CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-121174Missing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via…Google Chrome
- CVE-2026-121112Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer…Google Chrome
- CVE-2026-121197Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox…Google Chrome
- CVE-2026-121107Incorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy…Google Chrome
- CVE-2026-121126Use after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…Google Chrome
- CVE-2026-121203Use after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox…Google Chrome
- CVE-2026-121247Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-121035Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the…Google Chrome
- CVE-2026-121246Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-121229Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute…Google Chrome
- CVE-2026-121156Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-120716Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and…Devolutions Server
- CVE-2026-115779Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()Effect-TS effect · @effect platform +2
- CVE-2026-115731Report Deserialization Code ExecutionPerforce Puppet Enterprise
- CVE-2026-119636Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through…Devolutions Server
- CVE-2026-115732Certificate Name Authorization BypassPerforce Puppet Enterprise
- CVE-2026-120734Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an…Devolutions Server
- CVE-2026-120715Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an…Devolutions Server
- CVE-2026-76894CKAN MCP Server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)ondata ckan-mcp-server · @aborruso/ckan-mcp-server
- CVE-2026-120733Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with…Devolutions Server
- CVE-2026-82155Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability.Dell OS Recovery tool
- CVE-2026-82154Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability.Dell OS Recovery tool
- CVE-2026-121509Headless CMS Plugin REST API post get_required_post_data information disclosureHeadless CMS Plugin
- CVE-2026-121580Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated…Devolutions Server
- CVE-2026-115878Stanza: RCE via pickle deserialization in the lemmatizerstanfordnlp stanza · stanza
- CVE-2026-61497TinyUSB < 0.21.0 Integer Underflow via HID Report Descriptor Parserhathach TinyUSB
- CVE-2026-120959MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writesMongoDB Atlas SQL
- CVE-2026-120952MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds writeMongoDB Atlas SQL ODBC Driver
- CVE-2026-121502mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injectionmathurvishal CloudClassroom-PHP-Project
- CVE-2026-61495TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()hathach TinyUSB