CVEs published June 4, 2026
627 CVEs were published on June 4, 2026: 71 critical, 262 high. 3 are now in CISA KEV.
- Published
- 627
- Critical
- 71
- High
- 262
- Medium
- 276
- Low
- 18
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 504
Most affected products
- Google Chrome
- 427
- Acer Connect M6E 5G Portable WiFi Router
- 26
- misp
- 8
- dfir-iris iris-web
- 7
- Samsung Open Source rlottie
- 7
- Arista Networks EOS
- 6
- HCL iControl
- 5
- Tautulli
- 5
- froxlor · froxlor/froxlor
- 4
- itsourcecode Fees Management System
- 4
Critical 71
- CVE-2026-11293Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-11282Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially performGoogle Chrome
- CVE-2026-11250Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-11213Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromGoogle Chrome
- CVE-2026-11207Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perfGoogle Chrome
- CVE-2026-11198Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perforGoogle Chrome
- CVE-2026-11167Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-11165Use after free in WebMIDI in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape vGoogle Chrome
- CVE-2026-11163Use after free in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escGoogle Chrome
- CVE-2026-11153Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a Google Chrome
- CVE-2026-11152Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape viaGoogle Chrome
- CVE-2026-11146Insufficient validation of untrusted input in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-11131Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-11120Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who hadGoogle Chrome
- CVE-2026-11119Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-11114Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-11113Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11112Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had Google Chrome
- CVE-2026-11100Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specGoogle Chrome
- CVE-2026-11095Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-11094Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-11088Integer overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2026-11082Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-11070Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who haGoogle Chrome
- CVE-2026-11066Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially performGoogle Chrome
- CVE-2026-11065Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-11063Insufficient validation of untrusted input in WebNN in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-11061Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafGoogle Chrome
- CVE-2026-11056Insufficient validation of untrusted input in SiteIsolation in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker whoGoogle Chrome
- CVE-2026-11052Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-11047Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the reGoogle Chrome
- CVE-2026-11043Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-11037Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via Google Chrome
- CVE-2026-11021Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had comprGoogle Chrome
- CVE-2026-11009Use after free in USB in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape vGoogle Chrome
- CVE-2026-10983Insufficient validation of untrusted input in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform Google Chrome
- CVE-2026-10974Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially performGoogle Chrome
- CVE-2026-10972Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape vGoogle Chrome
- CVE-2026-10966Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox esGoogle Chrome
- CVE-2026-10931Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via aGoogle Chrome
- CVE-2026-10892Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escGoogle Chrome
- CVE-2026-10886Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via aGoogle Chrome
- CVE-2026-10881Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escGoogle Chrome
- CVE-2026-48579Microsoft Exchange Online Information Disclosure VulnerabilityMicrosoft Exchange Online
- CVE-2026-48567Azure HorizonDB Elevation of Privilege VulnerabilityMicrosoft Azure HorizonDB
- CVE-2025-71316SQLite sqldiff remote code execution via argument injectionSQLite sqldiff
- CVE-2026-10880Unauthenticated SQL Injection in Osnexus QuantastorOsnexus QuantaStor
- CVE-2026-25550Seagull Software BarTender Unauthenticated RCE via .NET Remoting ServiceSeagull Software, LLC. BarTender
- CVE-2026-50076Apache Fory: Java ReplaceResolverSerializer deserialization checks bypassApache Software Foundation Apache Fory · org.apache.fory:fo…
- CVE-2026-10868MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modificationmisp
- CVE-2026-43986Tautulli vulnerable to unauthenticated SSRF in /image/<hash> via attacker-seeded image hash replayTautulli
- CVE-2019-25741Mobatek MobaXterm 12.1 Buffer Overflow via Sessions FileMobatek MobaXterm
- CVE-2019-25738WordPress Hybrid Composer 1.4.6 Unauthenticated Settings Changeframework-y Hybrid Composer
- CVE-2019-25729PDF Signer 3.0 Server-Side Template Injection RCE via CSRF Cookiesimcy_creative PDF Signer
- CVE-2019-25727WordPress Plugin ad manager wd 1.0.11 Arbitrary File Downloadad-manager-wd Ad Manager WD
- CVE-2026-8037OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2
- CVE-2026-4104SQLi in Akmer Informatics' TeknoPassAkmer Informatics Automation Industry and Trade Ltd. TeknoP…
- CVE-2026-50214Shared Secret Quota InflationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50209MDM Server Registration OverridingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50208Permissive TrustAllCerts TLS VerificationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49194SCREEN_CLICK Authentication BypassAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49191Exposed Hard-coded M3WebServer Backend API KeyAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49190Missing Per-Instruction Authorization ChecksAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49185Instruction Injection via FieldX MDMAcer Connect M6E 5G Portable WiFi Router
- CVE-2025-67446Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before.
- CVE-2025-67447The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection.
