93,331 indexed
CVECVE vulnerabilities
93,331 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 3,951–4,000 of 93,331 · page 80 of 1867
| ID | Title | Summary |
|---|---|---|
| CVE-2026-91727 | CVE-2026-91727 CVSS 8.1google | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker who had compromised the renderer proces… |
| CVE-2026-91726 | CVE-2026-91726 CVSS 4.7google | Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HT… |
| CVE-2026-91725 | CVE-2026-91725 CVSS 5.3google | Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromiu… |
| CVE-2026-91724 | CVE-2026-91724 CVSS 8.3google | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbit… |
| CVE-2026-91723 | CVE-2026-91723 CVSS 3.1google | Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium secu… |
| CVE-2026-91722 | CVE-2026-91722 CVSS 8.8google | Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
| CVE-2026-91721 | CVE-2026-91721 CVSS 8.8google | Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
| CVE-2026-91720 | CVE-2026-91720 CVSS 4.7google | Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (… |
| CVE-2026-9172 | CVE-2026-9172 CVSS 5.3 | The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due to a missin… |
| CVE-2026-91719 | CVE-2026-91719 CVSS 8.1google | Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security… |
| CVE-2026-91718 | CVE-2026-91718 CVSS 9.6google | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.… |
| CVE-2026-91717 | CVE-2026-91717 CVSS 5.1google | Missing authorization in Android in Google Chrome on on Android prior to 153.0.8010.47 allowed a local attacker to obtain sensitive information via a co-instal… |
| CVE-2026-91716 | CVE-2026-91716 CVSS 9.6google | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.… |
| CVE-2026-91715 | CVE-2026-91715 CVSS 8.8google | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
| CVE-2026-91714 | CVE-2026-91714 CVSS 5.3google | Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information v… |
| CVE-2026-91713 | CVE-2026-91713 CVSS 4.2google | Missing authorization in Browser in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to spoof UI element… |
| CVE-2026-91712 | CVE-2026-91712 CVSS 8.3google | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiall… |
| CVE-2026-91711 | CVE-2026-91711 CVSS 8.8google | Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a craft… |
| CVE-2026-91710 | CVE-2026-91710 CVSS 9.6google | Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted … |
| CVE-2026-9171 | CVE-2026-9171 CVSS 7.5ibm | IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request.… |
| CVE-2026-91709 | CVE-2026-91709 CVSS 8.8google | Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
| CVE-2026-91708 | CVE-2026-91708 CVSS 3.1google | Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin dat… |
| CVE-2026-91707 | CVE-2026-91707 CVSS 5.3 | The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.11.1. This is due to the software allow… |
| CVE-2026-9170 | CVE-2026-9170 CVSS 9.8ibm | IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation. |
| CVE-2026-9169 | CVE-2026-9169 CVSS 8.8 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the app… |
| CVE-2026-9166 | CVE-2026-9166 CVSS 7.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path… |
| CVE-2026-9165 | CVE-2026-9165 CVSS 7.7 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Central does not limit the depth of GraphQL queries served on the authenticated G… |
| CVE-2026-9163 | CVE-2026-9163 CVSS 9.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allow… |
| CVE-2026-9162 | CVE-2026-9162 CVSS 4.3mattermost | Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to invalidate cached authentication state for active WebSock… |
| CVE-2026-9161 | CVE-2026-9161 CVSS 5.3 | Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 1009202… |
| CVE-2026-9160 | CVE-2026-9160 CVSS 4.3 | Improper neutralization of special elements used in a template engine vulnerability in Arma Digital Media Inc. Website Template allows Code Injection. This is… |
| CVE-2026-9158 | CVE-2026-9158 CVSS 9.8eclipse | In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This … |
| CVE-2026-9157 | CVE-2026-9157 CVSS 8.4 | Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects … |
| CVE-2026-9156 | CVE-2026-9156 CVSS 6.5tanium | Tanium addressed a denial of service vulnerability in Tanium Server. |
| CVE-2026-9155 | CVE-2026-9155 CVSS 8.8gnu | OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the express… |
| CVE-2026-9154 | CVE-2026-9154 CVSS 7.1gnu | Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to write attacker-controlled content to arbitrar… |
| CVE-2026-9153 | CVE-2026-9153 CVSS 6.5gnu | Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated attackers to read arbitrary files via the expression parame… |
| CVE-2026-9152 | CVE-2026-9152 | A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authent… |
| CVE-2026-9151 | CVE-2026-9151 | An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows … |
| CVE-2026-9150 | CVE-2026-9150 CVSS 6.5opensuse | A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian… |
| CVE-2026-9149 | CVE-2026-9149 CVSS 6.5opensuse | A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size v… |
| CVE-2026-9148 | CVE-2026-9148 CVSS 7.2 | The Comments – wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to, and includ… |
| CVE-2026-9147 | CVE-2026-9147 CVSS 7.8 | uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metad… |
| CVE-2026-9146 | CVE-2026-9146 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-9145 | CVE-2026-9145 CVSS 6.5 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via the create_entry_el() function in versi… |
| CVE-2026-9144 | CVE-2026-9144 CVSS 7.6 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a stored cross-site scripting vulnerability in the embedded web configuration interface that allo… |
| CVE-2026-9143 | CVE-2026-9143 CVSS 3.7ni | There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high … |
| CVE-2026-9142 | CVE-2026-9142 CVSS 9.1ni | There is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and the server is bound beyond loopback. This m… |
| CVE-2026-9141 | CVE-2026-9141 CVSS 9.8 | Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows un… |
| CVE-2026-9140 | CVE-2026-9140 | A denial-of-service security issue exists in the 1719-AENTR. The security issue stems from improper handling of a UDP unicast network storm, which causes the d… |