Browse All CVEs
33,176 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-8569 |
high | 8.3 | 0.0025 | 2026-10-29 | Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a re | |
CVE-2026-8570 |
medium | 6.5 | 0.0025 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to | |
CVE-2026-8571 |
high | 8.3 | 0.0021 | 2026-10-29 | Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 | |
CVE-2026-8572 |
low | 3.1 | 0.0016 | 2026-10-29 | Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778 | |
CVE-2026-8573 |
high | 8.3 | 0.0023 | 2026-10-29 | Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a r | |
CVE-2026-8574 |
high | 8.3 | 0.0018 | 2026-10-29 | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remot | |
CVE-2026-8575 |
high | 8.3 | 0.0018 | 2026-10-29 | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker wh | |
CVE-2026-8576 |
medium | 4.3 | 0.0015 | 2026-10-29 | Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0 | |
CVE-2026-8577 |
high | 8.8 | 0.0025 | 2026-10-29 | Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attack | |
CVE-2026-8578 |
low | 3.1 | 0.0016 | 2026-10-29 | Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remo | |
CVE-2026-8579 |
low | 3.1 | 0.0014 | 2026-10-29 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.16 | |
CVE-2026-8580 |
critical | 9.6 | 0.0021 | 2026-10-29 | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker | |
CVE-2026-8581 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker t | |
CVE-2026-8582 |
medium | 5.3 | 0.0019 | 2026-10-29 | Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote a | |
CVE-2026-8583 |
medium | 5.3 | 0.0018 | 2026-10-29 | Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.1 | |
CVE-2026-8584 |
medium | 4.2 | 0.0014 | 2026-10-29 | Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allo | |
CVE-2026-8585 |
high | 7.5 | 0.0018 | 2026-10-29 | Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allo | |
CVE-2026-8586 |
medium | 5.5 | 0.0010 | 2026-10-29 | Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowe | |
CVE-2026-8587 |
high | 8.8 | 0.0018 | 2026-10-29 | Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an at | |
CVE-2026-8596 |
high | 8.5 | 0.0061 | 2026-10-29 | Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon S | |
CVE-2026-8597 |
medium | 6.4 | 0.0051 | 2026-10-29 | Missing integrity verification in the Triton inference handler in Amazon SageMaker Python | |
CVE-2026-8629 |
high | 8.6 | 0.0034 | 2026-10-29 | Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users w | |
CVE-2026-8634 |
critical | 9.3 | 0.0095 | 2026-10-29 | Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allo | |
CVE-2026-42847 |
high | 7.1 | 0.0025 | 2026-10-29 | ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a | |
CVE-2026-44429 |
medium | 5.1 | 0.0017 | 2026-10-29 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MC | |
CVE-2026-44430 |
medium | 6.3 | 0.0029 | 2026-10-29 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MC | |
CVE-2026-44647 |
high | 7.1 | 0.0032 | 2026-10-29 | OneDev is a Git server with CI/CD, kanban, and packages. Prior to 15.0.2, there is behavio | |
CVE-2026-44661 |
medium | 4.7 | 0.0018 | 2026-10-29 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, the utcp-http plugin is | |
CVE-2026-44666 |
critical | 9.3 | 0.0038 | 2026-10-29 | HRConvert2 is a self-hosted, drag-and-drop & nosql file conversion server & share tool. Pr | |
CVE-2026-44673 |
— | — | 0.0063 | 2026-10-29 | libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in | |
CVE-2026-44700 |
high | 8.7 | 0.0026 | 2026-10-29 | Elixir WebRTC is an Elixir implementation of the W3C WebRTC API. Prior to 0.15.1 and 0.16. | |
CVE-2026-45369 |
high | 8.3 | 0.0032 | 2026-10-29 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_arg | |
CVE-2026-45370 |
high | 7.7 | 0.0022 | 2026-10-29 | python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() i | |
CVE-2026-45781 |
low | 3.5 | 0.0023 | 2026-10-29 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MC | |
CVE-2026-44427 |
none | — | 0.0047 | 2026-10-29 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MC | |
CVE-2026-44428 |
low | 2.1 | 0.0022 | 2026-10-29 | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MC | |
CVE-2026-45248 |
medium | 6.9 | 0.0036 | 2026-10-29 | Hedera Guardian through 3.5.1 contains an authentication bypass vulnerability in the GET / | |
CVE-2026-6811 |
medium | 6.0 | 0.0037 | 2026-10-29 | Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes whe | |
CVE-2024-36345 |
medium | 4.6 | 0.0011 | 2026-10-29 | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module c | |
CVE-2026-0432 |
high | 8.5 | 0.0010 | 2026-10-29 | Incorrect default permissions in the installation directory for the AMD chipset driver cou | |
CVE-2026-0438 |
medium | 5.4 | 0.0014 | 2026-10-29 | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/ | |
CVE-2026-8612 |
medium | 5.3 | 0.0013 | 2026-10-29 | WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses fro | |
CVE-2023-31309 |
medium | 6.8 | 0.0011 | 2026-10-29 | Improper validation in Power Management Firmware (PMFW) may allow an attacker with privile | |
CVE-2023-31316 |
high | 7.1 | 0.0009 | 2026-10-29 | Improperly preserved integrity of hardware configuration state during a power save/restore | |
CVE-2023-31317 |
high | 8.8 | 0.0010 | 2026-10-29 | Improper restriction of operations within the bounds of a memory buffer in the AMD secure | |
CVE-2024-21962 |
high | 8.6 | 0.0011 | 2026-10-29 | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an ar | |
CVE-2026-0427 |
medium | 4.6 | 0.0011 | 2026-10-29 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privile | |
CVE-2026-0428 |
low | 1.8 | 0.0010 | 2026-10-29 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a m | |
CVE-2026-7373 |
high | 8.5 | 0.0017 | 2026-10-29 | Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a u | |
CVE-2024-21950 |
low | 1.8 | 0.0009 | 2026-10-29 | An out of bounds read in the remote management firmware could allow a privileged attacker |