Browse All CVEs
34,099 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-27783 |
medium | 4.3 | 0.0035 | 2026-10-29 | Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on | |
CVE-2026-28699 |
high | 8.1 | 0.0055 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to b | |
CVE-2026-28705 |
medium | 5.3 | 0.0045 | 2026-10-29 | Gitea versions before 1.25.5 use release tag names and asset names as filesystem path comp | |
CVE-2026-28737 |
high | 8.7 | 0.0041 | 2026-10-29 | Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the ext | |
CVE-2026-28740 |
high | 7.1 | 0.0032 | 2026-10-29 | Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private | |
CVE-2026-28744 |
high | 8.1 | 0.0043 | 2026-10-29 | Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with | |
CVE-2026-45488 |
medium | 5.4 | 0.0036 | 2026-10-29 | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium- | |
CVE-2026-45489 |
medium | 6.5 | 0.0088 | 2026-10-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | |
CVE-2026-55945 |
medium | 4.2 | 0.0019 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-56645 |
high | 8.8 | 0.0082 | 2026-10-29 | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attac | |
CVE-2026-56646 |
medium | 6.5 | 0.0092 | 2026-10-29 | Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-bas | |
CVE-2026-57974 |
high | 8.8 | 0.0082 | 2026-10-29 | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized a | |
CVE-2026-57975 |
high | 7.5 | 0.0061 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-57977 |
high | 7.1 | 0.0058 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-57981 |
high | 8.8 | 0.0082 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57983 |
high | 8.7 | 0.0065 | 2026-10-29 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57984 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57985 |
high | 7.6 | 0.0072 | 2026-10-29 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attack | |
CVE-2026-57986 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57987 |
medium | 6.5 | 0.0087 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-57988 |
high | 7.1 | 0.0076 | 2026-10-29 | Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-57991 |
high | 7.4 | 0.0104 | 2026-10-29 | Improper link resolution before file access ('link following') in Microsoft Edge (Chromium | |
CVE-2026-57992 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-57993 |
high | 7.4 | 0.0088 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-58276 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58278 |
medium | 5.4 | 0.0040 | 2026-10-29 | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthoriz | |
CVE-2026-58282 |
high | 8.1 | 0.0042 | 2026-10-29 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58283 |
high | 8.1 | 0.0044 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58284 |
high | 8.3 | 0.0056 | 2026-10-29 | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58285 |
high | 8.3 | 0.0061 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58286 |
high | 8.1 | 0.0042 | 2026-10-29 | Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker | |
CVE-2026-58287 |
high | 8.3 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58288 |
high | 8.3 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58289 |
critical | 9.0 | 0.0199 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58290 |
high | 7.5 | 0.0043 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58291 |
medium | 6.1 | 0.0099 | 2026-10-29 | Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) all | |
CVE-2026-58292 |
high | 7.5 | 0.0048 | 2026-10-29 | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attack | |
CVE-2026-58293 |
high | 8.1 | 0.0061 | 2026-10-29 | External control of file name or path in Microsoft Edge (Chromium-based) allows an unautho | |
CVE-2026-58294 |
high | 7.5 | 0.0061 | 2026-10-29 | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execu | |
CVE-2026-58295 |
high | 8.3 | 0.0051 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-58296 |
high | 7.1 | 0.0054 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for An | |
CVE-2026-58297 |
high | 7.1 | 0.0054 | 2026-10-29 | Exposure of private personal information to an unauthorized actor in Microsoft Edge for An | |
CVE-2026-58298 |
high | 7.2 | 0.0041 | 2026-10-29 | Improper neutralization of input during web page generation ('cross-site scripting') in Mi | |
CVE-2026-58299 |
high | 7.5 | 0.0047 | 2026-10-29 | Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an | |
CVE-2026-58300 |
medium | 6.2 | 0.0045 | 2026-10-29 | Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to d | |
CVE-2026-58418 |
medium | 6.5 | 0.0031 | 2026-10-29 | SSRF via HTTP Redirect in Repository Migration | |
CVE-2026-58419 |
high | 7.5 | 0.0038 | 2026-10-29 | Notification API leaks private issue metadata after access revocation | |
CVE-2026-58421 |
high | 7.5 | 0.0040 | 2026-10-29 | Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service | |
CVE-2026-58422 |
critical | 9.8 | 0.0043 | 2026-10-29 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disable | |
CVE-2026-58423 |
high | 7.7 | 0.0039 | 2026-10-29 | LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to pr |