| CVE-2026-55723 | 8.3 | — | — | — | f5 / nginx ingress controller | When NGINX Ingress Controller is configured with Custom Resource Definitions (CRDs) or Ingress annotations, an inj | 104d ago |
| CVE-2026-56400 | 8.3 | — | — | — | openwebui / open webui | open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with | 105d ago |
| CVE-2026-15774 | 8.3 | — | — | — | google / chrome | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the | 105d ago |
| CVE-2026-15772 | 8.3 | — | — | — | google / chrome | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compro | 105d ago |
| CVE-2026-15769 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871. | 105d ago |
| CVE-2026-56181 | 8.3 | — | — | — | microsoft / windows 11 24h2 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform sp | 105d ago |
| CVE-2026-15736 | 8.3 | — | — | — | — | Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handli | 105d ago |
| CVE-2026-62196 | 8.3 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs | 106d ago |
| CVE-2026-62195 | 8.3 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feat | 106d ago |
| CVE-2026-58596 | 8.3 | — | — | — | microsoft / edge chromium | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privil | 107d ago |
| CVE-2026-56241 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains a privilege escalation vulnerability where demoted super_admin users retain access | 108d ago |
| CVE-2026-58281 | 8.3 | — | — | — | microsoft / edge chromium | Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute co | 108d ago |
| CVE-2026-57850 | 8.3 | — | — | — | — | RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer grant | 109d ago |
| CVE-2026-56675 | 8.3 | — | — | — | — | 9Router is an AI router & token saver. | 109d ago |
| CVE-2026-56305 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows | 109d ago |
| CVE-2026-15122 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a | 111d ago |
| CVE-2026-15120 | 8.3 | — | — | — | google / chrome | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compr | 111d ago |
| CVE-2026-15119 | 8.3 | — | — | — | google / chrome | Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the re | 111d ago |
| CVE-2026-55830 | 8.3 | — | — | — | — | RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program | 111d ago |
| CVE-2026-55427 | 8.3 | — | — | — | coder / coder | Coder allows organizations to provision remote development environments via Terraform. | 112d ago |
| CVE-2026-49229 | 8.3 | — | — | — | — | Actual is a local-first personal finance app. | 112d ago |
| CVE-2026-49471 | 8.3 | — | — | — | oraios-ai / serena | Serena is a powerful MCP toolkit for coding that provides semantic retrieval and editing capabilities. | 112d ago |
| CVE-2026-11340 | 8.3 | — | — | — | — | Missing Authorization vulnerability in HAVELSAN Inc. | 113d ago |
| CVE-2026-58295 | 8.3 | — | — | — | microsoft / edge chromium | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unautho | 116d ago |
| CVE-2026-58288 | 8.3 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 116d ago |
| CVE-2026-58287 | 8.3 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 116d ago |
| CVE-2026-58285 | 8.3 | — | — | — | microsoft / edge chromium | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unautho | 116d ago |
| CVE-2026-58284 | 8.3 | — | — | — | microsoft / edge chromium | Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a n | 116d ago |
| CVE-2026-55118 | 8.3 | — | — | — | ui / unifi network application | A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper | 117d ago |
| CVE-2026-57278 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57277 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57276 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57275 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57274 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57273 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57272 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57271 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57270 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57269 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57268 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57267 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57266 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57265 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-57264 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-13132 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-13131 | 8.3 | — | — | — | — | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that | 118d ago |
| CVE-2026-14429 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attack | 118d ago |
| CVE-2026-14428 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a re | 118d ago |
| CVE-2026-14427 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised | 118d ago |
| CVE-2026-14413 | 8.3 | — | — | — | google / chrome | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised t | 118d ago |
| CVE-2026-14412 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attac | 118d ago |
| CVE-2026-14401 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a r | 118d ago |
| CVE-2026-14400 | 8.3 | — | — | — | google / chrome | Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised | 118d ago |
| CVE-2026-14389 | 8.3 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the | 118d ago |
| CVE-2026-50521 | 8.3 | — | — | — | microsoft / edge chromium | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. | 118d ago |
| CVE-2026-58592 | 8.3 | — | — | — | — | Ladybird contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. | 118d ago |
| CVE-2026-56233 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticate | 119d ago |
| CVE-2026-14151 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compr | 119d ago |
| CVE-2026-13951 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had c | 119d ago |
| CVE-2026-13841 | 8.3 | — | — | — | google / chrome | Integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the | 119d ago |