- CVE-2026-35904Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allo
- CVE-2026-35905T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access
- CVE-2026-35906An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute a
- CVE-2026-36182GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root
- CVE-2026-41283OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed.OpenStack Mistral · mistral
High 262
- CVE-2026-10586Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgerywpdevteam Gutenberg Essential Blocks – Page Builder for Gut…
- CVE-2026-11307Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11306Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11305Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11304Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2026-11303Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11301Inappropriate implementation in LiveCaption in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of Google Chrome
- CVE-2026-11297Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypGoogle Chrome
- CVE-2026-11296Inappropriate implementation in ImageCapture in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-11295Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege esGoogle Chrome
- CVE-2026-11279Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox Google Chrome
- CVE-2026-11272Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convGoogle Chrome
- CVE-2026-11269Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to eGoogle Chrome
- CVE-2026-11265Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a cGoogle Chrome
- CVE-2026-11262Use after free in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML paGoogle Chrome
- CVE-2026-11256Integer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-11255Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had cGoogle Chrome
- CVE-2026-11248Inappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictiGoogle Chrome
- CVE-2026-11242Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised Google Chrome
- CVE-2026-11241Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment Google Chrome
- CVE-2026-11239Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-11237Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11236Insufficient policy enforcement in Web Bluetooth in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rGoogle Chrome
- CVE-2026-11235Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-11231Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary Google Chrome
- CVE-2026-11230Use after free in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-11224Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via maliciGoogle Chrome
- CVE-2026-11211Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-11202Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perfoGoogle Chrome
- CVE-2026-11201Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious exteGoogle Chrome
- CVE-2026-11191Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds Google Chrome
- CVE-2026-11188Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape vGoogle Chrome
- CVE-2026-11185Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to exGoogle Chrome
- CVE-2026-11179Inappropriate implementation in ORB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass site isolation via a craftedGoogle Chrome
- CVE-2026-11177Use after free in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI geGoogle Chrome
- CVE-2026-11175Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a Google Chrome
- CVE-2026-11173Out of bounds write in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execGoogle Chrome
- CVE-2026-11172Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing Google Chrome
- CVE-2026-11171Integer overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-11170Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level prGoogle Chrome
- CVE-2026-11169Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UGoogle Chrome
- CVE-2026-11164Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-11158Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentialGoogle Chrome
- CVE-2026-11154Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-11151Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-11149Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-11147Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-11144Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-11136Use after free in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11130Use after free in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-11125Use after free in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox vGoogle Chrome
- CVE-2026-11124Integer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2026-11118Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11117Use after free in Views in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a craftedGoogle Chrome
- CVE-2026-11116Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious netwoGoogle Chrome
- CVE-2026-11115Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalatiGoogle Chrome
- CVE-2026-11111Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a Google Chrome
- CVE-2026-11108Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalaGoogle Chrome
- CVE-2026-11103Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level prGoogle Chrome
- CVE-2026-11102Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary codGoogle Chrome
- CVE-2025-8873Arista EOS Dataplane Denial of Service via Malformed IPsec PacketArista Networks EOS
- CVE-2026-11092Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2026-11091Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds Google Chrome
- CVE-2026-11086Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-11085Integer overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds meGoogle Chrome
- CVE-2026-11080Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2026-11079Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of Google Chrome
- CVE-2026-11077Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Google Chrome
- CVE-2026-11076Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-11074Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted Google Chrome
- CVE-2026-11072Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a maliciGoogle Chrome
- CVE-2026-11071Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2026-11068Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-11060Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-11059Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-11058Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-11055Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-11054Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11050Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-11049Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-11046Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11042Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestGoogle Chrome
- CVE-2026-11041Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had comGoogle Chrome
- CVE-2026-11040Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-11035Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to perform privilegeGoogle Chrome
- CVE-2026-11030Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via malicGoogle Chrome
- CVE-2026-11029Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker whoGoogle Chrome
- CVE-2026-11028Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-11024Stack buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit stack corruption via Google Chrome
