CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-101373Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101372Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101371Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101370Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101369Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).Oracle REST Data Services
- CVE-2026-101368Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service).Oracle REST Data Services
- CVE-2026-101367Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101366Vulnerability in Oracle REST Data Services (component: ADP).Oracle REST Data Services
- CVE-2026-101365Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101364Vulnerability in Oracle REST Data Services (component: Database Actions).Oracle REST Data Services
- CVE-2026-101363Vulnerability in Oracle REST Data Services (component: Graph QL).Oracle REST Data Services
- CVE-2026-101362Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101361Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101360Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-101359Vulnerability in Oracle REST Data Services (component: Core).Oracle REST Data Services
- CVE-2026-113729Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalizationmoov-io signedxml · github.com/moov-io/signedxml
- CVE-2026-113728Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpointbulwarkmail webmail
- CVE-2026-113727OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runsopenchoreo · github.com/openchoreo/openchoreo
- CVE-2026-113812Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediatesMozilla-CA
- CVE-2026-113274Cross-site scripting in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted…Google Chrome
- CVE-2026-113039Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the…Google Chrome
- CVE-2026-113125Missing authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to obtain sensitive information via a…Google Chrome
- CVE-2026-113013Incorrect authorization in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-113088UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a…Google Chrome
- CVE-2026-113083Missing authorization in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker to spoof UI elements via a…Google Chrome
- CVE-2026-113286Missing authorization in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-113227Missing authorization in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions…Google Chrome
- CVE-2026-113122Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-112996Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-113294Incorrect authorization in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a…Google Chrome