Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40505 |
medium | 4.8 | 0.0017 | 2026-10-29 | MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers | |
CVE-2026-40504 |
critical | 9.3 | 0.0066 | 2026-10-29 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity | |
CVE-2026-40503 |
high | 7.1 | 0.0042 | 2026-10-29 | OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows re | |
CVE-2026-40502 |
high | 8.7 | 0.0172 | 2026-10-29 | OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows | |
CVE-2026-5363 |
medium | 5.4 | 0.0009 | 2026-10-29 | Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modu | |
CVE-2026-40947 |
low | 2.9 | 0.0013 | 2026-10-29 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 | |
CVE-2026-40193 |
high | 8.2 | 0.0043 | 2026-10-29 | maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP inj | |
CVE-2026-40316 |
high | 8.8 | 0.0042 | 2026-10-29 | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, | |
CVE-2026-40192 |
high | 8.7 | 0.0070 | 2026-10-29 | Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amoun | |
CVE-2026-6388 |
— | — | 0.0036 | 2026-10-29 | A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with perm | |
CVE-2026-1711 |
medium | 4.8 | 0.0019 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting | |
CVE-2026-1564 |
medium | 5.1 | 0.0019 | 2026-10-29 | Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerabilit | |
CVE-2026-40186 |
medium | 6.1 | 0.0025 | 2026-10-29 | ApostropheCMS is an open-source Node.js content management system. A regression introduced | |
CVE-2026-22676 |
high | 8.5 | 0.0011 | 2026-10-29 | Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that | |
CVE-2026-6385 |
medium | 6.5 | 0.0045 | 2026-10-29 | A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providin | |
CVE-2026-6384 |
high | 7.8 | 0.0027 | 2026-10-29 | A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading comp | |
CVE-2026-6364 |
medium | 6.5 | 0.0026 | 2026-10-29 | Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6363 |
high | 8.8 | 0.0029 | 2026-10-29 | Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to | |
CVE-2026-6362 |
medium | 4.3 | 0.0023 | 2026-10-29 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6361 |
high | 8.3 | 0.0032 | 2026-10-29 | Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed | |
CVE-2026-6360 |
high | 8.8 | 0.0026 | 2026-10-29 | Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote att | |
CVE-2026-6359 |
high | 8.8 | 0.0027 | 2026-10-29 | Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remo | |
CVE-2026-6358 |
high | 8.8 | 0.0029 | 2026-10-29 | Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote | |
CVE-2026-6319 |
high | 7.5 | 0.0030 | 2026-10-29 | Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a r | |
CVE-2026-6318 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6317 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker | |
CVE-2026-6316 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker | |
CVE-2026-6315 |
high | 8.8 | 0.0033 | 2026-10-29 | Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed | |
CVE-2026-6314 |
high | 8.3 | 0.0027 | 2026-10-29 | Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6313 |
low | 3.1 | 0.0023 | 2026-10-29 | Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a | |
CVE-2026-6312 |
low | 3.1 | 0.0023 | 2026-10-29 | Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allo | |
CVE-2026-6311 |
high | 8.3 | 0.0028 | 2026-10-29 | Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 all | |
CVE-2026-6310 |
high | 8.3 | 0.0026 | 2026-10-29 | Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker | |
CVE-2026-6309 |
high | 8.3 | 0.0026 | 2026-10-29 | Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker w | |
CVE-2026-6308 |
high | 7.5 | 0.0030 | 2026-10-29 | Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote atta | |
CVE-2026-6307 |
high | 8.8 | 0.0037 | 2026-10-29 | Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6306 |
high | 8.8 | 0.0035 | 2026-10-29 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote a | |
CVE-2026-6305 |
high | 8.8 | 0.0035 | 2026-10-29 | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote a | |
CVE-2026-6304 |
high | 8.3 | 0.0026 | 2026-10-29 | Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6303 |
high | 8.8 | 0.0038 | 2026-10-29 | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacke | |
CVE-2026-6302 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker | |
CVE-2026-6301 |
high | 8.8 | 0.0038 | 2026-10-29 | Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attac | |
CVE-2026-6300 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker t | |
CVE-2026-6299 |
high | 8.8 | 0.0035 | 2026-10-29 | Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote atta | |
CVE-2026-6298 |
medium | 4.3 | 0.0049 | 2026-10-29 | Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote att | |
CVE-2026-6297 |
high | 8.3 | 0.0021 | 2026-10-29 | Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a | |
CVE-2026-6296 |
critical | 9.6 | 0.0056 | 2026-10-29 | Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote at | |
CVE-2026-40919 |
medium | 5.5 | 0.0034 | 2026-10-29 | A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmw | |
CVE-2026-40918 |
medium | 5.5 | 0.0020 | 2026-10-29 | A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensi | |
CVE-2026-40917 |
medium | 5.0 | 0.0017 | 2026-10-29 | A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp() |