- CVE-2026-11015Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via aGoogle Chrome
- CVE-2026-11012Use after free in Serial in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-11011Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11010Use after free in WebShare in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-11003Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-11002Use after free in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-11000Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandboGoogle Chrome
- CVE-2026-10995Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specifiGoogle Chrome
- CVE-2026-10991Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestureGoogle Chrome
- CVE-2026-10990Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-10989Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2026-10988Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-10987Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-10986Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via aGoogle Chrome
- CVE-2026-10982Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-10978Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via maliGoogle Chrome
- CVE-2026-10975Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10973Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pagGoogle Chrome
- CVE-2026-10971Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had Google Chrome
- CVE-2026-10970Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had comprGoogle Chrome
- CVE-2026-10969Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-10968Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compGoogle Chrome
- CVE-2026-10967Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderGoogle Chrome
- CVE-2026-10965Integer overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox viGoogle Chrome
- CVE-2026-10964Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-10963Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-10962Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-10961Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-10960Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-10959Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-10958Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in Google Chrome
- CVE-2026-10957Use after free in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crGoogle Chrome
- CVE-2026-10956Use after free in MimeHandlerView in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbGoogle Chrome
- CVE-2026-10955Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds meGoogle Chrome
- CVE-2026-10954Use after free in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-10953Use after free in Core in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-10952Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corrupGoogle Chrome
- CVE-2026-10951Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specifGoogle Chrome
- CVE-2026-10949Heap buffer overflow in Video in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-10948Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10947Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10946Heap buffer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UGoogle Chrome
- CVE-2026-10945Use after free in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gesturGoogle Chrome
- CVE-2026-10943Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10942Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform privilege escalatiGoogle Chrome
- CVE-2026-10941Out of bounds memory access in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-10940Race in Codecs in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2026-10939Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10938Inappropriate implementation in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-10937Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy viaGoogle Chrome
- CVE-2026-10936Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-10935Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-10934Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proGoogle Chrome
- CVE-2026-10933Use after free in Audio in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-10932Use after free in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2026-10930Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory readGoogle Chrome
- CVE-2026-10929Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-10928Script injection in Headless in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML Google Chrome
- CVE-2026-10927Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2026-10926Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code viGoogle Chrome
- CVE-2026-10925Out of bounds write in Skia in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-10924Integer overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process toGoogle Chrome
- CVE-2026-10923Use after free in WebAppInstalls in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via aGoogle Chrome
- CVE-2026-10922Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a useGoogle Chrome
- CVE-2026-10921Integer overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potenGoogle Chrome
- CVE-2026-10920Insufficient validation of untrusted input in WebShare in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compGoogle Chrome
- CVE-2026-10919Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-10918Use after free in Viz in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentiaGoogle Chrome
- CVE-2026-10917Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-10915Use after free in Core in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to Google Chrome
- CVE-2026-10914Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-10913Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-10911Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-10910Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafGoogle Chrome
- CVE-2026-10909Use after free in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2026-10908Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer pGoogle Chrome
- CVE-2026-10907Out of bounds write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2026-10906Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specGoogle Chrome
- CVE-2026-10905Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poteGoogle Chrome
- CVE-2026-10904Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome
- CVE-2026-10903Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-10902Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2026-10901Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2026-10900Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2026-10899Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specifiGoogle Chrome
- CVE-2026-10898Stack buffer overflow in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-10897Inappropriate implementation in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escapGoogle Chrome
- CVE-2026-10896Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crGoogle Chrome
- CVE-2026-10895Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2026-10894Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-10893Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious netwoGoogle Chrome
- CVE-2026-10891Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2026-10890Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to potentially exploit heap Google Chrome
- CVE-2026-10889Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2026-10888Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitraGoogle Chrome
- CVE-2026-10887Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via maliciouGoogle Chrome
- CVE-2026-10885Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crGoogle Chrome
- CVE-2026-10884Use after free in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to pGoogle Chrome
- CVE-2026-10883Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2026-10882Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML pagGoogle Chrome
- CVE-2023-5502On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.Arista Networks EOS
- CVE-2024-27892On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).Arista Networks EOS
- CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Catalyst SD-WAN Controller · Cisco Catalyst SD-WAN Ma…
- CVE-2026-10873Shibby Tomato Web UI rstats rstats_path os command injectionShibby Tomato
- CVE-2024-27890On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).Arista Networks EOS
- CVE-2026-10872Shibby Tomato Web UI rc start_vpnserver os command injectionShibby Tomato
- CVE-2026-45497Microsoft M365 Copilot Remote Code Execution VulnerabilityMicrosoft 365 Copilot
- CVE-2026-10871Shibby Tomato Web UI rc start_6rd_tunnel os command injectionShibby Tomato
- CVE-2026-10870Shibby Tomato Web UI rc start_dhcpc os command injectionShibby Tomato
- CVE-2026-41522Iris has an Improper Authorization issuedfir-iris iris-web
- CVE-2026-41518Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)chartbrew
- CVE-2026-41249CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationCoreShop · coreshop/core-shop
- CVE-2026-41237Froxlor has an incomplete fix for CVE-2026-30932froxlor · froxlor/froxlor
- CVE-2026-41236Froxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` pathfroxlor · froxlor/froxlor
- CVE-2026-41235Froxlor has an authorization bypass in FTP shell assignment via missing server-side `available_shells` enforcementfroxlor · froxlor/froxlor
- CVE-2026-41234Froxlor: BIND Zone File Injection via TXT Record Contentfroxlor · froxlor/froxlor
- CVE-2026-25551Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting ServiceSeagull Software, LLC. BarTender
- CVE-2026-10796nvm executes commands from a malicious Node.js mirror's version stringsnvm-sh nvm
- CVE-2026-50292In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrfreedesktop libinput
- CVE-2026-49942Net::CIDR::Set versions through 0.20 for Perl did not validate network masksRRWO Net::CIDR::Set
- CVE-2026-49941Net::CIDR::Set versions through 0.20 for Perl did not validate IP addressesRRWO Net::CIDR::Set
- CVE-2026-46741Etsy::StatsD versions through 1.002002 for Perl allow metric injectionsSANBEG Etsy::StatsD
- CVE-2026-43985Taultulli has CSRF in /configUpdate via missing anti-CSRF and method restriction that allows admin credential takeoverTautulli
- CVE-2026-43984Tautulli has stored XSS in logFile via guest-controlled log_js_errors inputTautulli
- CVE-2026-5228Improper Access Control in Kurt Software Studio's WriteUp Mobile AppKurt Software Studio WriteUp Mobile App
- CVE-2026-41065Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template DirectoryTautulli
- CVE-2026-28318SolarWinds Serv-U Unauthenticated Denial of Service VulnerabilitySolarWinds Serv-U
- CVE-2026-10860MISP CRUDComponent delete validation bypass via operator precedence errormisp
- CVE-2019-25745WordPress Plugin Google Review Slider 6.1 SQL Injection via tidjgwhite33 Google Review Slider
- CVE-2019-25740Joomla com_jsjobs 1.2.6 Arbitrary File DeletionJoomsky JS Jobs
- CVE-2019-25736LabF nfsAxe 3.7 Ping Client Buffer OverflowLabF nfsAxe
- CVE-2019-25735AllPlayer 7.4 Local Buffer Overflow via SEH UnicodeAllPlayer
- CVE-2019-25733NetShareWatcher 1.5.8.0 SEH Buffer Overflownsauditor NetShareWatcher
- CVE-2019-25732PHP EI-Tube Script 3 SQL Injection via search parametereitube EI-Tube
- CVE-2019-25730Listing Hub CMS 1.0 SQL Injection via pages.php idThemerig Listing Hub CMS
- CVE-2019-25728Care2x 2.7 Hospital Information System SQL Injection via ck_configCare2x
- CVE-2019-25726All in One Video Downloader 1.2 SQL Injection via admin page-editNicheoffice All in One Video Downloader
- CVE-2025-46638Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability.Dell BSAFE SSL-J
- CVE-2025-59874HCL Hive Telco Observability is affected by a Required directives missing from the CSP .HCL Hive
- CVE-2026-45433Hardcoded Cryptographic Key Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2026-45432Cleartext Transmission of Credentials Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2026-10843Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on awsRed Hat OpenShift Container Platform
- CVE-2026-10840Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resourcesRed Hat OpenShift Builds · Red Hat OpenShift Pipelines
- CVE-2025-12694Local Privilege Escalation in VPN ClientForcepoint VPN Client
- CVE-2026-45431Command Injection Vulnerability in GX Earth ONT ModelsGX INDIA GX Earth
- CVE-2025-52612HCL iControl was affected by Export CSV - CSV Injection vulnerability.HCL iControl
- CVE-2026-49771WordPress Photo Gallery by 10Web plugin <= 1.8.41 - SQL Injection vulnerabilityPhoto Gallery by 10Web
- CVE-2026-50225Account Creation ExhaustionAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-3820Supermicro BMC's SMTP service contains a command injection vulnerabilitySMCI AS-2115HS-TNR
- CVE-2026-50213Bulk User Private Data HarvestingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50212Arbitrary Remote Device UnbindingAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50211Exposed Factory Testing App BoundariesAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50207Local Modem Manipulation via Binder InterfacesAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50206VPN Command Injection VulnerabilityAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50205Plaintext Log Credential LeakageAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49202Unverified Meeting Recording Endpoints & Permissive CORSAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49203Unauthenticated eSIM Configuration ManipulationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49193Publicly Readable AWS S3 Telemetry BucketsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49189Broadcast Receiver Privilege EscalationAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49188Elevated Root Command Execution via ai_cmd SocketsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49187Hard-coded APK Resource Credentials & SceptersAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49186Lack of MQTT Broker Topic Access Control ListsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-41010ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where Cloud Foundry Foundation BOSH Director
- CVE-2026-41011PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, 'packages', "#{name}.tgz") and name = package_Cloud Foundry Foundation BOSH
- CVE-2026-8829HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entitiesOALDERS HTML::Entities
- CVE-2026-41859A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth header or UAA client secrCloud Foundry Foundation BOSH
- CVE-2026-41860CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token requests via MITM.Cloud Foundry Foundation BOSH
- CVE-2026-10737SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Functionsmartypants SP Project & Document Manager
- CVE-2025-67448The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS.
- CVE-2025-69755An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary co
- CVE-2026-36176GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console.
- CVE-2026-38570bacnet_stack 1.3.1 contains an Out-of-bounds Read in bacnet_tag_number_decode which allows attackers to cause a denial of service.
- CVE-2026-44393An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0.oslo-messaging
Medium, low and unrated 294
- CVE-2026-50589In OpenStack Ironic 32 before 37.0.0, an unauthenticated malicious user could submit a crafted JSON string to some endpoints on the API or JOpenStack Ironic · ironic
- CVE-2026-10877SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injectionSourceCodester Ship Ferry Ticket Reservation System
- CVE-2026-10876SourceCodester Ship Ferry Ticket Reservation System admin improper authorizationSourceCodester Ship Ferry Ticket Reservation System
- CVE-2026-11309Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crGoogle Chrome
- CVE-2026-11308Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malGoogle Chrome
- CVE-2026-11302Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretGoogle Chrome
- CVE-2026-11300Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a cGoogle Chrome
- CVE-2026-11299Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-11298Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origiGoogle Chrome
- CVE-2026-11294Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a craGoogle Chrome
- CVE-2026-11292Insufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policyGoogle Chrome
- CVE-2026-11291Inappropriate implementation in Android Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass sameGoogle Chrome
- CVE-2026-11290Integer overflow in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to cause a denial of service via a mGoogle Chrome
- CVE-2026-11289Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a Google Chrome
- CVE-2026-11288Insufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craGoogle Chrome
- CVE-2026-11287Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-11286Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-11285Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofiGoogle Chrome
- CVE-2026-11284Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dGoogle Chrome
- CVE-2026-11283Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass nGoogle Chrome
- CVE-2026-11281Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iGoogle Chrome
- CVE-2026-11280Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via aGoogle Chrome
- CVE-2026-11278Inappropriate implementation in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin Google Chrome
- CVE-2026-11277Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretGoogle Chrome
- CVE-2026-11276Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discGoogle Chrome
- CVE-2026-11275Inappropriate implementation in Page Info in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-11274Inappropriate implementation in DOM Distiller in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation Google Chrome
- CVE-2026-11273Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a userGoogle Chrome
- CVE-2026-11271Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage iGoogle Chrome
- CVE-2026-11270Inappropriate implementation in UI in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data viGoogle Chrome
- CVE-2026-11268Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-11267Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a Google Chrome
- CVE-2026-11266Inappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass Safe Browsing via aGoogle Chrome
- CVE-2026-11264Policy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security policyGoogle Chrome
- CVE-2026-11263Insufficient policy enforcement in WebAuthentication in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had coGoogle Chrome
- CVE-2026-11261Inappropriate implementation in PDF in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer proceGoogle Chrome
- CVE-2026-11260Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass content security polGoogle Chrome
- CVE-2026-11259Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin pGoogle Chrome
- CVE-2026-11258Inappropriate implementation in File System Access in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user toGoogle Chrome
- CVE-2026-11257Inappropriate implementation in Browser in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions Google Chrome
- CVE-2026-11254Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a cGoogle Chrome
- CVE-2026-11253Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via Google Chrome
- CVE-2026-11252Insufficient policy enforcement in Content Settings in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionarGoogle Chrome
- CVE-2026-11251Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11249Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtaGoogle Chrome
- CVE-2026-11247Insufficient policy enforcement in CustomTabs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-oriGoogle Chrome
- CVE-2026-11246Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromiseGoogle Chrome
- CVE-2026-11245Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafGoogle Chrome
- CVE-2026-11244Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had coGoogle Chrome
- CVE-2026-11243Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictionGoogle Chrome
- CVE-2026-11240Insufficient validation of untrusted input in Loader in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-11238Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicGoogle Chrome
- CVE-2026-11234Inappropriate implementation in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-11233Insufficient policy enforcement in FoldableAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the reGoogle Chrome
- CVE-2026-11232Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicGoogle Chrome
- CVE-2026-11229Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation Google Chrome
- CVE-2026-11228Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage Google Chrome
- CVE-2026-11227Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a Google Chrome
- CVE-2026-11226Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a uGoogle Chrome
- CVE-2026-11225Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a craGoogle Chrome
- CVE-2026-11223Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised Google Chrome
- CVE-2026-11222Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafteGoogle Chrome
- CVE-2026-11221Insufficient validation of untrusted input in PointerLock in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromiGoogle Chrome
- CVE-2026-11220Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-11219Inappropriate implementation in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictioGoogle Chrome
- CVE-2026-11218Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convincGoogle Chrome
- CVE-2026-11217Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendGoogle Chrome
- CVE-2026-11216Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specGoogle Chrome
- CVE-2026-11215Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofiGoogle Chrome
- CVE-2026-11214Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-originGoogle Chrome
- CVE-2026-11212Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2026-11210Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary acceGoogle Chrome
- CVE-2026-11209Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendererGoogle Chrome
- CVE-2026-11208Use after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from Google Chrome
- CVE-2026-11206Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dataGoogle Chrome
- CVE-2026-11205Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who coGoogle Chrome
- CVE-2026-11204Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restricGoogle Chrome
- CVE-2026-11203Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via aGoogle Chrome
- CVE-2026-11200Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craGoogle Chrome
- CVE-2026-11199Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak Google Chrome
- CVE-2026-11197Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-11196Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from proGoogle Chrome
- CVE-2026-11195Inappropriate implementation in MHTML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in spGoogle Chrome
- CVE-2026-11194Inappropriate implementation in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crGoogle Chrome
- CVE-2026-11193Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionarGoogle Chrome
- CVE-2026-11192Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform Google Chrome
- CVE-2026-11190Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malGoogle Chrome
- CVE-2026-11189Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to iGoogle Chrome
- CVE-2026-11187Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions viaGoogle Chrome
- CVE-2026-11186Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UGoogle Chrome
- CVE-2026-11184Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictionsGoogle Chrome
- CVE-2026-11183Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information Google Chrome
- CVE-2026-11182Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2026-11181Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policyGoogle Chrome
- CVE-2026-11180Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2026-11178Insufficient policy enforcement in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-originGoogle Chrome
- CVE-2026-11176Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-11174Inappropriate implementation in Site Isolation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-11168Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-11166Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UGoogle Chrome
- CVE-2026-11162Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2026-11161Inappropriate implementation in DataTransfer in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data viaGoogle Chrome
- CVE-2026-11160Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive inforGoogle Chrome
- CVE-2026-11159Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pagGoogle Chrome
- CVE-2026-11157Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious exGoogle Chrome
- CVE-2026-11156Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2026-11155Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteGoogle Chrome
- CVE-2026-11150Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UGoogle Chrome
- CVE-2026-11148Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to leak cross-origin daGoogle Chrome
- CVE-2026-11145Race in Geolocation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTMGoogle Chrome
- CVE-2026-11143Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a maliGoogle Chrome
- CVE-2026-11142Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via Google Chrome
- CVE-2026-11141Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtGoogle Chrome
- CVE-2026-11140Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process Google Chrome
- CVE-2026-11139Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-11138Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-11137Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information froGoogle Chrome
- CVE-2026-11135Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary accessGoogle Chrome
- CVE-2026-11134Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-11133Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via Google Chrome
- CVE-2026-11132Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via Google Chrome
- CVE-2026-11129Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via aGoogle Chrome
- CVE-2026-11128Inappropriate implementation in Web Share in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage iGoogle Chrome
- CVE-2026-11127Inappropriate implementation in WebAPKs in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofGoogle Chrome
- CVE-2026-11126Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicGoogle Chrome
- CVE-2026-11123Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information froGoogle Chrome
- CVE-2026-11122Inappropriate implementation in Keyboard in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTGoogle Chrome
- CVE-2026-11121Insufficient validation of untrusted input in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-11110Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-11109Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-11107Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a craGoogle Chrome
- CVE-2026-11106Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafGoogle Chrome
- CVE-2026-11105Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11104Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtGoogle Chrome
- CVE-2026-11101Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a craftGoogle Chrome
- CVE-2026-11098Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-11097Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin daGoogle Chrome
- CVE-2026-11096Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fGoogle Chrome
- CVE-2026-11093Inappropriate implementation in Printing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2026-11090Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-11089Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtGoogle Chrome
- CVE-2026-11087Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leaGoogle Chrome
- CVE-2026-11084Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dataGoogle Chrome
- CVE-2026-11083Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dataGoogle Chrome
- CVE-2026-11081Inappropriate implementation in Canvas in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a Google Chrome
- CVE-2026-11078Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2026-11075Out of bounds read in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from Google Chrome
- CVE-2026-11073Use after free in WebGL in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from pGoogle Chrome
- CVE-2026-11069Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin pGoogle Chrome
- CVE-2026-11067Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-11064Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak crGoogle Chrome
- CVE-2026-11062Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a Google Chrome
- CVE-2026-11057Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtaGoogle Chrome
- CVE-2026-11051Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive inforGoogle Chrome
- CVE-2026-11048Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malGoogle Chrome
- CVE-2026-11045Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the Google Chrome
- CVE-2026-11044Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive informatiGoogle Chrome
- CVE-2026-11039Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML pagGoogle Chrome
- CVE-2026-11038Insufficient policy enforcement in Subresource Integrity in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass contentGoogle Chrome
- CVE-2026-11036Inappropriate implementation in DOM in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a craGoogle Chrome
- CVE-2026-11034Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker toGoogle Chrome
- CVE-2026-11033Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive informatGoogle Chrome
- CVE-2026-11032Inappropriate implementation in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dataGoogle Chrome
- CVE-2026-11031Insufficient validation of untrusted input in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform Google Chrome
- CVE-2026-11027Insufficient validation of untrusted input in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised theGoogle Chrome
- CVE-2026-11026Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malGoogle Chrome
- CVE-2026-11025Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to bypass contentGoogle Chrome
- CVE-2026-11023Inappropriate implementation in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renGoogle Chrome
- CVE-2026-11022Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-11020Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via aGoogle Chrome
- CVE-2026-11019Inappropriate implementation in Payments in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2026-11018Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictionsGoogle Chrome
- CVE-2026-11017Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2026-11016Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised Google Chrome
- CVE-2026-11014Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a Google Chrome
- CVE-2026-11013Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised Google Chrome
- CVE-2026-11008Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had comprGoogle Chrome
- CVE-2026-11007Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had cGoogle Chrome
- CVE-2026-11006Out of bounds read in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a cGoogle Chrome
- CVE-2026-11005Out of bounds read in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer prGoogle Chrome
- CVE-2026-11004Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obGoogle Chrome
- CVE-2026-11001Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2026-10999Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer procGoogle Chrome
- CVE-2026-10998Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of boGoogle Chrome
- CVE-2026-10997Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a Google Chrome
- CVE-2026-10996Inappropriate implementation in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via aGoogle Chrome
- CVE-2026-10994Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information froGoogle Chrome
- CVE-2026-10993Heap buffer overflow in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fGoogle Chrome
- CVE-2026-10992Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive Google Chrome
- CVE-2026-10985Out of bounds read in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML paGoogle Chrome
- CVE-2026-10984Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoGoogle Chrome
- CVE-2026-10981Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised tGoogle Chrome
- CVE-2026-10980Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-10979Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information frGoogle Chrome
- CVE-2026-10977Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leakGoogle Chrome
- CVE-2026-10976Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information fromGoogle Chrome
- CVE-2026-10950Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin daGoogle Chrome
- CVE-2026-10944Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin daGoogle Chrome
- CVE-2026-10916Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisedGoogle Chrome
- CVE-2026-10912Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromisGoogle Chrome
- CVE-2026-10875projectworlds Online Art Gallery Shop Project adminHome.ph sql injectionprojectworlds Online Art Gallery Shop Project
- CVE-2026-10874projectworlds Online Art Gallery Shop Project adminHome.php sql injectionprojectworlds Online Art Gallery Shop Project
- CVE-2024-27891On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.Arista Networks EOS
- CVE-2026-47655Microsoft Graph Information Disclosure VulnerabilityMicrosoft Graph
- CVE-2026-47644Copilot Chat (Microsoft Edge) Information Disclosure VulnerabilityCopilot Chat
- CVE-2026-42824M365 Copilot Information Disclosure VulnerabilityMicrosoft 365 Copilot
- CVE-2026-11322Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypassnesquena Hermes WebUI
- CVE-2024-6858In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.Arista Networks EOS
- CVE-2026-42547IRIS Alerts Can be Falsely Attributed to Customersdfir-iris iris-web
- CVE-2026-42543IRIS has a Cross-Site Request Forgery (CSRF) issuedfir-iris iris-web
- CVE-2026-42540IRIS has a Mass Assignment issuedfir-iris iris-web
- CVE-2026-42539IRIS has an Excessive Data Exposure issuedfir-iris iris-web
- CVE-2026-42538IRIS has an Insecure File Uploaddfir-iris iris-web
- CVE-2026-42329Iris has an Open Redirect issuedfir-iris iris-web
- CVE-2026-5066net: sockets: tls: Potential out-of-bounds write/read in socket_op_vtable::connect functionzephyrproject-rtos Zephyr
- CVE-2026-5589Out-of-bounds write caused by an integer underflow in the Bluetooth Mesh subsystem.zephyrproject-rtos Zephyr
- CVE-2026-21404NAVTOR NavBox Use of Hard-coded CredentialsNAVTOR NavBox
- CVE-2026-40898quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustionquic-go · github.com/quic-go/quic-go
- CVE-2026-48480netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncationnetty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-48040netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Accessnetty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-41207netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failuresnetty-incubator-codec-ohttp · io.netty.incubator:netty-incu…
- CVE-2026-50266In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set devicOpenStack Neutron · neutron
- CVE-2026-49940Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasksRRWO Net::CIDR::Set
- CVE-2026-46739Net::Statsd versions before 0.13 for Perl allow metric injectionsCOSIMO Net::Statsd
- CVE-2026-10815LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorizationLakshayD02 Hostel-Management-System-PHP
- CVE-2026-10814milvus-io milvus Grantee ID Hash kv_catalog.go weak hashmilvus-io milvus · github.com/milvus-io/milvus
- CVE-2026-45287OpenTelemetry-Go's Schema ParseFile leaks file descriptors on each parseopen-telemetry go.opentelemetry.io/otel/schema/v1.1 · op… +3
- CVE-2026-10813LMCache KV Cache utils.py hex_hash_to_int16 weak hashLMCache
- CVE-2026-41178OpenTelemetry-Go's baggage parsing no longer caps raw header lengthopen-telemetry go.opentelemetry.io/otel/baggage · open-t… +3
- CVE-2026-40930LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk bodypnggroup libpng · pnggroup libpng-apng
- CVE-2026-7774tarfile.data_filter path traversal bypass allows writing outside the extraction directoryPython Software Foundation CPython
- CVE-2026-10812zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hashzilliztech GPTCache · gptcache
- CVE-2026-47707Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplificationstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-45739Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-47706Strawberry GraphQL has a Circular Fragment Reference DOSstrawberry-graphql strawberry · strawberry-graphql
- CVE-2026-10811itsourcecode Fees Management System receipt.php sql injectionitsourcecode Fees Management System
- CVE-2026-10864MISP Dashboard widget field selection may expose restricted user and organisation datamisp
- CVE-2026-10863MISP User-controlled order parameter in correlations over-correlation endpointmisp
- CVE-2026-10861MISP post-login open redirect via pre_login_requested_urlmisp
- CVE-2019-25744WordPress Popup Builder 3.49 Persistent Cross-Site ScriptingPopup-Builder Popup Builder
- CVE-2019-25743WordPress Soliloquy Lite 2.5.6 Persistent Cross-Site ScriptingSoliloquywp Soliloquy Lite
- CVE-2019-25742WordPress Theme Zoner Real Estate 4.1.1 Persistent XSSFruitfulcode Zoner Real Estate
- CVE-2019-25739GigToDo Freelance Marketplace Script 1.3 Persistent XSSGigtodoscript GigToDo
- CVE-2019-25737Live Chat Unlimited 2.8.3 Stored Cross-Site ScriptingScreets Live Chat Unlimited
- CVE-2019-25734Contact Form by WD 1.13.1 CSRF to Local File InclusionWeb-Dorado Contact Form Maker
- CVE-2019-25731Zuz Music 2.1 Persistent Cross-site Scripting via zuzconsole ContactZuz Music
- CVE-2026-10856Open redirect in MISP dashboard button widget URL handlingmisp
- CVE-2026-10810itsourcecode Fees Management System navbar.php cross site scriptingitsourcecode Fees Management System
- CVE-2026-10855MISP Event template importer authorization bypassmisp
- CVE-2026-10809itsourcecode Fees Management System manage_user.php sql injectionitsourcecode Fees Management System
- CVE-2026-10854Unauthorized exposure of private galaxies in MISP event template creationmisp
- CVE-2026-40605Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion APITautulli
- CVE-2026-43926FOSSBilling's password reset confirmation endpoint lacks rate limitingFOSSBilling
- CVE-2026-10808itsourcecode Fees Management System manage_student.php sql injectionitsourcecode Fees Management System
- CVE-2025-62338HCL BigFix Cloud Lifecycle Management is affected by lack of input validationHCLSoftware BigFix Cloud Lifecycle Management
- CVE-2026-10807mjperpinosa stumasy change_profile_image.php unrestricted uploadmjperpinosa stumasy
- CVE-2026-10806mjperpinosa stumasy add_post.php unrestricted uploadmjperpinosa stumasy
- CVE-2026-10804Streamlit Palette hashing.py weak hashStreamlit
- CVE-2025-52606HCL iControl was affected by Weak Input Validation vulnerability. .HCL iControl
- CVE-2025-52608HCL iControl was affected by Missing Cookie Attributes vulnerability.HCL iControl
- CVE-2026-10803MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hashMLflow
- CVE-2025-52609HCL iControl was affected by Missing Security Headers vulnerability.HCL iControl
- CVE-2025-52611HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerabilityHCL iControl
- CVE-2026-10802keystonejs keystone GraphQL API Endpoint output-field.ts resource consumptionkeystonejs keystone · @keystone-6/core
- CVE-2026-10801modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hashmodelscope ms-swift · ms-swift
- CVE-2026-49077WordPress WP eMember plugin <= v10.2.2 - Sensitive Data Exposure vulnerabilityTips and Tricks HQ WP eMember
- CVE-2026-10800PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hashPaddlePaddle FastDeploy
- CVE-2026-8916Out-of-bounds write vulnerability in Samsung Open Source rlottie allows Overflow Buffers.Samsung Open Source rlottie
- CVE-2026-47318Stack-based buffer overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.Samsung Open Source rlottie
- CVE-2026-47306Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Oversized Serialized Data Payloads.Samsung Open Source rlottie
- CVE-2026-49510Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Integer Attacks.Samsung Open Source rlottie
- CVE-2026-10305Out-of-bounds read vulnerability in Samsung Open Source rlottie allows Overread Buffers.Samsung Open Source rlottie
- CVE-2026-47319Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation.Samsung Open Source rlottie
- CVE-2026-47320Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source rlottie allows Pointer Manipulation, Oversized Samsung Open Source rlottie
- CVE-2026-50226Firmware Theft & IMEI Spoofing via Connect-OTAAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-50224Unauthenticated IPv6 WAN Management ExposureAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-4881In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make serverOctopus Deploy Octopus Server
- CVE-2026-50210Weak Static Cryptographic Initialization VectorsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49204Hard-coded AWS Cognito Testing AccountsAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-49192Summary Service Insecure Direct Object ReferenceAcer Connect M6E 5G Portable WiFi Router
- CVE-2026-10805Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backendRed Hat Enterprise Linux · Red Hat Multicluster Engine f… +3
- CVE-2026-50219libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_Parselibexpat project libexpat
- CVE-2026-10597ITPison｜OMICARD EDM - Insecure Direct Object ReferenceITPison OMICARD EDM
- CVE-2026-41858Weak Randomness / Insecure Cryptographic Primitive (CWE-338) in Get-RandomPassword in BOSH-Ecosystem / windows-utilities-release allows a neCloud Foundry Foundation windows-utilities-release
- CVE-2026-8653MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' ParameterStylemixThemes MasterStudy LMS Pro
- CVE-2026-7764Out-of-bounds read in morse.ko Vendor IE processingMorse Micro HaLowLink
- CVE-2025-65640Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to impro
- CVE-2026-36174GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console
- CVE-2026-36175An issue in the U-Boot component of GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass authentication and gain root access via
- CVE-2026-36178The factory reset functionality in GNCC GP5 v7.1.76 fails to clear sensitive cryptographic material in the JFFS2 configuration partition, po
- CVE-2026-36180A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify
- CVE-2026-36499A missing upper-bound check in the udpif_set_threads() function of Open vSwitch v3.6.90 allows an attacker with OVSDB write access to reques
- CVE-2026-44917OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pOpenStack Ironic
- CVE-2026-48681OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.OpenStack Ironic · ironic