CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-119268Use after free in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-119267Use after free in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-119266Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-119265Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-119264Use after free in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the…Google Chrome
- CVE-2026-119263Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2026-119262Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-119261Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to…Google Chrome
- CVE-2026-119260Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-76031Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass…Google Chrome
- CVE-2026-76030Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-76029Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside…Google Chrome
- CVE-2026-76028Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-76027Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a…Google Chrome
- CVE-2026-76026Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-76025Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-76024Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the…Google Chrome
- CVE-2025-49602An issue was discovered in Keyfactor EJBCA 9.
- CVE-2026-117028Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method.
- CVE-2026-117182An authenticated cross-site scripting (XSS) vulnerability in the /spina/embeddable.rb component of Spina CMS v2.21.0 allows attackers to…
- CVE-2026-117183A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended…
- CVE-2026-117184An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to…
- CVE-2026-117346Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit
- CVE-2026-117349Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- CVE-2026-117350Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- CVE-2026-37468Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the…
- CVE-2026-92744Delinea Privilege Manager agent unauthenticated remote code execution vulnerabilityDelinea Privilege Manager
- CVE-2026-107238A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running…Veeam Management Pack for Microsoft System Center
- CVE-2026-107239A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers…Veeam Management Pack for Microsoft System Center
- CVE-2023-22793A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization…Veeam Management Pack for Microsoft System Center