CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-12466	8.8	—	—	—	google / chrome	Heap buffer overflow in WebRTC in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to ex	81d ago
CVE-2026-12452	8.8	—	—	—	google / chrome	Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to poten	81d ago
CVE-2026-12448	8.8	—	—	—	google / chrome	Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attac	81d ago
CVE-2026-12447	8.8	—	—	—	google / chrome	Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbit	81d ago
CVE-2026-12443	8.8	—	—	—	google / chrome	Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute	81d ago
CVE-2026-12442	8.8	—	—	—	google / chrome	Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execu	81d ago
CVE-2026-12441	8.8	—	—	—	google / chrome	Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potent	81d ago
CVE-2026-12439	8.8	—	—	—	google / chrome	Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potent	81d ago
CVE-2026-12256	8.8	—	—	—	—	Contributor PHP Object Injection in Avada <= 3.15.3 versions.	81d ago
CVE-2026-12165	8.8	—	—	—	—	The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to	81d ago
CVE-2025-69138	8.8	—	—	—	—	Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.	81d ago
CVE-2025-59563	8.8	—	—	—	—	Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.	81d ago
CVE-2026-46973	8.8	—	—	—	oracle / outsourced manufacturing for discrete industries	Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component:	81d ago
CVE-2026-46972	8.8	—	—	—	oracle / outsourced manufacturing for discrete industries	Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite (component:	81d ago
CVE-2026-46967	8.8	—	—	—	oracle / public sector financials	Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component	81d ago
CVE-2026-46965	8.8	—	—	—	oracle / universal work queue	Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site	81d ago
CVE-2026-46962	8.8	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	81d ago
CVE-2026-46961	8.8	—	—	—	oracle / project portfolio analysis	Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Ope	81d ago
CVE-2026-46952	8.8	—	—	—	oracle / quality	Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).	81d ago
CVE-2026-46951	8.8	—	—	—	oracle / quality	Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations).	81d ago
CVE-2026-46950	8.8	—	—	—	oracle / advanced outbound telephony	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Op	81d ago
CVE-2026-46947	8.8	—	—	—	oracle / advanced outbound telephony	Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Op	81d ago
CVE-2026-46942	8.8	—	—	—	oracle / process manufacturing process planning	Vulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business Suite (component:	81d ago
CVE-2026-46940	8.8	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).	81d ago
CVE-2026-46937	8.8	—	—	—	oracle / isetup	Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform,	81d ago
CVE-2026-46931	8.8	—	—	—	oracle / enterprise asset management	Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Internal Op	81d ago
CVE-2026-46929	8.8	—	—	—	oracle / cost management	Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning).	81d ago
CVE-2026-46928	8.8	—	—	—	oracle / spares management	Vulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component: Internal Operations).	81d ago
CVE-2026-46926	8.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	81d ago
CVE-2026-46921	8.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	81d ago
CVE-2026-46916	8.8	—	—	—	oracle / process manufacturing product development	Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (componen	81d ago
CVE-2026-46903	8.8	—	—	—	oracle / jd edwards enterpriseone tools	Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infras	81d ago
CVE-2026-46886	8.8	—	—	—	oracle / siebel apps - marketing	Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).	81d ago
CVE-2026-46885	8.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI).	81d ago
CVE-2026-46864	8.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agen	81d ago
CVE-2026-46780	8.8	—	—	—	oracle / webcenter content	Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core).	81d ago
CVE-2026-35325	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	81d ago
CVE-2026-35324	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	81d ago
CVE-2026-35322	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	81d ago
CVE-2026-35318	8.8	—	—	—	oracle / webcenter sites	Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).	81d ago
CVE-2026-35317	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	81d ago
CVE-2026-35315	8.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	81d ago
CVE-2026-35311	8.8	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).	81d ago
CVE-2026-35303	8.8	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).	81d ago
CVE-2026-35299	8.8	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).	81d ago
CVE-2026-35267	8.8	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).	81d ago
CVE-2026-35265	8.8	—	—	—	oracle / identity manager	Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security).	81d ago
CVE-2026-35259	8.8	—	—	—	oracle / weblogic server	Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).	81d ago
CVE-2026-0164	8.8	—	—	—	google / android	In Modem, there is a possible out of bounds write due to a missing bounds check.	81d ago
CVE-2026-0162	8.8	—	—	—	google / android	In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion.	81d ago
CVE-2026-0161	8.8	—	—	—	google / android	In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer overflow.	81d ago
CVE-2026-0160	8.8	—	—	—	google / android	In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write	81d ago
CVE-2026-0154	8.8	—	—	—	google / android	In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption.	81d ago
CVE-2026-0151	8.8	—	—	—	google / android	In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflow.	81d ago
CVE-2026-0149	8.8	—	—	—	google / android	In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow.	81d ago
CVE-2026-0148	8.8	—	—	—	google / android	In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to an integer	81d ago
CVE-2026-0147	8.8	—	—	—	google / android	In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a	81d ago
CVE-2026-0146	8.8	—	—	—	google / android	In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missin	81d ago
CVE-2026-0139	8.8	—	—	—	google / android	In Modem, there is a possible out of bounds write due to a missing bounds check.	81d ago
CVE-2026-0132	8.8	—	—	—	google / android	In Modem, there is a possible out of bounds write due to a heap buffer overflow.	81d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker