.0039 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57273 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57274 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57275 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57276 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57277 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-57278 |
high | 8.3 | 0.0040 | 2026-10-29 | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS | |
CVE-2026-5821 |
high | 8.1 | 0.0076 | 2026-10-29 | The Image Optimizer plugin for WordPress is vulnerable to arbitrary file deletion in versi | |
CVE-2026-33592 |
high | 7.5 | 0.0052 | 2026-10-29 | An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery | |
CVE-2026-8147 |
high | 8.1 | 0.0055 | 2026-10-29 | In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace AP | |
CVE-2026-9563 |
high | 7.5 | 0.0035 | 2026-10-29 | In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser | |
CVE-2026-13369 |
high | 7.5 | 0.0060 | 2026-10-29 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read v | |
CVE-2026-14336 |
high | 8.2 | 0.0032 | 2026-10-29 | PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.sta | |
CVE-2026-8441 |
high | 7.5 | 0.0046 | 2026-10-29 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'noti |