CVEs published June 4, 2026
627 CVEs were published on June 4, 2026: 71 critical, 262 high. 3 are now in CISA KEV.
- Published
- 627
- Critical
- 71
- High
- 262
- Medium
- 276
- Low
- 18
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 504
Most affected products
- Google Chrome
- 427
- Acer Connect M6E 5G Portable WiFi Router
- 26
- misp
- 8
- dfir-iris iris-web
- 7
- Samsung Open Source rlottie
- 7
- Arista Networks EOS
- 6
- HCL iControl
- 5
- Tautulli
- 5
- froxlor · froxlor/froxlor
- 4
- itsourcecode Fees Management System
- 4
Critical 71
- CVE-2026-11293Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a…Google Chrome
- CVE-2026-11282Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-11250Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11213Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11207Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-11198Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-11167Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11165Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-11163Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…Google Chrome
- CVE-2026-11153Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…Google Chrome
- CVE-2026-11152Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-11146Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11131Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11120Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11119Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11114Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11113Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11112Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11100Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-11095Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11094Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11088Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11082Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11070Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11066Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
Show all 71 entriesShow fewer entries
- CVE-2026-11065Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11063Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11061Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a…Google Chrome
- CVE-2026-11056Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker…Google Chrome
- CVE-2026-11052Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11047Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11043Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11037Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-11021Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11009Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-10983Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-10974Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-10972Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-10966Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…Google Chrome
- CVE-2026-10931Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via…Google Chrome
- CVE-2026-10892Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…Google Chrome
- CVE-2026-10886Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via…Google Chrome
- CVE-2026-10881Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…Google Chrome
- CVE-2026-48579Microsoft Exchange Online Information Disclosure VulnerabilityMicrosoft Exchange Online
- CVE-2026-48567Azure HorizonDB Elevation of Privilege VulnerabilityMicrosoft Azure HorizonDB
- CVE-2025-71316SQLite sqldiff remote code execution via argument injectionSQLite sqldiff
- CVE-2026-10880Unauthenticated SQL Injection in Osnexus QuantastorOsnexus QuantaStor
- CVE-2026-25550Seagull Software BarTender Unauthenticated RCE via .NET Remoting ServiceSeagull Software, LLC. BarTender
- CVE-2026-50076Apache Fory: Java ReplaceResolverSerializer deserialization checks bypassApache Software Foundation org.apache.fory:fory-core · org.…
- CVE-2026-10868MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modificationmisp
- CVE-2026-43986Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replayTautulli
- CVE-2019-25741Mobatek MobaXterm 12.1 Buffer Overflow via Sessions FileMobatek MobaXterm
- CVE-2019-25738WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Changeframework-y Hybrid Composer
- CVE-2019-25729PDF Signer 3.0 Server-Side Template Injection RCE via CSRF Cookiesimcy_creative PDF Signer
- CVE-2019-25727WordPress Plugin ad manager wd 1.0.11 Arbitrary File Downloadad-manager-wd Ad Manager WD
- CVE-2026-8037OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-4104SQLi in Akmer Informatics' TeknoPassAkmer Informatics Automation Industry and Trade Ltd. TeknoP…
- CVE-2026-50214Shared Secret Quota InflationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50209MDM Server Registration OverridingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50208Permissive TrustAllCerts TLS VerificationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49194SCREEN_CLICK Authentication BypassAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49191Exposed Hard-coded M3WebServer Backend API KeyAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49190Missing Per-Instruction Authorization ChecksAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49185Instruction Injection via FieldX MDMAcer Connect M6E 5G Portable WiFi Router
- CVE-2025-67446Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before.
- CVE-2025-67447The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection.
