Search
37,429 CVEs · Critical severity
CVEs (37,429, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 301–325 of 37,429 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-92173 | CRITICAL | 9.1 | 2026-09-30 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privileged PendingIntent including a com.oculus.vrshell CallerIdentity to an a… | |
| CVE-2026-92161 | CRITICAL | Patched | 9.8 | 2026-09-25 | FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the Discord OAuth provider does… |
| CVE-2026-92152 | CRITICAL | Patched | — | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-… |
| CVE-2026-92120 | CRITICAL | Patched | 9.1 | 2026-10-12 | OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 whic… |
| CVE-2026-92119 | CRITICAL | Patched | 9.1 | 2026-10-12 | REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which f… |
| CVE-2026-92116 | CRITICAL | Patched | 9.1 | 2026-10-12 | OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which… |
| CVE-2026-92097 | CRITICAL | 9.1 | 2026-10-14 | The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialo… | |
| CVE-2026-9209 | CRITICAL | 9.8 | 2026-10-08 | mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and expor… | |
| CVE-2026-92084 | CRITICAL | 9.1 | 2026-10-03 | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including… | |
| CVE-2026-92079 | CRITICAL | Patched | 9.1 | 2026-09-15 | Mitigation bypass in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92075 | CRITICAL | Patched | 9.1 | 2026-09-15 | Mitigation bypass in the Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92071 | CRITICAL | Patched | 9.6 | 2026-09-15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thu… |
| CVE-2026-92066 | CRITICAL | Patched | 9.8 | 2026-09-15 | Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92061 | CRITICAL | Patched | 9.8 | 2026-09-15 | Incorrect boundary conditions in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92059 | CRITICAL | Patched | 9.3 | 2026-09-15 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92057 | CRITICAL | Patched | 9.1 | 2026-09-15 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92051 | CRITICAL | Patched | 9.1 | 2026-09-15 | Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92050 | CRITICAL | Patched | 9.1 | 2026-09-15 | Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92048 | CRITICAL | Patched | 9.0 | 2026-09-15 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thu… |
| CVE-2026-92045 | CRITICAL | Patched | 9.6 | 2026-09-15 | Sandbox escape due to incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92041 | CRITICAL | Patched | 9.1 | 2026-09-15 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92038 | CRITICAL | Patched | 9.1 | 2026-09-15 | Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3. |
| CVE-2026-92037 | CRITICAL | Patched | 9.8 | 2026-09-15 | Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92036 | CRITICAL | Patched | 9.8 | 2026-09-15 | Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
| CVE-2026-92035 | CRITICAL | Patched | 9.6 | 2026-09-15 | Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Thunderbird 140.17, Firefox 156, Firefox ESR 153.3, Thunderbi… |