Browse All CVEs
34,218 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-107256 |
— | — | 0.0018 | 2026-10-30 | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield a | |
CVE-2026-107253 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal Orphans Media. This issue affects Orphans Media versions: *.*. | |
CVE-2026-107254 |
medium | 4.8 | 0.0022 | 2026-10-30 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authentic | |
CVE-2026-107251 |
medium | 6.5 | 0.0020 | 2026-10-30 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) | |
CVE-2026-107252 |
medium | 5.4 | 0.0015 | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulne | |
CVE-2026-107250 |
medium | 5.9 | 0.0020 | 2026-10-30 | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. | |
CVE-2026-107249 |
critical | 9.8 | 0.0039 | 2026-10-30 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-20588 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This c | |
CVE-2026-20589 |
medium | 6.7 | 0.0011 | 2026-10-30 | In venc, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-20586 |
high | 8.8 | 0.0039 | 2026-10-30 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could | |
CVE-2026-20587 |
medium | 6.7 | 0.0011 | 2026-10-30 | In mtee, there is a possible escalation of privilege due to type confusion. This could lea | |
CVE-2026-20579 |
medium | 6.7 | 0.0011 | 2026-10-30 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to | |
CVE-2026-18629 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process a | |
CVE-2026-19199 |
— | — | 0.0014 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper system calls to a | |
CVE-2026-74912 |
— | — | 0.0014 | 2026-10-30 | On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping | |
CVE-2026-74915 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca | |
CVE-2026-65586 |
— | — | 0.0014 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65584 |
— | — | 0.0018 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2026-65587 |
— | — | 0.0014 | 2026-10-30 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process ca | |
CVE-2026-11822 |
medium | 6.8 | 0.0019 | 2026-10-30 | SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text se | |
CVE-2026-91920 |
medium | 6.5 | 0.0024 | 2026-10-30 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to | |
CVE-2026-15466 |
— | — | 0.0018 | 2026-10-30 | Software installed and run as a non-privileged user may conduct improper GPU system calls | |
CVE-2025-6170 |
low | 2.5 | 0.0032 | 2026-10-30 | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsi | |
CVE-2026-112922 |
low | 3.3 | 0.0014 | 2026-10-30 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by ent | |
CVE-2026-118475 |
low | 3.6 | 0.0011 | 2026-10-30 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing ma | |
CVE-2026-15801 |
high | 8.0 | 0.0048 | 2026-10-30 | A vulnerability was found in CRI-O related to the container checkpoint and restore feature | |
CVE-2026-76031 |
high | 8.8 | 0.0030 | 2026-10-30 | Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-76029 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-76030 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote a | |
CVE-2026-76026 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote att | |
CVE-2026-76027 |
medium | 4.3 | 0.0022 | 2026-10-30 | Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-76028 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-76025 |
high | 8.8 | 0.0030 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-119272 |
medium | 4.3 | 0.0016 | 2026-10-30 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-76024 |
medium | 6.5 | 0.0022 | 2026-10-30 | Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-119270 |
high | 8.8 | 0.0025 | 2026-10-30 | Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed | |
CVE-2026-119271 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t | |
CVE-2026-119268 |
high | 8.8 | 0.0024 | 2026-10-30 | Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attac | |
CVE-2026-119269 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119266 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119267 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119263 |
critical | 9.6 | 0.0027 | 2026-10-30 | Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a r | |
CVE-2026-119264 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacke | |
CVE-2026-119265 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attack | |
CVE-2026-119262 |
high | 8.8 | 0.0028 | 2026-10-30 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote a | |
CVE-2026-119260 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119261 |
critical | 9.6 | 0.0028 | 2026-10-30 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-118947 |
medium | 4.3 | 0.0020 | 2026-10-30 | A flaw was found in the UMA resource registration endpoint of the keycloak-services compon | |
CVE-2026-118959 |
medium | 5.4 | 0.0019 | 2026-10-30 | A flaw was found in the required action provider mechanism of Keycloak. The issue occurs w | |
CVE-2026-112602 |
— | — | 0.0014 | 2026-10-30 | An authorization issue was addressed with improved state management. This issue is fixed i |