Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,964 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14387 |
critical | 9.6 | 0.0029 | 2026-07-01 | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potent | |
CVE-2026-14390 |
critical | 9.6 | 0.0025 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-14392 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to pot | |
CVE-2026-14397 |
critical | 9.6 | 0.0024 | 2026-07-01 | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacke | |
CVE-2026-14398 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-14405 |
critical | 9.6 | 0.0050 | 2026-07-01 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute | |
CVE-2026-14411 |
critical | 9.6 | 0.0027 | 2026-07-01 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed | |
CVE-2026-14416 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to pote | |
CVE-2026-14417 |
critical | 9.6 | 0.0034 | 2026-07-01 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | |
CVE-2026-14419 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | |
CVE-2026-14420 |
critical | 9.6 | 0.0034 | 2026-07-01 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14423 |
critical | 9.6 | 0.0038 | 2026-07-01 | Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentia | |
CVE-2026-14424 |
critical | 9.6 | 0.0034 | 2026-07-01 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote attacker to p | |
CVE-2026-14425 |
critical | 9.6 | 0.0023 | 2026-07-01 | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potenti | |
CVE-2026-57625 |
critical | 9.6 | 0.0045 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 version | |
CVE-2026-57571 |
critical | 9.6 | 0.0081 | 2026-07-06 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler sa | |
CVE-2026-15113 |
critical | 9.6 | 0.0034 | 2026-07-08 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote atta | |
CVE-2026-59891 |
critical | 9.6 | 0.0047 | 2026-07-14 | sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, ge | |
CVE-2026-47428 |
critical | 9.6 | 0.0058 | 2026-07-14 | Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, Vitest Brow | |
CVE-2026-15773 |
critical | 9.6 | 0.0034 | 2026-07-14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker | |
CVE-2026-54458 |
critical | 9.6 | 0.0038 | 2026-07-15 | WWBN AVideo is an open source video platform. Versions prior to 29.0 contain a stored DOM Cross-Site | |
CVE-2026-15899 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a remote att | |
CVE-2026-15900 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker | |
CVE-2026-15901 |
critical | 9.6 | 0.0034 | 2026-07-20 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to pote | |
CVE-2026-61097 |
critical | 9.6 | 0.0019 | 2026-07-21 | Vulnerability in the Oracle Banking Trade Finance Process Management product of Oracle Financial Ser | |
CVE-2026-16419 |
critical | 9.6 | 0.0026 | 2026-07-21 | Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a | |
CVE-2026-16424 |
critical | 9.6 | 0.0034 | 2026-07-21 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker | |
CVE-2026-57784 |
critical | 9.6 | 0.0020 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 v | |
CVE-2026-65471 |
critical | 9.6 | 0.0020 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions. | |
CVE-2026-17651 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.7 | |
CVE-2026-17652 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17655 |
critical | 9.6 | 0.0055 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17656 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | |
CVE-2026-17669 |
critical | 9.6 | 0.0034 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowe | |
CVE-2026-17670 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17671 |
critical | 9.6 | 0.0051 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17672 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17673 |
critical | 9.6 | 0.0034 | 2026-07-30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17675 |
critical | 9.6 | 0.0043 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who h | |
CVE-2026-17676 |
critical | 9.6 | 0.0049 | 2026-07-30 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a r | |
CVE-2026-17680 |
critical | 9.6 | 0.0037 | 2026-07-30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17681 |
critical | 9.6 | 0.0039 | 2026-07-30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior t | |
CVE-2026-17682 |
critical | 9.6 | 0.0051 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had | |
CVE-2026-17684 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0. | |
CVE-2026-17687 |
critical | 9.6 | 0.0056 | 2026-07-30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17688 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17691 |
critical | 9.6 | 0.0048 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17692 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote a | |
CVE-2026-17695 |
critical | 9.6 | 0.0048 | 2026-07-30 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17697 |
critical | 9.6 | 0.0054 | 2026-07-30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti |