| CVE-2026-9893 | 8.3 | — | — | — | google / chrome | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the r | 137d ago |
| CVE-2026-9892 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker | 137d ago |
| CVE-2026-9890 | 8.3 | — | — | — | google / chrome | Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromi | 137d ago |
| CVE-2026-9889 | 8.3 | — | — | — | google / chrome | Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker | 137d ago |
| CVE-2026-9888 | 8.3 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had com | 137d ago |
| CVE-2026-9885 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote a | 137d ago |
| CVE-2026-9880 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attac | 137d ago |
| CVE-2026-9877 | 8.3 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the | 137d ago |
| CVE-2026-10020 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a r | 137d ago |
| CVE-2026-10017 | 8.3 | — | — | — | google / chrome | Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromi | 137d ago |
| CVE-2026-10014 | 8.3 | — | — | — | google / chrome | Use after free in WebMIDI in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had co | 137d ago |
| CVE-2026-10012 | 8.3 | — | — | — | google / chrome | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the | 137d ago |
| CVE-2026-10001 | 8.3 | — | — | — | google / chrome | Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had co | 137d ago |
| CVE-2026-10000 | 8.3 | — | — | — | google / chrome | Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had | 137d ago |
| CVE-2026-44966 | 8.3 | — | — | — | shepherdwind / velocity.js | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. | 139d ago |
| CVE-2026-44570 | 8.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 150d ago |
| CVE-2026-45369 | 8.3 | — | — | — | — | python-utcp is the python implementation of UTCP. | 151d ago |
| CVE-2026-8575 | 8.3 | — | — | — | google / chrome | Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the ren | 151d ago |
| CVE-2026-8574 | 8.3 | — | — | — | google / chrome | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compro | 151d ago |
| CVE-2026-8573 | 8.3 | — | — | — | google / chrome | Integer overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to potenti | 151d ago |
| CVE-2026-8571 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacke | 151d ago |
| CVE-2026-8569 | 8.3 | — | — | — | google / chrome | Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentia | 151d ago |
| CVE-2026-8548 | 8.3 | — | — | — | google / chrome | Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised | 151d ago |
| CVE-2026-8542 | 8.3 | — | — | — | google / chrome | Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compro | 151d ago |
| CVE-2026-8534 | 8.3 | — | — | — | google / chrome | Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker wh | 151d ago |
| CVE-2026-8533 | 8.3 | — | — | — | google / chrome | Use after free in Accessibility in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromi | 151d ago |
| CVE-2026-8530 | 8.3 | — | — | — | google / chrome | Use after free in Network in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had com | 151d ago |
| CVE-2026-8525 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentia | 151d ago |
| CVE-2026-8523 | 8.3 | — | — | — | google / chrome | Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the r | 151d ago |
| CVE-2026-8520 | 8.3 | — | — | — | google / chrome | Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbo | 151d ago |
| CVE-2026-8515 | 8.3 | — | — | — | google / chrome | Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to en | 151d ago |
| CVE-2026-8514 | 8.3 | — | — | — | google / chrome | Use after free in Aura in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the r | 151d ago |
| CVE-2026-8513 | 8.3 | — | — | — | google / chrome | Use after free in Input in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compr | 151d ago |
| CVE-2026-8512 | 8.3 | — | — | — | google / chrome | Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a use | 151d ago |
| CVE-2026-43907 | 8.3 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 151d ago |
| CVE-2026-44586 | 8.3 | — | — | — | — | SiYuan is an open-source personal knowledge management system. | 151d ago |
| CVE-2026-32993 | 8.3 | — | — | — | — | Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthentic | 152d ago |
| CVE-2026-21821 | 8.3 | — | — | — | — | The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. | 152d ago |
| CVE-2026-35438 | 8.3 | — | — | — | microsoft / windows admin center | Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. | 153d ago |
| CVE-2025-40946 | 8.3 | — | — | — | — | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions | 153d ago |
| CVE-2026-42313 | 8.3 | — | — | — | pyload-ng project / pyload-ng | pyLoad is a free and open-source download manager written in Python. | 154d ago |
| CVE-2026-1313 | 8.3 | — | — | — | — | The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, a | 205d ago |
| CVE-2026-4064 | 8.3 | — | — | — | ironmansoftware / powershell universal | Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an a | 209d ago |
| CVE-2026-0708 | 8.3 | — | — | — | vstakhov / libucl | A flaw was found in libucl. | 209d ago |
| CVE-2026-25083 | 8.3 | — | — | — | — | GROWI OpenAI thread/message API endpoints do not perform authorization. | 210d ago |
| CVE-2025-13779 | 8.3 | — | — | — | — | Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affe | 213d ago |
| CVE-2025-13777 | 8.3 | — | — | — | — | Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects A | 213d ago |
| CVE-2026-32110 | 8.3 | — | — | — | b3log / siyuan | SiYuan is a personal knowledge management system. | 215d ago |
| CVE-2026-86145 | 8.2 | — | — | — | — | PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a re | 37d ago |
| CVE-2026-52767 | 8.2 | — | — | — | — | YesWiki is a wiki system written in PHP. | 38d ago |
| CVE-2026-77822 | 8.2 | — | — | — | — | IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to se | 38d ago |
| CVE-2026-85613 | 8.2 | — | — | — | — | OpenPanel before 2.3.0 contains a cross-site scripting vulnerability in the unauthenticated favicon proxy endpoint | 38d ago |
| CVE-2026-85455 | 8.2 | — | — | — | — | MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet t | 39d ago |
| CVE-2026-85432 | 8.2 | — | — | — | — | MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticat | 39d ago |
| CVE-2026-63376 | 8.2 | — | — | — | — | toml-node is a TOML parser for Node.js and the browser. | 39d ago |
| CVE-2026-44506 | 8.2 | — | — | — | — | Medplum is a developer platform that enables development of healthcare apps. | 39d ago |
| CVE-2026-84757 | 8.2 | — | — | — | — | Unauthenticated Settings Change in WP Compress <= 7.21.28 versions. | 39d ago |
| CVE-2021-38489 | 8.2 | — | — | — | — | HDD password plaintext is stored in a UEFI variable. | 39d ago |
| CVE-2026-20277 | 8.2 | — | — | — | — | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software enginee | 40d ago |
| CVE-2026-18329 | 8.2 | — | — | — | — | Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler perform | 40d ago |
