Browse All CVEs
50,486 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-113029 |
high | 8.8 | 0.0040 | 2026-11-03 | Out of bounds write in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113028 |
high | 8.8 | 0.0031 | 2026-11-03 | Use of uninitialized variable in Media in Google Chrome prior to 156.0.8078.47 allowed a r | |
CVE-2026-113027 |
high | 8.8 | 0.0061 | 2026-11-03 | Type confusion in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113026 |
medium | 6.5 | 0.0042 | 2026-11-03 | Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a re | |
CVE-2026-113025 |
high | 8.8 | 0.0037 | 2026-11-03 | UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113024 |
high | 8.8 | 0.0038 | 2026-11-03 | Confused deputy in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113021 |
high | 8.8 | 0.0038 | 2026-11-03 | Incorrect authorization in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed | |
CVE-2026-113020 |
critical | 9.6 | 0.0050 | 2026-11-03 | Use after free in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113017 |
high | 8.8 | 0.0044 | 2026-11-03 | Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113016 |
high | 8.8 | 0.0028 | 2026-11-03 | Race condition in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113015 |
high | 8.8 | 0.0038 | 2026-11-03 | Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remot | |
CVE-2026-113013 |
high | 8.8 | 0.0033 | 2026-11-03 | Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remo | |
CVE-2026-113012 |
high | 8.8 | 0.0048 | 2026-11-03 | Incomplete cleanup in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-113011 |
high | 8.8 | 0.0030 | 2026-11-03 | Incorrect authorization in CredentialProvider in Google Chrome on on Windows prior to 156. | |
CVE-2026-113010 |
medium | 6.5 | 0.0036 | 2026-11-03 | Incomplete cleanup in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113008 |
high | 8.8 | 0.0028 | 2026-11-03 | Race condition in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a | |
CVE-2026-113006 |
high | 8.8 | 0.0034 | 2026-11-03 | Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a re | |
CVE-2026-113005 |
high | 8.8 | 0.0034 | 2026-11-03 | Missing authorization in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remot | |
CVE-2026-113004 |
high | 8.8 | 0.0032 | 2026-11-03 | Type confusion in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113003 |
high | 8.8 | 0.0042 | 2026-11-03 | Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113002 |
medium | 6.5 | 0.0032 | 2026-11-03 | Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 a | |
CVE-2026-113001 |
high | 8.8 | 0.0036 | 2026-11-03 | Incorrect authorization in Workers in Google Chrome prior to 156.0.8078.47 allowed a remot | |
CVE-2026-113000 |
high | 8.8 | 0.0035 | 2026-11-03 | Information leak in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-112999 |
high | 8.8 | 0.0030 | 2026-11-03 | Incorrect authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-112998 |
high | 8.8 | 0.0042 | 2026-11-03 | Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-112997 |
high | 8.8 | 0.0035 | 2026-11-03 | Information leak in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-112996 |
high | 8.8 | 0.0036 | 2026-11-03 | Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote | |
CVE-2026-112993 |
high | 8.8 | 0.0036 | 2026-11-03 | Missing authorization in Input in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-120931 |
critical | 9.6 | 0.0042 | 2026-11-03 | Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed | |
CVE-2026-120930 |
medium | 5.4 | 0.0018 | 2026-11-03 | Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote | |
CVE-2026-82160 |
low | 3.3 | 0.0022 | 2026-11-03 | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutraliza | |
CVE-2026-121621 |
high | 8.8 | 0.0182 | 2026-11-03 | A command injection vulnerability was found in Argo CD Image Updater, where a proxy URL co | |
CVE-2026-121517 |
low | 1.3 | 0.0029 | 2026-11-03 | A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerabilit | |
CVE-2026-111751 |
high | 8.2 | 0.0066 | 2026-11-03 | Angular is a development platform for building mobile and desktop web applications using T | |
CVE-2026-113212 |
high | 8.3 | 0.0041 | 2026-11-03 | Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to | |
CVE-2026-101437 |
medium | 6.6 | 0.0024 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-101436 |
medium | 4.1 | 0.0014 | 2026-11-03 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-113351 |
high | 8.2 | 0.0049 | 2026-11-03 | libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_Parser | |
CVE-2026-88900 |
high | 8.8 | 0.0069 | 2026-11-03 | 1 PoC | Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. |
CVE-2026-87264 |
high | 7.7 | 0.0030 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-82993 |
high | 8.5 | 0.0030 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-73960 |
high | 7.5 | 0.0047 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-73955 |
high | 7.3 | 0.0033 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-73954 |
high | 8.1 | 0.0039 | 2026-11-03 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (compo | |
CVE-2026-82155 |
high | 7.8 | 0.0038 | 2026-11-03 | Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vul | |
CVE-2026-82154 |
low | 2.4 | 0.0017 | 2026-11-03 | Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic | |
CVE-2026-76894 |
low | 3.1 | 0.0020 | 2026-11-03 | CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataS | |
CVE-2026-121509 |
medium | 5.5 | 0.0038 | 2026-11-03 | A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This | |
CVE-2026-120734 |
medium | 6.5 | 0.0022 | 2026-11-03 | Cleartext transmission of sensitive information in the email configuration test in Devolut | |
CVE-2026-120733 |
high | 7.5 | 0.0025 | 2026-11-03 | Cleartext storage of sensitive information in the user account data in Devolutions Server |