| CVE-2026-9969 | 8.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attac | 151d ago |
| CVE-2026-9968 | 8.8 | — | — | — | google / chrome | Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-9965 | 8.8 | — | — | — | google / chrome | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially expl | 151d ago |
| CVE-2026-9962 | 8.8 | — | — | — | google / chrome | Use after free in WebRTC in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary co | 151d ago |
| CVE-2026-9961 | 8.8 | — | — | — | google / chrome | Use after free in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially | 151d ago |
| CVE-2026-9958 | 8.8 | — | — | — | google / chrome | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit | 151d ago |
| CVE-2026-9957 | 8.8 | — | — | — | google / chrome | Use after free in PDF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-9952 | 8.8 | — | — | — | google / chrome | Use after free in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary | 151d ago |
| CVE-2026-9947 | 8.8 | — | — | — | google / chrome | Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-9945 | 8.8 | — | — | — | google / chrome | Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute ar | 151d ago |
| CVE-2026-9941 | 8.8 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod | 151d ago |
| CVE-2026-9940 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exp | 151d ago |
| CVE-2026-9939 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arb | 151d ago |
| CVE-2026-9938 | 8.8 | — | — | — | google / chrome | Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute ar | 151d ago |
| CVE-2026-9928 | 8.8 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execut | 151d ago |
| CVE-2026-9927 | 8.8 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod | 151d ago |
| CVE-2026-9923 | 8.8 | — | — | — | google / chrome | Use after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit he | 151d ago |
| CVE-2026-9910 | 8.8 | — | — | — | google / chrome | Out of bounds memory access in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute | 151d ago |
| CVE-2026-9897 | 8.8 | — | — | — | google / chrome | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-9896 | 8.8 | — | — | — | google / chrome | Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c | 151d ago |
| CVE-2026-9887 | 8.8 | — | — | — | google / chrome | Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod | 151d ago |
| CVE-2026-9884 | 8.8 | — | — | — | google / chrome | Use after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbi | 151d ago |
| CVE-2026-9883 | 8.8 | — | — | — | google / chrome | Use after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-9879 | 8.8 | — | — | — | google / chrome | Out of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrar | 151d ago |
| CVE-2026-9878 | 8.8 | — | — | — | google / chrome | Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary cod | 151d ago |
| CVE-2026-9873 | 8.8 | — | — | — | google / chrome | Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary c | 151d ago |
| CVE-2026-10021 | 8.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attack | 151d ago |
| CVE-2026-10019 | 8.8 | — | — | — | google / chrome | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin | 151d ago |
| CVE-2026-10016 | 8.8 | — | — | — | google / chrome | Use after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-10015 | 8.8 | — | — | — | google / chrome | Integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary co | 151d ago |
| CVE-2026-10013 | 8.8 | — | — | — | google / chrome | Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrar | 151d ago |
| CVE-2026-10007 | 8.8 | — | — | — | google / chrome | Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code | 151d ago |
| CVE-2026-10002 | 8.8 | — | — | — | google / chrome | Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit | 151d ago |
| CVE-2026-44849 | 8.8 | — | — | — | portainer / portainer | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be | 151d ago |
| CVE-2026-44848 | 8.8 | — | — | — | portainer / portainer | Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be | 151d ago |
| CVE-2026-46837 | 8.8 | — | — | — | oracle / e-business suite | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Security). | 151d ago |
| CVE-2026-46827 | 8.8 | — | — | — | oracle / e-business suite | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Self Service Manager). | 151d ago |
| CVE-2026-46826 | 8.8 | — | — | — | oracle / e-business suite | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). | 151d ago |
| CVE-2026-4944 | 8.8 | — | — | — | — | vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded | 151d ago |
| CVE-2026-8697 | 8.8 | — | — | — | tp-link / archer c64 firmware | Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH servic | 152d ago |
| CVE-2026-35671 | 8.8 | — | — | — | — | phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password en | 152d ago |
| CVE-2026-46238 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: stop caching unowned originator po | 152d ago |
| CVE-2026-46212 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: prevent use-after-free when d | 152d ago |
| CVE-2026-46198 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix integer overflow on buff_pos F | 152d ago |
| CVE-2026-46174 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of sha | 152d ago |
| CVE-2026-46166 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in rad | 152d ago |
| CVE-2026-46152 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast- | 152d ago |
| CVE-2026-46125 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: remove station if connection p | 152d ago |
| CVE-2026-46113 | 8.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due | 152d ago |
| CVE-2026-6226 | 8.8 | — | — | — | — | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege escalation in vers | 152d ago |
| CVE-2026-9227 | 8.8 | — | — | — | — | The GutenBee – Gutenberg Blocks plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, | 152d ago |
| CVE-2026-9009 | 8.8 | — | — | — | — | The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all | 152d ago |
| CVE-2026-7802 | 8.8 | — | — | — | — | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, | 152d ago |
| CVE-2026-8915 | 8.8 | — | — | — | samsung / escargot | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | 152d ago |
| CVE-2026-46414 | 8.8 | — | — | — | — | Microsoft UFO open-source framework for intelligent automation across devices and platforms. | 152d ago |
| CVE-2026-9208 | 8.8 | — | — | — | tanium / connect | Tanium addressed an unauthorized code execution vulnerability in Connect. | 152d ago |
| CVE-2026-44713 | 8.8 | — | — | — | — | pam_usb provides hardware authentication for Linux using ordinary removable media. | 152d ago |
| CVE-2026-45717 | 8.8 | — | — | — | — | Budibase is an open-source low-code platform. | 153d ago |
| CVE-2026-45716 | 8.8 | — | — | — | — | Budibase is an open-source low-code platform. | 153d ago |
| CVE-2026-44521 | 8.8 | — | — | — | — | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. | 153d ago |