Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,964 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17701 |
critical | 9.6 | 0.0047 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 a | |
CVE-2026-17704 |
critical | 9.6 | 0.0051 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17708 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17709 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17710 |
critical | 9.6 | 0.0034 | 2026-07-30 | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remot | |
CVE-2026-17711 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had c | |
CVE-2026-17713 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151 | |
CVE-2026-17717 |
critical | 9.6 | 0.0051 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to poten | |
CVE-2026-17718 |
critical | 9.6 | 0.0044 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potenti | |
CVE-2026-17721 |
critical | 9.6 | 0.0044 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-17726 |
critical | 9.6 | 0.0034 | 2026-07-30 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17727 |
critical | 9.6 | 0.0034 | 2026-07-30 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote att | |
CVE-2026-17738 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17749 |
critical | 9.6 | 0.0026 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17758 |
critical | 9.6 | 0.0037 | 2026-07-30 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-17768 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 all | |
CVE-2026-17801 |
critical | 9.6 | 0.0043 | 2026-07-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attac | |
CVE-2026-17803 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 | |
CVE-2026-17804 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17832 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17834 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allo | |
CVE-2026-17837 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17847 |
critical | 9.6 | 0.0037 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed | |
CVE-2026-17848 |
critical | 9.6 | 0.0032 | 2026-07-30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to pote | |
CVE-2026-17855 |
critical | 9.6 | 0.0027 | 2026-07-30 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had co | |
CVE-2026-17856 |
critical | 9.6 | 0.0034 | 2026-07-30 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17865 |
critical | 9.6 | 0.0034 | 2026-07-30 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remo | |
CVE-2026-17924 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had comp | |
CVE-2026-17940 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior t | |
CVE-2026-17947 |
critical | 9.6 | 0.0034 | 2026-07-30 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to po | |
CVE-2026-17987 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 | |
CVE-2026-17990 |
critical | 9.6 | 0.0032 | 2026-07-30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allow | |
CVE-2026-17991 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a r | |
CVE-2026-18002 |
critical | 9.6 | 0.0034 | 2026-07-30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 al | |
CVE-2026-18015 |
critical | 9.6 | 0.0034 | 2026-07-30 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote | |
CVE-2026-25289 |
critical | 9.6 | 0.0019 | 2026-08-04 | Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Disco | |
CVE-2026-70376 |
critical | 9.6 | 0.0020 | 2026-08-05 | Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in da | |
CVE-2026-71319 |
critical | 9.6 | 0.0063 | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (developm | |
CVE-2026-12605 |
critical | 9.6 | 0.0043 | 2026-08-06 | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leak | |
CVE-2026-19149 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker t | |
CVE-2026-19157 |
critical | 9.6 | 0.0038 | 2026-08-06 | Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote at | |
CVE-2026-19164 |
critical | 9.6 | 0.0034 | 2026-08-06 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowe | |
CVE-2026-19166 |
critical | 9.6 | 0.0039 | 2026-08-06 | Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attac | |
CVE-2026-19170 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19171 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacke | |
CVE-2026-19175 |
critical | 9.6 | 0.0034 | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to pot | |
CVE-2026-70332 |
critical | 9.6 | 0.0086 | 2026-08-06 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of | |
CVE-2026-47705 |
critical | 9.6 | 0.0056 | 2026-08-11 | TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result ex | |
CVE-2026-13433 |
critical | 9.6 | 0.0017 | 2026-08-12 | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified | |
CVE-2026-28192 |
critical | 9.6 | 0.0043 | 2026-08-18 | Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions. |