Browse All CVEs
3,586 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-13773 |
critical | 10.0 | 0.0610 | 2026-10-29 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub | |
CVE-2026-7663 |
critical | 9.8 | 0.0052 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.9.6 could allow unauthenticated attackers to access prote | |
CVE-2026-7803 |
critical | 9.8 | 0.0064 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due to improper | |
CVE-2026-7871 |
critical | 9.8 | 0.0069 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute arbitrary | |
CVE-2026-7873 |
critical | 9.9 | 0.0155 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary | |
CVE-2026-7874 |
critical | 9.1 | 0.0027 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow disclosure of all stored creden | |
CVE-2026-11541 |
critical | 9.8 | 0.0042 | 2026-10-29 | IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Appl | |
CVE-2026-50003 |
critical | 9.3 | 0.0066 | 2026-10-29 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET stora | |
CVE-2026-58449 |
critical | 9.3 | 0.0135 | 2026-10-29 | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose func | |
CVE-2026-13775 |
critical | 9.8 | 0.0032 | 2026-10-29 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | |
CVE-2026-13776 |
critical | 9.8 | 0.0035 | 2026-10-29 | Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13780 |
critical | 9.6 | 0.0043 | 2026-10-29 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-13781 |
critical | 9.6 | 0.0043 | 2026-10-29 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 | |
CVE-2026-13782 |
critical | 10.0 | 0.0032 | 2026-10-29 | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13785 |
critical | 9.6 | 0.0032 | 2026-10-29 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13789 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | |
CVE-2026-13792 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13796 |
critical | 9.6 | 0.0032 | 2026-10-29 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-13797 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7 | |
CVE-2026-13798 |
critical | 9.6 | 0.0037 | 2026-10-29 | Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13843 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior | |
CVE-2026-13846 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-13851 |
critical | 9.1 | 0.0031 | 2026-10-29 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android p | |
CVE-2026-13852 |
critical | 9.1 | 0.0031 | 2026-10-29 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android p | |
CVE-2026-13853 |
critical | 9.6 | 0.0031 | 2026-10-29 | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-13854 |
critical | 9.6 | 0.0031 | 2026-10-29 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13859 |
critical | 9.6 | 0.0038 | 2026-10-29 | Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a re | |
CVE-2026-13861 |
critical | 9.6 | 0.0031 | 2026-10-29 | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13869 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remo | |
CVE-2026-13872 |
critical | 9.1 | 0.0029 | 2026-10-29 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android p | |
CVE-2026-13878 |
critical | 9.6 | 0.0031 | 2026-10-29 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13880 |
critical | 9.6 | 0.0031 | 2026-10-29 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-13882 |
critical | 9.6 | 0.0024 | 2026-10-29 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp | |
CVE-2026-13883 |
critical | 9.6 | 0.0041 | 2026-10-29 | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13901 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13909 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowe | |
CVE-2026-13920 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 1 | |
CVE-2026-13934 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 15 | |
CVE-2026-14017 |
critical | 9.6 | 0.0034 | 2026-10-29 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14037 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a r | |
CVE-2026-14038 |
critical | 9.3 | 0.0033 | 2026-10-29 | Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 150.0 | |
CVE-2026-14043 |
critical | 9.6 | 0.0034 | 2026-10-29 | Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14044 |
critical | 9.6 | 0.0028 | 2026-10-29 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-14055 |
critical | 9.6 | 0.0034 | 2026-10-29 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows pri | |
CVE-2026-14056 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-14093 |
critical | 9.6 | 0.0032 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-14095 |
critical | 9.6 | 0.0032 | 2026-10-29 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14097 |
critical | 9.6 | 0.0032 | 2026-10-29 | Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871 | |
CVE-2026-14101 |
critical | 9.6 | 0.0033 | 2026-10-29 | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 | |
CVE-2026-14104 |
critical | 9.8 | 0.0052 | 2026-10-29 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150 |