Search
4,652 CVEs
CVEs (4,652, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 201–225 of 4,652 (capped at 500)
| CVE ID | Severity | Patch | CVSS ↓ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-113169 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf… |
| CVE-2026-113171 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-113138 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte… |
| CVE-2026-113126 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
| CVE-2026-113116 | CRITICAL | Patched | 9.6 | 2026-10-20 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa… |
| CVE-2026-113084 | CRITICAL | Patched | 9.6 | 2026-10-20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… |
| CVE-2026-113089 | CRITICAL | Patched | 9.6 | 2026-10-20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a … |
| CVE-2026-113078 | CRITICAL | 9.6 | 2026-10-20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c… | |
| CVE-2026-113072 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page… |
| CVE-2026-113056 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
| CVE-2026-113023 | CRITICAL | Patched | 9.6 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr… |
| CVE-2026-113014 | CRITICAL | Patched | 9.6 | 2026-10-20 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted … |
| CVE-2026-113020 | CRITICAL | Patched | 9.6 | 2026-10-20 | Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted … |
| CVE-2026-113007 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H… |
| CVE-2026-112992 | CRITICAL | Patched | 9.6 | 2026-10-20 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p… |
| CVE-2026-101420 | CRITICAL | 9.6 | 2026-10-20 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitabl… | |
| CVE-2026-107188 | CRITICAL | 9.6 | 2026-10-19 | A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can brow… | |
| CVE-2026-97631 | CRITICAL | — | 2026-10-22 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Su… | |
| CVE-2025-30047 | CRITICAL | Patched | — | 2026-10-23 | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, th… |
| CVE-2025-30050 | CRITICAL | Patched | — | 2026-10-23 | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untruste… |
| CVE-2026-79872 | CRITICAL | 9.4 | 2026-10-22 | A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attac… | |
| CVE-2026-113788 | CRITICAL | Patched | — | 2026-10-21 | Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that would allow an attacker to… |
| CVE-2026-55486 | CRITICAL | Patched | 9.3 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.08 to before version 26.05, the IIIF Auth 2.0 endpoin… |
| CVE-2026-114357 | CRITICAL | — | 2026-10-23 | Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to o… | |
| CVE-2026-112860 | CRITICAL | 9.3 | 2026-10-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blin… |