Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,962 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-10789 |
critical | 9.6 | 0.0070 | 2026-06-22 | A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the M | |
CVE-2026-48519 |
critical | 9.6 | 0.0078 | 2026-06-23 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the " | |
CVE-2026-55447 |
critical | 9.6 | 0.0066 | 2026-06-23 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, by co | |
CVE-2026-53662 |
critical | 9.6 | 0.0030 | 2026-06-23 | immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 u | |
CVE-2026-13028 |
critical | 9.6 | 0.0032 | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke | |
CVE-2026-13032 |
critical | 9.6 | 0.0032 | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacke | |
CVE-2026-53943 |
critical | 9.6 | 0.0045 | 2026-06-24 | Ghost is a Node.js content management system. From until 6.37.0, when Ghost is behind a shared cach | |
CVE-2026-33646 |
critical | 9.6 | 0.0046 | 2026-06-26 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes . | |
CVE-2026-52780 |
critical | 9.6 | 0.0039 | 2026-06-26 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache | |
CVE-2026-13751 |
critical | 9.6 | 0.0020 | 2026-06-29 | Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed ser | |
CVE-2026-13780 |
critical | 9.6 | 0.0043 | 2026-06-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-13781 |
critical | 9.6 | 0.0043 | 2026-06-30 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-13785 |
critical | 9.6 | 0.0032 | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13789 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had comp | |
CVE-2026-13792 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13796 |
critical | 9.6 | 0.0032 | 2026-06-30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-13797 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.47 all | |
CVE-2026-13798 |
critical | 9.6 | 0.0037 | 2026-06-30 | Heap buffer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13843 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0. | |
CVE-2026-13846 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who h | |
CVE-2026-13853 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had | |
CVE-2026-13854 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-13859 |
critical | 9.6 | 0.0038 | 2026-06-30 | Inappropriate implementation in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-13861 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com | |
CVE-2026-13869 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13878 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker | |
CVE-2026-13880 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who h | |
CVE-2026-13882 |
critical | 9.6 | 0.0024 | 2026-06-30 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised th | |
CVE-2026-13883 |
critical | 9.6 | 0.0041 | 2026-06-30 | Type Confusion in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potenti | |
CVE-2026-13901 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote a | |
CVE-2026-13909 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-13920 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871. | |
CVE-2026-13934 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.4 | |
CVE-2026-14017 |
critical | 9.6 | 0.0034 | 2026-06-30 | Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14037 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote atta | |
CVE-2026-14043 |
critical | 9.6 | 0.0034 | 2026-06-30 | Use after free in GetUserMedia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who | |
CVE-2026-14044 |
critical | 9.6 | 0.0028 | 2026-06-30 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had co | |
CVE-2026-14055 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Device Trust in Google Chrome on Windows prior to 150. | |
CVE-2026-14056 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14093 |
critical | 9.6 | 0.0032 | 2026-06-30 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had com | |
CVE-2026-14095 |
critical | 9.6 | 0.0032 | 2026-06-30 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote | |
CVE-2026-14097 |
critical | 9.6 | 0.0032 | 2026-06-30 | Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871.47 allowe | |
CVE-2026-14101 |
critical | 9.6 | 0.0033 | 2026-06-30 | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a | |
CVE-2026-14106 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.4 | |
CVE-2026-14109 |
critical | 9.6 | 0.0034 | 2026-06-30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote att | |
CVE-2026-14113 |
critical | 9.6 | 0.0031 | 2026-06-30 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attack | |
CVE-2026-14120 |
critical | 9.6 | 0.0034 | 2026-06-30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-14152 |
critical | 9.6 | 0.0024 | 2026-06-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attac | |
CVE-2026-14382 |
critical | 9.6 | 0.0028 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed | |
CVE-2026-14387 |
critical | 9.6 | 0.0029 | 2026-07-01 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potent |