Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,964 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-60905 |
critical | 9.6 | 0.0038 | 2026-08-18 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten | |
CVE-2026-70958 |
critical | 9.6 | 0.0042 | 2026-08-18 | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component | |
CVE-2026-71063 |
critical | 9.6 | 0.0040 | 2026-08-18 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions t | |
CVE-2026-71064 |
critical | 9.6 | 0.0040 | 2026-08-18 | Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions t | |
CVE-2026-76035 |
critical | 9.6 | 0.0046 | 2026-08-18 | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a r | |
CVE-2026-76036 |
critical | 9.6 | 0.0051 | 2026-08-18 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote atta | |
CVE-2026-16903 |
critical | 9.6 | 0.0042 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary cod | |
CVE-2026-109705 |
critical | 9.6 | 0.0032 | 2026-10-13 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Net | |
CVE-2026-109707 |
critical | 9.6 | 0.0032 | 2026-10-13 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Fi | |
CVE-2026-109708 |
critical | 9.6 | 0.0033 | 2026-10-13 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability | |
CVE-2026-57169 |
critical | 9.6 | 0.0030 | 2026-10-16 | Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endp | |
CVE-2026-112992 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pot | |
CVE-2026-113007 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113014 |
critical | 9.6 | 0.0050 | 2026-10-20 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113023 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote att | |
CVE-2026-113056 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113072 |
critical | 9.6 | 0.0050 | 2026-10-20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potent | |
CVE-2026-113078 |
critical | 9.6 | 0.0042 | 2026-10-20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-113084 |
critical | 9.6 | 0.0042 | 2026-10-20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
CVE-2026-113089 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote a | |
CVE-2026-113116 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to pote | |
CVE-2026-113126 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113138 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacke | |
CVE-2026-113169 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a | |
CVE-2026-113171 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote | |
CVE-2026-113186 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to e | |
CVE-2026-113189 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute | |
CVE-2026-113211 |
critical | 9.6 | 0.0045 | 2026-10-20 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-113222 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentiall | |
CVE-2026-113235 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote atta | |
CVE-2026-113252 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a r | |
CVE-2026-113261 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113263 |
critical | 9.6 | 0.0046 | 2026-10-20 | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113270 |
critical | 9.6 | 0.0047 | 2026-10-20 | Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to exe | |
CVE-2026-113283 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowe | |
CVE-2026-113300 |
critical | 9.6 | 0.0050 | 2026-10-20 | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to po | |
CVE-2026-113328 |
critical | 9.6 | 0.0050 | 2026-10-20 | Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attack | |
CVE-2026-113336 |
critical | 9.6 | 0.0050 | 2026-10-20 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker t | |
CVE-2026-113342 |
critical | 9.6 | 0.0047 | 2026-10-20 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to ex | |
CVE-2025-65200 |
critical | 9.6 | 0.0055 | 2026-10-22 | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted | |
CVE-2026-79862 |
critical | 9.6 | 0.0026 | 2026-10-22 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthen | |
CVE-2026-79863 |
critical | 9.6 | 0.0026 | 2026-10-22 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthen | |
CVE-2026-79864 |
critical | 9.6 | 0.0116 | 2026-10-22 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unau | |
CVE-2026-79865 |
critical | 9.6 | 0.0035 | 2026-10-22 | A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated | |
CVE-2026-79866 |
critical | 9.6 | 0.0024 | 2026-10-22 | An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exp | |
CVE-2026-79867 |
critical | 9.6 | 0.0029 | 2026-10-22 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthentica | |
CVE-2026-79868 |
critical | 9.6 | 0.0027 | 2026-10-22 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthentica | |
CVE-2026-79869 |
critical | 9.6 | 0.0029 | 2026-10-22 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthentic | |
CVE-2026-79870 |
critical | 9.6 | 0.0027 | 2026-10-22 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated | |
CVE-2026-79871 |
critical | 9.6 | 0.0031 | 2026-10-22 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow |