CVEs published March 9 to March 15, 2026
1,397 CVEs were published Mar 9 to Mar 15, 2026, 125 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,397
- Critical
- 125
- Added to CISA KEV
- 6
- Busiest day
- Tue, Mar 10 (346)
- Quietest day
- Sat, Mar 14 (7)
- March 9, 2026154 CVEs · 17 critical
- March 10, 2026346 CVEs · 28 critical
- March 11, 2026337 CVEs · 35 critical
- March 12, 2026195 CVEs · 25 critical
- March 13, 2026289 CVEs · 10 critical
- March 14, 20267 CVEs · 1 critical
- March 15, 202669 CVEs · 9 critical
Added to CISA KEV 6
- CVE-2021-22054VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5VMware Workspace ONE UEM console
- CVE-2025-26399SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilitySolarWinds Web Help Desk
- CVE-2026-1603An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific storedIvanti Endpoint Manager
- CVE-2025-68613n8n Vulnerable to Remote Code Execution via Expression Injectionn8n-io n8n · n8n
- CVE-2026-3909Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a cGoogle Chrome
- CVE-2026-3910Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandGoogle Chrome