Browse All CVEs
13,201 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-108329 |
high | 8.8 | 0.0050 | 2026-10-29 | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | |
CVE-2026-116647 |
high | 7.1 | 0.0024 | 2026-10-29 | Tanium addressed an improper output sanitization vulnerability in Comply. | |
CVE-2026-116649 |
high | 7.1 | 0.0020 | 2026-10-29 | Tanium addressed an improper output sanitization vulnerability in Enforce. | |
CVE-2026-116656 |
high | 7.5 | 0.0037 | 2026-10-29 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | |
CVE-2026-116662 |
high | 7.5 | 0.0037 | 2026-10-29 | Tanium addressed a compression bomb vulnerability in Enforce. | |
CVE-2026-116676 |
high | 8.8 | 0.0047 | 2026-10-29 | Atlantis is a self-hosted golang application that listens for Terraform pull request event | |
CVE-2026-116682 |
high | 8.6 | 0.0054 | 2026-10-29 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable | |
CVE-2026-57188 |
high | 7.1 | 0.0052 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57202 |
high | 8.1 | 0.0044 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-87086 |
high | 7.5 | 0.0037 | 2026-10-29 | Tanium addressed a denial of service vulnerability in Provision. | |
CVE-2026-88812 |
high | 7.8 | 0.0019 | 2026-10-29 | A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1 | |
CVE-2026-115413 |
high | 7.3 | 0.0010 | 2026-10-29 | Missing token audience validation in the OAuth authentication mode of AWS API MCP Server b | |
CVE-2026-116683 |
high | 7.1 | 0.0038 | 2026-10-29 | CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, | |
CVE-2026-112350 |
high | 8.7 | 0.0095 | 2026-10-29 | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater | |
CVE-2026-112351 |
high | 8.7 | 0.0268 | 2026-10-29 | Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the netwo | |
CVE-2026-112355 |
high | 8.7 | 0.0027 | 2026-10-29 | The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vu | |
CVE-2026-116688 |
high | 8.1 | 0.0050 | 2026-10-29 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 u | |
CVE-2026-116690 |
high | 7.5 | 0.0056 | 2026-10-29 | MLflow is an open source AI engineering platform for agents, large language models, and ma | |
CVE-2026-116693 |
high | 8.7 | 0.0045 | 2026-10-29 | dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the d | |
CVE-2026-57195 |
high | 7.5 | 0.0057 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57200 |
high | 7.5 | 0.0088 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-83831 |
high | 8.8 | 0.0077 | 2026-10-29 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute | |
CVE-2026-85898 |
high | 8.8 | 0.0077 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-57186 |
high | 7.5 | 0.0060 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 | |
CVE-2026-57190 |
high | 7.0 | 0.0068 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-57191 |
high | 8.2 | 0.0059 | 2026-10-29 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asteris | |
CVE-2026-62765 |
high | 7.5 | 0.0044 | 2026-10-29 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-118304 |
high | 8.8 | 0.0027 | 2026-10-29 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote | |
CVE-2026-118307 |
high | 8.8 | 0.0033 | 2026-10-29 | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118311 |
high | 8.8 | 0.0027 | 2026-10-29 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118313 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118314 |
high | 8.8 | 0.0027 | 2026-10-29 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allo | |
CVE-2026-118315 |
high | 8.8 | 0.0026 | 2026-10-29 | Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote | |
CVE-2026-118317 |
high | 8.8 | 0.0032 | 2026-10-29 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacke | |
CVE-2026-118320 |
high | 8.8 | 0.0032 | 2026-10-29 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118327 |
high | 8.8 | 0.0027 | 2026-10-29 | Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attack | |
CVE-2026-118328 |
high | 8.8 | 0.0040 | 2026-10-29 | Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remo | |
CVE-2026-118329 |
high | 8.8 | 0.0039 | 2026-10-29 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allow | |
CVE-2026-118330 |
high | 8.8 | 0.0033 | 2026-10-29 | Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a | |
CVE-2026-118331 |
high | 8.8 | 0.0034 | 2026-10-29 | Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a rem | |
CVE-2026-118334 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote at | |
CVE-2026-118335 |
high | 8.8 | 0.0026 | 2026-10-29 | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 all | |
CVE-2026-118336 |
high | 8.8 | 0.0032 | 2026-10-29 | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a re | |
CVE-2026-118338 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attac | |
CVE-2026-118339 |
high | 8.8 | 0.0032 | 2026-10-29 | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attac | |
CVE-2026-118341 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote | |
CVE-2026-118343 |
high | 8.8 | 0.0026 | 2026-10-29 | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a | |
CVE-2026-118344 |
high | 8.8 | 0.0034 | 2026-10-29 | Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118345 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker | |
CVE-2026-118346 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote att |