Browse All CVEs
33,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-46979 |
medium | 6.5 | 0.0029 | 2026-10-29 | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSof | |
CVE-2026-48294 |
high | 7.4 | 0.0191 | 2026-10-29 | Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS- | |
CVE-2024-24709 |
medium | 4.3 | 0.0019 | 2026-10-29 | Missing Authorization vulnerability in Shareaholic allows Exploiting Incorrectly Configure | |
CVE-2026-0019 |
high | 7.8 | 0.0010 | 2026-10-29 | In SettingsLib, there is a possible way to disable system components due to a logic error | |
CVE-2026-0057 |
low | 3.3 | 0.0006 | 2026-10-29 | In Contacts Provider, there is a possible way to access an incoming call's phone number an | |
CVE-2026-0063 |
critical | 10.0 | 0.0015 | 2026-10-29 | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable ca | |
CVE-2026-0064 |
critical | 10.0 | 0.0012 | 2026-10-29 | In multiple places, there is a possible persistent denial of service due to resource exhau | |
CVE-2026-0068 |
critical | 10.0 | 0.0012 | 2026-10-29 | In createSessionInternal of PackageInstallerService.java, there is a possible method to re | |
CVE-2026-0071 |
critical | 10.0 | 0.0015 | 2026-10-29 | In SettingsLib, there is a possible missing permission check due to a logic error in the c | |
CVE-2026-0081 |
critical | 10.0 | 0.0015 | 2026-10-29 | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. T | |
CVE-2026-0082 |
critical | 10.0 | 0.0016 | 2026-10-29 | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app acces | |
CVE-2026-0083 |
critical | 10.0 | 0.0012 | 2026-10-29 | In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race conditi | |
CVE-2026-0092 |
critical | 10.0 | 0.0022 | 2026-10-29 | In Package Manager, there is a possible device lock controller bypass due to a missing per | |
CVE-2026-10094 |
critical | 9.8 | 0.0038 | 2026-10-29 | A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Rele | |
CVE-2026-11409 |
high | 8.5 | 0.0279 | 2026-10-29 | An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration | |
CVE-2026-11410 |
high | 8.5 | 0.0279 | 2026-10-29 | An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN | |
CVE-2026-11857 |
high | 8.4 | 0.0027 | 2026-10-29 | Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the C | |
CVE-2026-11858 |
high | 8.4 | 0.0013 | 2026-10-29 | Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the C | |
CVE-2026-12256 |
high | 8.8 | 0.0047 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-build | |
CVE-2026-12437 |
high | 8.3 | 0.0030 | 2026-10-29 | Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a r | |
CVE-2026-12438 |
high | 8.3 | 0.0021 | 2026-10-29 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.15 | |
CVE-2026-12439 |
high | 8.8 | 0.0033 | 2026-10-29 | Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a r | |
CVE-2026-12440 |
critical | 9.6 | 0.0025 | 2026-10-29 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 a | |
CVE-2026-12441 |
high | 8.8 | 0.0031 | 2026-10-29 | Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a r | |
CVE-2026-12442 |
high | 8.8 | 0.0040 | 2026-10-29 | Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a | |
CVE-2026-12443 |
high | 8.8 | 0.0061 | 2026-10-29 | Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a re | |
CVE-2026-12444 |
medium | 5.5 | 0.0014 | 2026-10-29 | Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allow | |
CVE-2026-12445 |
high | 7.5 | 0.0016 | 2026-10-29 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker | |
CVE-2026-12446 |
medium | 4.3 | 0.0019 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed | |
CVE-2026-12447 |
high | 8.8 | 0.0043 | 2026-10-29 | Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote a | |
CVE-2026-12448 |
high | 8.8 | 0.0026 | 2026-10-29 | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.15 | |
CVE-2026-12449 |
high | 7.8 | 0.0011 | 2026-10-29 | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a | |
CVE-2026-12450 |
medium | 6.5 | 0.0018 | 2026-10-29 | Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a r | |
CVE-2026-12451 |
high | 8.3 | 0.0018 | 2026-10-29 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a re | |
CVE-2026-12452 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a | |
CVE-2026-12453 |
medium | 4.2 | 0.0018 | 2026-10-29 | Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.1 | |
CVE-2026-12454 |
high | 8.3 | 0.0015 | 2026-10-29 | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote att | |
CVE-2026-12455 |
high | 7.5 | 0.0023 | 2026-10-29 | Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a remote atta | |
CVE-2026-12456 |
medium | 4.2 | 0.0014 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowe | |
CVE-2026-12457 |
medium | 4.2 | 0.0014 | 2026-10-29 | Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowe | |
CVE-2026-12458 |
low | 3.1 | 0.0019 | 2026-10-29 | Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed | |
CVE-2026-12459 |
medium | 6.1 | 0.0018 | 2026-10-29 | Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a | |
CVE-2026-12460 |
medium | 4.2 | 0.0015 | 2026-10-29 | Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827 | |
CVE-2026-12461 |
medium | 6.5 | 0.0024 | 2026-10-29 | Out of bounds read in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a | |
CVE-2026-12462 |
high | 7.5 | 0.0027 | 2026-10-29 | Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker | |
CVE-2026-12463 |
medium | 4.7 | 0.0013 | 2026-10-29 | Inappropriate implementation in Views in Google Chrome on Linux prior to 149.0.7827.155 al | |
CVE-2026-12464 |
high | 8.3 | 0.0022 | 2026-10-29 | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attack | |
CVE-2026-12465 |
high | 8.3 | 0.0024 | 2026-10-29 | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remot | |
CVE-2026-12466 |
high | 8.8 | 0.0043 | 2026-10-29 | Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed | |
CVE-2026-12467 |
high | 8.3 | 0.0022 | 2026-10-29 | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote att |