- CVE-2026-35904Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03…
- CVE-2026-35905T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root…
- CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute…
- CVE-2026-36182GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain…
- CVE-2026-41283OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed.OpenStack Mistral · mistral
High 262
- CVE-2026-10586Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgerywpdevteam Gutenberg Essential Blocks – Page Builder for Gut…
- CVE-2026-11307Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11306Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11305Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11304Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2026-11303Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11301Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out…Google Chrome
- CVE-2026-11297Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to…Google Chrome
- CVE-2026-11296Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11295Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege…Google Chrome
- CVE-2026-11279Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-11272Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11269Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to…Google Chrome
- CVE-2026-11265Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11262Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML…Google Chrome
- CVE-2026-11256Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11255Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11248Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11242Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11241Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network…Google Chrome
- CVE-2026-11239Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11237Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11236Insufficient policy enforcement in Web Bluetooth in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11235Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11231Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute…Google Chrome
Show all 262 entriesShow fewer entries
- CVE-2026-11230Use after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-11224Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via…Google Chrome
- CVE-2026-11211Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11202Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially…Google Chrome
- CVE-2026-11201Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious…Google Chrome
- CVE-2026-11191Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of…Google Chrome
- CVE-2026-11188Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape…Google Chrome
- CVE-2026-11185Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to…Google Chrome
- CVE-2026-11179Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a…Google Chrome
- CVE-2026-11177Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI…Google Chrome
- CVE-2026-11175Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via…Google Chrome
- CVE-2026-11173Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11172Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI…Google Chrome
- CVE-2026-11171Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11170Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level…Google Chrome
- CVE-2026-11169Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML…Google Chrome
- CVE-2026-11164Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11158Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to…Google Chrome
- CVE-2026-11154Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11151Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11149Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11147Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-11144Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11136Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11130Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11125Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-11124Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2026-11118Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11117Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a…Google Chrome
- CVE-2026-11116Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious…Google Chrome
- CVE-2026-11115Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege…Google Chrome
- CVE-2026-11111Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via…Google Chrome
- CVE-2026-11108Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege…Google Chrome
- CVE-2026-11103Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level…Google Chrome
- CVE-2026-11102Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary…Google Chrome
- CVE-2025-8873Arista EOS Dataplane Denial of Service via Malformed IPsec PacketArista Networks EOS
- CVE-2026-11092Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11091Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of…Google Chrome
- CVE-2026-11086Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11085Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds…Google Chrome
- CVE-2026-11080Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap…Google Chrome
- CVE-2026-11079Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out…Google Chrome
- CVE-2026-11077Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11076Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11074Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a…Google Chrome
- CVE-2026-11072Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a…Google Chrome
- CVE-2026-11071Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-11068Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-11060Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-11059Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11058Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11055Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-11054Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11050Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-11049Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-11046Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11042Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI…Google Chrome
- CVE-2026-11041Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11040Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11035Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform…Google Chrome
- CVE-2026-11030Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via…Google Chrome
- CVE-2026-11029Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker…Google Chrome
- CVE-2026-11028Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11024Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption…Google Chrome
- CVE-2026-11015Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via…Google Chrome
- CVE-2026-11012Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11011Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11010Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11003Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-11002Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11000Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10995Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10991Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI…Google Chrome
- CVE-2026-10990Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10989Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10988Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10987Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10986Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10982Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10978Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via…Google Chrome
- CVE-2026-10975Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10973Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-10971Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-10970Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10969Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10968Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10967Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-10965Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox…Google Chrome
- CVE-2026-10964Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10963Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10962Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10961Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10960Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10959Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10958Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage…Google Chrome
- CVE-2026-10957Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10956Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10955Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds…Google Chrome
- CVE-2026-10954Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10953Use after free in Core in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10952Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap…Google Chrome
- CVE-2026-10951Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10949Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-10948Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10947Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10946Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific…Google Chrome
- CVE-2026-10945Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI…Google Chrome
- CVE-2026-10943Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10942Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege…Google Chrome
- CVE-2026-10941Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10940Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10939Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10938Inappropriate implementation in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10937Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy…Google Chrome
- CVE-2026-10936Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10935Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10934Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10933Use after free in Audio in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10932Use after free in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption…Google Chrome
- CVE-2026-10930Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory…Google Chrome
- CVE-2026-10929Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-10928Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted…Google Chrome
- CVE-2026-10927Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10926Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code…Google Chrome
- CVE-2026-10925Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10924Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-10923Use after free in WebAppInstalls in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via…Google Chrome
- CVE-2026-10922Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a…Google Chrome
- CVE-2026-10921Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10920Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10919Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10918Use after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10917Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-10915Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-10914Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10913Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10911Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-10910Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a…Google Chrome
- CVE-2026-10909Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10908Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10907Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via…Google Chrome
- CVE-2026-10906Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10905Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10904Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a…Google Chrome
- CVE-2026-10903Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via…Google Chrome
- CVE-2026-10902Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2026-10901Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10900Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10899Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-10898Stack buffer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10897Inappropriate implementation in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox…Google Chrome
- CVE-2026-10896Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a…Google Chrome
- CVE-2026-10895Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2026-10894Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10893Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious…Google Chrome
- CVE-2026-10891Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption…Google Chrome
- CVE-2026-10890Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit…Google Chrome
- CVE-2026-10889Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10888Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute…Google Chrome
- CVE-2026-10887Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via…Google Chrome
- CVE-2026-10885Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a…Google Chrome
- CVE-2026-10884Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10883Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a…Google Chrome
- CVE-2026-10882Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML…Google Chrome
- CVE-2023-5502On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may…Arista Networks EOS
- CVE-2024-27892On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL…Arista Networks EOS
- CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injectionShibby Tomato
- CVE-2024-27890On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No…Arista Networks EOS
- CVE-2026-10872Shibby Tomato Web UI rc start_vpnserver os command injectionShibby Tomato
- CVE-2026-45497Microsoft M365 Copilot Remote Code Execution VulnerabilityMicrosoft 365 Copilot
- CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injectionShibby Tomato
- CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injectionShibby Tomato
- CVE-2026-41522Iris has an Improper Authorization issuedfir-iris iris-web
- CVE-2026-41518Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)chartbrew
- CVE-2026-41249CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationCoreShop · coreshop/core-shop
- CVE-2026-41237Froxlor has an incomplete fix for CVE-2026-30932froxlor · froxlor/froxlor
- CVE-2026-41236Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` pathfroxlor · froxlor/froxlor
- CVE-2026-41235Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcementfroxlor · froxlor/froxlor
- CVE-2026-41234Froxlor: BIND Zone File Injection via TXT Record Contentfroxlor · froxlor/froxlor
- CVE-2026-25551Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting ServiceSeagull Software, LLC. BarTender
- CVE-2026-10796nvm executes commands from a malicious Node.js mirror's version stringsnvm-sh nvm
- CVE-2026-50292In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to…freedesktop libinput
- CVE-2026-49942Net::CIDR::Set versions through 0.20 for Perl did not validate network masksRRWO Net::CIDR::Set
- CVE-2026-49941Net::CIDR::Set versions through 0.20 for Perl did not validate IP addressesRRWO Net::CIDR::Set
- CVE-2026-46741Etsy::StatsD versions through 1.002002 for Perl allow metric injectionsSANBEG Etsy::StatsD
- CVE-2026-43985Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeoverTautulli
- CVE-2026-43984Tautulli has stored XSS in logFile via guest-controlled log_js_errors inputTautulli
- CVE-2026-5228Improper Access Control in Kurt Software Studio's WriteUp Mobile AppKurt Software Studio WriteUp Mobile App
- CVE-2026-41065Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template DirectoryTautulli
- CVE-2026-28318SolarWinds Serv-U Unauthenticated Denial of Service VulnerabilitySolarWinds Serv-U
- CVE-2026-10860MISP CRUDComponent delete validation bypass via operator precedence errormisp
- CVE-2019-25745WordPress Plugin Google Review Slider 6.1 SQL Injection via tidjgwhite33 Google Review Slider
- CVE-2019-25740Joomla com_jsjobs 1.2.6 Arbitrary File DeletionJoomsky JS Jobs
- CVE-2019-25736LabF nfsAxe 3.7 Ping Client Buffer OverflowLabF nfsAxe
- CVE-2019-25735AllPlayer 7.4 Local Buffer Overflow via SEH UnicodeAllPlayer
- CVE-2019-25733NetShareWatcher 1.5.8.0 SEH Buffer Overflownsauditor NetShareWatcher
- CVE-2019-25732PHP EI-Tube Script 3 SQL Injection via search parametereitube EI-Tube
- CVE-2019-25730Listing Hub CMS 1.0 SQL Injection via pages.php idThemerig Listing Hub CMS
- CVE-2019-25728Care2x 2.7 Hospital Information System SQL Injection via ck_configCare2x
- CVE-2019-25726All in One Video Downloader 1.2 SQL Injection via admin page-editNicheoffice All in One Video Downloader
- CVE-2025-46638Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability.Dell BSAFE SSL-J
- CVE-2025-59874HCL Hive Telco Observability is affected by a Required directives missing from the CSP .HCL Hive
- CVE-2026-45433Hardcoded Cryptographic Key Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2026-45432Cleartext Transmission of Credentials Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2026-10843Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on awsRed Hat OpenShift Container Platform
- CVE-2026-10840Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to…Red Hat OpenShift Builds · Red Hat OpenShift Pipelines
- CVE-2025-12694Local Privilege Escalation in VPN ClientForcepoint VPN Client
- CVE-2026-45431Command Injection Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2025-52612HCL iControl was affected by Export CSV - CSV Injection vulnerability.HCL iControl
- CVE-2026-49771WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerabilityPhoto Gallery by 10Web
- CVE-2026-50225Account Creation ExhaustionAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-3820Supermicro BMC's SMTP service contains a command injection vulnerabilitySMCI AS-2115HS-TNR
- CVE-2026-50213Bulk User Private Data HarvestingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50212Arbitrary Remote Device UnbindingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50211Exposed Factory Testing App BoundariesAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50207Local Modem Manipulation via Binder InterfacesAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50206VPN Command Injection VulnerabilityAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50205Plaintext Log Credential LeakageAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49202Unverified Meeting Recording Endpoints & Permissive CORSAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49203Unauthenticated eSIM Configuration ManipulationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49193Publicly Readable AWS S3 Telemetry BucketsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49189Broadcast Receiver Privilege EscalationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49188Elevated Root Command Execution via ai_cmd SocketsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49187Hard-coded APK Resource Credentials & SceptersAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49186Lack of MQTT Broker Topic Access Control ListsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-41010ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz")…Cloud Foundry Foundation BOSH Director
- CVE-2026-41011PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name =…Cloud Foundry Foundation BOSH
- CVE-2026-8829HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entitiesOALDERS HTML::Entities
- CVE-2026-41859A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client…Cloud Foundry Foundation BOSH
- CVE-2026-41860CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM.Cloud Foundry Foundation BOSH
- CVE-2026-10737SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file()…smartypants SP Project & Document Manager
- CVE-2025-67448The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS.
- CVE-2025-69755An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary…
- CVE-2026-36176GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console.
- CVE-2026-38570bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.
- CVE-2026-44393An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0.oslo-messaging
Medium, low and unrated 294
- CVE-2026-50589In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or…OpenStack Ironic · ironic
- CVE-2026-10877SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injectionSourceCodester Ship Ferry Ticket Reservation System
- CVE-2026-10876SourceCodester Ship Ferry Ticket Reservation System admin improper authorizationSourceCodester Ship Ferry Ticket Reservation System
- CVE-2026-11309Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11308Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11302Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11300Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11299Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11298Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same…Google Chrome
- CVE-2026-11294Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11292Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security…Google Chrome
- CVE-2026-11291Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11290Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a…Google Chrome
- CVE-2026-11289Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…Google Chrome
- CVE-2026-11288Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11287Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11286Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11285Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI…Google Chrome
- CVE-2026-11284Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11283Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11281Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11280Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via…Google Chrome
- CVE-2026-11278Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak…Google Chrome
- CVE-2026-11277Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11276Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass…Google Chrome
Show all 294 entriesShow fewer entries
- CVE-2026-11275Inappropriate implementation in Page Info in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11274Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11273Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a…Google Chrome
- CVE-2026-11271Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage…Google Chrome
- CVE-2026-11270Inappropriate implementation in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data…Google Chrome
- CVE-2026-11268Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11267Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install…Google Chrome
- CVE-2026-11266Inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass Safe Browsing via…Google Chrome
- CVE-2026-11264Policy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security…Google Chrome
- CVE-2026-11263Insufficient policy enforcement in WebAuthentication in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11261Inappropriate implementation in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11260Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security…Google Chrome
- CVE-2026-11259Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin…Google Chrome
- CVE-2026-11258Inappropriate implementation in File System Access in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user…Google Chrome
- CVE-2026-11257Inappropriate implementation in Browser in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11254Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11253Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data…Google Chrome
- CVE-2026-11252Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11251Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11249Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11247Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak…Google Chrome
- CVE-2026-11246Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11245Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11244Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11243Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11240Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11238Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11234Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11233Insufficient policy enforcement in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11232Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via…Google Chrome
- CVE-2026-11229Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege…Google Chrome
- CVE-2026-11228Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to…Google Chrome
- CVE-2026-11227Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via…Google Chrome
- CVE-2026-11226Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a…Google Chrome
- CVE-2026-11225Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a…Google Chrome
- CVE-2026-11223Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11222Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a…Google Chrome
- CVE-2026-11221Insufficient validation of untrusted input in PointerLock in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11220Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11219Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11218Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11217Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11216Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-11215Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain…Google Chrome
- CVE-2026-11214Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak…Google Chrome
- CVE-2026-11212Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11210Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary…Google Chrome
- CVE-2026-11209Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11208Use after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11206Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11205Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who…Google Chrome
- CVE-2026-11204Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11203Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…Google Chrome
- CVE-2026-11200Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11199Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to…Google Chrome
- CVE-2026-11197Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11196Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from…Google Chrome
- CVE-2026-11195Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in…Google Chrome
- CVE-2026-11194Inappropriate implementation in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11193Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11192Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to…Google Chrome
- CVE-2026-11190Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11189Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to…Google Chrome
- CVE-2026-11187Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions…Google Chrome
- CVE-2026-11186Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML…Google Chrome
- CVE-2026-11184Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11183Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11182Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11181Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin…Google Chrome
- CVE-2026-11180Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11178Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak…Google Chrome
- CVE-2026-11176Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11174Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11168Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11166Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML…Google Chrome
- CVE-2026-11162Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11161Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data…Google Chrome
- CVE-2026-11160Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11159Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11157Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious…Google Chrome
- CVE-2026-11156Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11155Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11150Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML…Google Chrome
- CVE-2026-11148Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin…Google Chrome
- CVE-2026-11145Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted…Google Chrome
- CVE-2026-11143Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11142Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy…Google Chrome
- CVE-2026-11141Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11140Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11139Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11138Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11137Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11135Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary…Google Chrome
- CVE-2026-11134Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11133Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy…Google Chrome
- CVE-2026-11132Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy…Google Chrome
- CVE-2026-11129Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…Google Chrome
- CVE-2026-11128Inappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage…Google Chrome
- CVE-2026-11127Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain…Google Chrome
- CVE-2026-11126Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11123Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11122Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or…Google Chrome
- CVE-2026-11121Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11110Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11109Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11107Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a…Google Chrome
- CVE-2026-11106Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11105Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11104Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11101Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a…Google Chrome
- CVE-2026-11098Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11097Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11096Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11093Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11090Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11089Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11087Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11084Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11083Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11081Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via…Google Chrome
- CVE-2026-11078Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11075Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11073Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from…Google Chrome
- CVE-2026-11069Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin…Google Chrome
- CVE-2026-11067Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-11064Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak…Google Chrome
- CVE-2026-11062Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install…Google Chrome
- CVE-2026-11057Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11051Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11048Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11045Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11044Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11039Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-11038Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11036Inappropriate implementation in DOM in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a…Google Chrome
- CVE-2026-11034Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker…Google Chrome
- CVE-2026-11033Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive…Google Chrome
- CVE-2026-11032Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-11031Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to…Google Chrome
- CVE-2026-11027Insufficient validation of untrusted input in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11026Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a…Google Chrome
- CVE-2026-11025Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass…Google Chrome
- CVE-2026-11023Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11022Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11020Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via…Google Chrome
- CVE-2026-11019Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-11018Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation…Google Chrome
- CVE-2026-11017Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-11016Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11014Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install…Google Chrome
- CVE-2026-11013Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11008Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11007Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-11006Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a…Google Chrome
- CVE-2026-11005Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-11004Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-11001Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage…Google Chrome
- CVE-2026-10999Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-10998Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of…Google Chrome
- CVE-2026-10997Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install…Google Chrome
- CVE-2026-10996Inappropriate implementation in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via…Google Chrome
- CVE-2026-10994Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-10993Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-10992Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially…Google Chrome
- CVE-2026-10985Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML…Google Chrome
- CVE-2026-10984Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI…Google Chrome
- CVE-2026-10981Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised…Google Chrome
- CVE-2026-10980Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10979Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-10977Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-10976Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information…Google Chrome
- CVE-2026-10950Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-10944Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin…Google Chrome
- CVE-2026-10916Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10912Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had…Google Chrome
- CVE-2026-10875projectworlds Online Art Gallery Shop Project adminHome.ph sql injectionprojectworlds Online Art Gallery Shop Project
- CVE-2026-10874projectworlds Online Art Gallery Shop Project adminHome.php sql injectionprojectworlds Online Art Gallery Shop Project
- CVE-2024-27891On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be…Arista Networks EOS
- CVE-2026-47655Microsoft Graph Information Disclosure VulnerabilityMicrosoft Graph
- CVE-2026-47644Copilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCopilot Chat
- CVE-2026-42824M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot
- CVE-2026-11322Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypassnesquena Hermes WebUI
- CVE-2024-6858In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL…Arista Networks EOS
- CVE-2026-42547IRIS Alerts Can be Falsely Attributed to Customersdfir-iris iris-web
- CVE-2026-42543IRIS has a Cross-Site Request Forgery (CSRF) issuedfir-iris iris-web
- CVE-2026-42540IRIS has a Mass Assignment issuedfir-iris iris-web
- CVE-2026-42539IRIS has an Excessive Data Exposure issuedfir-iris iris-web
- CVE-2026-42538IRIS has an Insecure File Uploaddfir-iris iris-web
- CVE-2026-42329Iris has an Open Redirect issuedfir-iris iris-web
- CVE-2026-5066net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect functionzephyrproject-rtos Zephyr
- CVE-2026-5589Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem.zephyrproject-rtos Zephyr
- CVE-2026-21404NAVTOR NavBox Use of Hard-coded CredentialsNAVTOR NavBox
- CVE-2026-40898quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustionquic-go · github.com/quic-go/quic-go
- CVE-2026-48480netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncationnetty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-48040netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory…netty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-41207netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failuresnetty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-50266In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set…OpenStack Neutron · neutron
- CVE-2026-49940Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasksRRWO Net::CIDR::Set
- CVE-2026-46739Net::Statsd versions before 0.13 for Perl allow metric injectionsCOSIMO Net::Statsd
- CVE-2026-10815LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorizationLakshayD02 Hostel-Management-System-PHP
- CVE-2026-10814milvus-io milvus Grantee ID Hash kv_catalog.go weak hashmilvus-io milvus · github.com/milvus-io/milvus
- CVE-2026-45287OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parseopen-telemetry go.opentelemetry.io/otel/schema/v1.1 · op… +3
- CVE-2026-10813LMCache KV Cache utils.py hex_hash_to_int16 weak hashLMCache
- CVE-2026-41178OpenTelemetry-Go's baggage parsing no longer caps raw header lengthopen-telemetry go.opentelemetry.io/otel/baggage · open-t… +3
- CVE-2026-40930LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk bodypnggroup libpng · pnggroup libpng-apng
- CVE-2026-7774tarfile.data_filter path traversal bypass allows writing outside the extraction directoryPython Software Foundation CPython
- CVE-2026-10812zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hashzilliztech GPTCache · gptcache
- CVE-2026-47707Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplificationstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-45739Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-47706Strawberry GraphQL has a Circular Fragment Reference DOSstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-10811itsourcecode Fees Management System receipt.php sql injectionitsourcecode Fees Management System
- CVE-2026-10864MISP Dashboard widget field selection may expose restricted user and organisation datamisp
- CVE-2026-10863MISP User-controlled order parameter in correlations over-correlation endpointmisp
- CVE-2026-10861MISP post-login open redirect via pre_login_requested_urlmisp
- CVE-2019-25744WordPress Popup Builder 3.49 Persistent Cross-Site ScriptingPopup-Builder Popup Builder
- CVE-2019-25743WordPress Soliloquy Lite 2.5.6 Persistent Cross-Site ScriptingSoliloquywp Soliloquy Lite
- CVE-2019-25742WordPress Theme Zoner Real Estate 4.1.1 Persistent XSSFruitfulcode Zoner Real Estate
- CVE-2019-25739GigToDo Freelance Marketplace Script 1.3 Persistent XSSGigtodoscript GigToDo
- CVE-2019-25737Live Chat Unlimited 2.8.3 Stored Cross-Site ScriptingScreets Live Chat Unlimited
- CVE-2019-25734Contact Form by WD 1.13.1 CSRF to Local File InclusionWeb-Dorado Contact Form Maker
- CVE-2019-25731Zuz Music 2.1 Persistent Cross-site Scripting via zuzconsole ContactZuz Music
- CVE-2026-10856Open redirect in MISP dashboard button widget URL handlingmisp
- CVE-2026-10810itsourcecode Fees Management System navbar.php cross site scriptingitsourcecode Fees Management System
- CVE-2026-10855MISP Event template importer authorization bypassmisp
- CVE-2026-10809itsourcecode Fees Management System manage_user.php sql injectionitsourcecode Fees Management System
- CVE-2026-10854Unauthorized exposure of private galaxies in MISP event template creationmisp
- CVE-2026-40605Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion APITautulli
- CVE-2026-43926FOSSBilling's password reset confirmation endpoint lacks rate limitingFOSSBilling
- CVE-2026-10808itsourcecode Fees Management System manage_student.php sql injectionitsourcecode Fees Management System
- CVE-2025-62338HCL BigFix Cloud Lifecycle Management is affected by lack of input validationHCLSoftware BigFix Cloud Lifecycle Management
- CVE-2026-10807mjperpinosa stumasy change_profile_image.php unrestricted uploadmjperpinosa stumasy
- CVE-2026-10806mjperpinosa stumasy add_post.php unrestricted uploadmjperpinosa stumasy
- CVE-2026-10804Streamlit Palette hashing.py weak hashStreamlit
- CVE-2025-52606HCL iControl was affected by Weak Input Validation vulnerability. .HCL iControl
- CVE-2025-52608HCL iControl was affected by Missing Cookie Attributes vulnerability.HCL iControl
- CVE-2026-10803MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hashMLflow
- CVE-2025-52609HCL iControl was affected by Missing Security Headers vulnerability.HCL iControl
- CVE-2025-52611HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityHCL iControl
- CVE-2026-10802keystonejs keystone GraphQL API Endpoint output-field.ts resource consumptionkeystonejs keystone · @keystone-6/core
- CVE-2026-10801modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hashmodelscope ms-swift · ms-swift
- CVE-2026-49077WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerabilityTips and Tricks HQ WP eMember
- CVE-2026-10800PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hashPaddlePaddle FastDeploy
- CVE-2026-8916Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers.Samsung Open Source rlottie
- CVE-2026-47318Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.Samsung Open Source rlottie
- CVE-2026-47306Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.Samsung Open Source rlottie
- CVE-2026-49510Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks.Samsung Open Source rlottie
- CVE-2026-10305Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers.Samsung Open Source rlottie
- CVE-2026-47319Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation.Samsung Open Source rlottie
- CVE-2026-47320Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation…Samsung Open Source rlottie
- CVE-2026-50226Firmware Theft & IMEI Spoofing via Connect-OTAAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50224Unauthenticated IPv6 WAN Management ExposureAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-4881In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make…Octopus Deploy Octopus Server
- CVE-2026-50210Weak Static Cryptographic Initialization VectorsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49204Hard-coded AWS Cognito Testing AccountsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49192Summary Service Insecure Direct Object ReferenceAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-10805Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendRed Hat Enterprise Linux · Red Hat Multicluster Engine f… +3
- CVE-2026-50219libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or…libexpat project libexpat
- CVE-2026-10597ITPison｜OMICARD EDM - Insecure Direct Object ReferenceITPison OMICARD EDM
- CVE-2026-41858Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a…Cloud Foundry Foundation windows-utilities-release
- CVE-2026-8653MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' ParameterStylemixThemes MasterStudy LMS Pro
- CVE-2026-7764Out-of-bounds read in morse.ko Vendor IE processingMorse Micro HaLowLink
- CVE-2025-65640Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to…
- CVE-2026-36174GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial…
- CVE-2026-36175An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access…
- CVE-2026-36178The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition…
- CVE-2026-36180A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and…
- CVE-2026-36499A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to…
- CVE-2026-44917OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a…OpenStack Ironic
- CVE-2026-48681OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.OpenStack Ironic · ironic