Browse All CVEs
34,237 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76028 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-76025 |
high | 8.8 | 0.0030 | 2026-10-30 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote atta | |
CVE-2026-119272 |
medium | 4.3 | 0.0016 | 2026-10-30 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-76024 |
medium | 6.5 | 0.0022 | 2026-10-30 | Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-119270 |
high | 8.8 | 0.0025 | 2026-10-30 | Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed | |
CVE-2026-119271 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker t | |
CVE-2026-119268 |
high | 8.8 | 0.0024 | 2026-10-30 | Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attac | |
CVE-2026-119269 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119266 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119267 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119263 |
critical | 9.6 | 0.0027 | 2026-10-30 | Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a r | |
CVE-2026-119264 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacke | |
CVE-2026-119265 |
high | 8.8 | 0.0024 | 2026-10-30 | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attack | |
CVE-2026-119262 |
high | 8.8 | 0.0028 | 2026-10-30 | Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote a | |
CVE-2026-119260 |
high | 8.8 | 0.0024 | 2026-10-30 | Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker | |
CVE-2026-119261 |
critical | 9.6 | 0.0028 | 2026-10-30 | Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote | |
CVE-2026-118947 |
medium | 4.3 | 0.0020 | 2026-10-30 | A flaw was found in the UMA resource registration endpoint of the keycloak-services compon | |
CVE-2026-118959 |
medium | 5.4 | 0.0019 | 2026-10-30 | A flaw was found in the required action provider mechanism of Keycloak. The issue occurs w | |
CVE-2026-112602 |
— | — | 0.0014 | 2026-10-30 | An authorization issue was addressed with improved state management. This issue is fixed i | |
CVE-2026-112605 |
— | — | 0.0014 | 2026-10-30 | This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode | |
CVE-2026-110133 |
medium | 5.8 | 0.0024 | 2026-10-30 | A flaw was found in Ghostscript. When processing a specially crafted TrueType font or docu | |
CVE-2026-13116 |
medium | 4.3 | 0.0044 | 2026-10-30 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Ins | |
CVE-2026-92744 |
high | 8.7 | 0.0026 | 2026-10-29 | 1 PoC | Under certain conditions, privilege manager agent allows a remote unauthenticated attacker |
CVE-2026-107238 |
high | 8.7 | 0.0045 | 2026-10-29 | A vulnerability allowing an authenticated domain user to perform remote code execution (RC | |
CVE-2026-107239 |
high | 8.8 | 0.0065 | 2026-10-29 | A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to pe | |
CVE-2023-22793 |
critical | 9.3 | 0.0053 | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE | |
CVE-2026-107444 |
medium | 4.3 | 0.0020 | 2026-10-29 | A flaw was found in Katello where the Docker Tags repositories API does not properly enfor | |
CVE-2026-112211 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2025-13327 |
medium | 6.3 | 0.0017 | 2026-10-29 | A flaw was found in uv. This vulnerability allows an attacker to execute malicious code du | |
CVE-2026-58013 |
high | 8.2 | 0.0050 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() | |
CVE-2026-58011 |
high | 7.5 | 0.0047 | 2026-10-29 | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_ti | |
CVE-2026-58012 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function whe | |
CVE-2026-58010 |
high | 8.2 | 0.0049 | 2026-10-29 | A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal functio | |
CVE-2026-16118 |
high | 7.1 | 0.0028 | 2026-10-29 | A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_ma | |
CVE-2026-15588 |
medium | 5.3 | 0.0048 | 2026-10-29 | A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` compon | |
CVE-2026-68562 |
medium | 6.2 | 0.0025 | 2026-10-29 | A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write acc | |
CVE-2026-89058 |
high | 7.4 | 0.0026 | 2026-10-29 | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("* | |
CVE-2026-119285 |
medium | 5.9 | 0.0013 | 2026-10-29 | Fiber is an Express inspired web framework written in Go. From 2.52.1 until 2.52.3, the CO | |
CVE-2026-119286 |
high | 7.5 | 0.0042 | 2026-10-29 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 unt | |
CVE-2026-119284 |
medium | 6.9 | 0.0019 | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-115943 |
— | — | 0.0025 | 2026-10-29 | Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of nu | |
CVE-2026-107176 |
medium | 6.8 | 0.0027 | 2026-10-29 | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader | |
CVE-2026-119317 |
medium | 6.0 | 0.0020 | 2026-10-29 | On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could rea | |
CVE-2026-45049 |
high | 8.3 | 0.0033 | 2026-10-29 | Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cr | |
CVE-2026-119282 |
high | 7.3 | 0.0014 | 2026-10-29 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 22.0.2 until 22.7.9 | |
CVE-2026-119283 |
high | 7.5 | 0.0023 | 2026-10-29 | joserfc is a Python library that provides an implementation of several JSON Object Signing | |
CVE-2026-61671 |
high | 8.1 | 0.0016 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched | |
CVE-2026-61673 |
medium | 6.3 | 0.0033 | 2026-10-29 | WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-sit | |
CVE-2026-61645 |
critical | 9.1 | 0.0041 | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation | |
CVE-2026-61654 |
high | 8.3 | 0.0038 | 2026-10-29 | Lightdash is an open source business intelligence platform. In affected versions through 0 |