| CVE-2026-57272 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57271 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57270 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57269 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57268 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57267 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57266 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57265 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-57264 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-13132 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-13131 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 102d ago |
| CVE-2026-14429 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attack | 103d ago |
| CVE-2026-14428 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a re | 103d ago |
| CVE-2026-14427 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised | 103d ago |
| CVE-2026-14413 | 8.3 | — | — | — | google / chrome | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised t | 103d ago |
| CVE-2026-14412 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | 103d ago |
| CVE-2026-14401 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a r | 103d ago |
| CVE-2026-14400 | 8.3 | — | — | — | google / chrome | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised | 103d ago |
| CVE-2026-14389 | 8.3 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the | 103d ago |
| CVE-2026-50521 | 8.3 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 103d ago |
| CVE-2026-58592 | 8.3 | — | — | — | — | Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. | 103d ago |
| CVE-2026-56233 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticate | 104d ago |
| CVE-2026-14151 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compr | 104d ago |
| CVE-2026-13951 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c | 104d ago |
| CVE-2026-13841 | 8.3 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the | 104d ago |
| CVE-2026-13834 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attac | 104d ago |
| CVE-2026-13832 | 8.3 | — | — | — | google / chrome | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t | 104d ago |
| CVE-2026-13829 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed | 104d ago |
| CVE-2026-13823 | 8.3 | — | — | — | google / chrome | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r | 104d ago |
| CVE-2026-13813 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote | 104d ago |
| CVE-2026-13804 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised | 104d ago |
| CVE-2026-13803 | 8.3 | — | — | — | google / chrome | Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromise | 104d ago |
| CVE-2026-13801 | 8.3 | — | — | — | google / chrome | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis | 104d ago |
| CVE-2026-58170 | 8.3 | — | — | — | — | Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the | 104d ago |
| CVE-2026-13744 | 8.3 | — | — | — | snowflake / snowflake cli | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended | 105d ago |
| CVE-2025-2902 | 8.3 | — | — | — | — | Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. | 105d ago |
| CVE-2026-56063 | 8.3 | — | — | — | — | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | 108d ago |
| CVE-2026-2053 | 8.3 | — | — | — | wso2 / api manager | The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validat | 108d ago |
| CVE-2026-13281 | 8.3 | — | — | — | google / chrome | Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised th | 109d ago |
| CVE-2025-71328 | 8.3 | — | — | — | flowiseai / flowise | Flowise before 3.0.10 contains an unverified password change vulnerability. | 109d ago |
| CVE-2026-55412 | 8.3 | — | — | — | — | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows a | 109d ago |
| CVE-2026-54848 | 8.3 | — | — | — | — | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce al | 109d ago |
| CVE-2026-47267 | 8.3 | — | — | — | — | Gogs is an open source self-hosted Git service. | 110d ago |
| CVE-2026-13025 | 8.3 | — | — | — | google / chrome | Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the render | 110d ago |
| CVE-2026-52920 | 8.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound | 110d ago |
| CVE-2026-54010 | 8.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 111d ago |
| CVE-2026-50574 | 8.3 | — | — | — | yt-dlp project / yt-dlp | yt-dlp is a command-line audio/video downloader. | 111d ago |
| CVE-2026-50023 | 8.3 | — | — | — | yt-dlp project / yt-dlp | yt-dlp is a command-line audio/video downloader. | 111d ago |
| CVE-2026-34914 | 8.3 | — | — | — | — | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. | 111d ago |
| CVE-2026-56225 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (ge | 111d ago |
| CVE-2025-71337 | 8.3 | — | — | — | flowiseai / flowise | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. | 111d ago |
| CVE-2026-54100 | 8.3 | — | — | — | redhat / openshift container platform | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. | 112d ago |
| CVE-2026-56215 | 8.3 | — | — | — | — | Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresse | 114d ago |
| CVE-2026-12468 | 8.3 | — | — | — | google / chrome | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the | 117d ago |
| CVE-2026-12467 | 8.3 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromise | 117d ago |
| CVE-2026-12465 | 8.3 | — | — | — | google / chrome | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compr | 117d ago |
| CVE-2026-12464 | 8.3 | — | — | — | google / chrome | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised t | 117d ago |
| CVE-2026-12454 | 8.3 | — | — | — | google / chrome | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromise | 117d ago |
| CVE-2026-12451 | 8.3 | — | — | — | google / chrome | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had co | 117d ago |
| CVE-2026-12438 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attac | 117d ago |
