CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-82160Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation…Dell Wyse Management Suite
- CVE-2026-111754Angular: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)angular
- CVE-2026-82161Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation…Dell Wyse Management Suite
- CVE-2026-82158Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation…Dell Wyse Management Suite
- CVE-2026-111752Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)angular · @angular/router
- CVE-2026-82159Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation…Dell Wyse Management Suite
- CVE-2026-55186Silverstripe MFA: Can bypass MFA during password reset flowsilverstripe-mfa · silverstripe/mfa
- CVE-2026-121514EasySoft ZenTao PMS User model.php checkGroupChange privileges managementEasySoft ZenTao PMS
- CVE-2026-64672Terragrunt catalog predictable temp symlink clobbergruntwork-io terragrunt · github.com/gruntwork-io/terragrunt
- CVE-2026-121141Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-121195Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via…Google Chrome
- CVE-2026-121064Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary…Google Chrome
- CVE-2026-121169Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-121069Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via…Google Chrome
- CVE-2026-121142Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-121232Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker leveraging social engineering to obtain…Google Chrome
- CVE-2026-121041Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a…Google Chrome
- CVE-2026-121093Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the…Google Chrome
- CVE-2026-121230Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-121073Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-121092Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code…Google Chrome
- CVE-2026-121175Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted…Google Chrome
- CVE-2026-121054Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-121029Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted…Google Chrome
- CVE-2026-121045UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering…Google Chrome
- CVE-2026-121162UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social…Google Chrome
- CVE-2026-121225Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-121198Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web…Google Chrome
- CVE-2026-121240Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access…Google Chrome
- CVE-2026-121081UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…Google Chrome