| CVE-2026-13834 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attac | 119d ago |
| CVE-2026-13832 | 8.3 | — | — | — | google / chrome | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised t | 119d ago |
| CVE-2026-13829 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Settings in Google Chrome on Windows prior to 150.0.7871.47 allowed | 119d ago |
| CVE-2026-13823 | 8.3 | — | — | — | google / chrome | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the r | 119d ago |
| CVE-2026-13813 | 8.3 | — | — | — | google / chrome | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote | 119d ago |
| CVE-2026-13804 | 8.3 | — | — | — | google / chrome | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised | 119d ago |
| CVE-2026-13803 | 8.3 | — | — | — | google / chrome | Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromise | 119d ago |
| CVE-2026-13801 | 8.3 | — | — | — | google / chrome | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromis | 119d ago |
| CVE-2026-58170 | 8.3 | — | — | — | — | Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the | 119d ago |
| CVE-2026-13744 | 8.3 | — | — | — | snowflake / snowflake cli | Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended | 120d ago |
| CVE-2025-2902 | 8.3 | — | — | — | — | Improper Authorization Vulnerability of Maintenance Utility in Hitachi Virtual Storage Platform. | 121d ago |
| CVE-2026-56063 | 8.3 | — | — | — | — | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | 123d ago |
| CVE-2026-2053 | 8.3 | — | — | — | wso2 / api manager | The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validat | 124d ago |
| CVE-2026-13281 | 8.3 | — | — | — | google / chrome | Integer overflow in Mojo in Google Chrome prior to 149.0.7827.201 allowed a remote attacker who had compromised th | 124d ago |
| CVE-2025-71328 | 8.3 | — | — | — | flowiseai / flowise | Flowise before 3.0.10 contains an unverified password change vulnerability. | 124d ago |
| CVE-2026-55412 | 8.3 | — | — | — | — | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows a | 124d ago |
| CVE-2026-54848 | 8.3 | — | — | — | — | Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal APIExperts Square for WooCommerce al | 124d ago |
| CVE-2026-47267 | 8.3 | — | — | — | — | Gogs is an open source self-hosted Git service. | 125d ago |
| CVE-2026-13025 | 8.3 | — | — | — | google / chrome | Race in DevTools in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the render | 125d ago |
| CVE-2026-52920 | 8.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound | 126d ago |
| CVE-2026-54010 | 8.3 | — | — | — | openwebui / open webui | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. | 126d ago |
| CVE-2026-50574 | 8.3 | — | — | — | yt-dlp project / yt-dlp | yt-dlp is a command-line audio/video downloader. | 126d ago |
| CVE-2026-50023 | 8.3 | — | — | — | yt-dlp project / yt-dlp | yt-dlp is a command-line audio/video downloader. | 126d ago |
| CVE-2026-34914 | 8.3 | — | — | — | — | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and earlier. | 126d ago |
| CVE-2026-56225 | 8.3 | — | — | — | — | Capgo before 12.128.2 contains an authorization bypass vulnerability in its public API key management handlers (ge | 127d ago |
| CVE-2025-71337 | 8.3 | — | — | — | flowiseai / flowise | Flowise before 3.0.10 (affected versions 3.0.7 and earlier) contains an unverified email change vulnerability. | 127d ago |
| CVE-2026-54100 | 8.3 | — | — | — | redhat / openshift container platform | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. | 127d ago |
| CVE-2026-56215 | 8.3 | — | — | — | — | Capgo before 12.128.12 allows authenticated users to modify their mutable public.users.email to arbitrary addresse | 130d ago |
| CVE-2026-12468 | 8.3 | — | — | — | google / chrome | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromised the | 133d ago |
| CVE-2026-12467 | 8.3 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromise | 133d ago |
| CVE-2026-12465 | 8.3 | — | — | — | google / chrome | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compr | 133d ago |
| CVE-2026-12464 | 8.3 | — | — | — | google / chrome | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised t | 133d ago |
| CVE-2026-12454 | 8.3 | — | — | — | google / chrome | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote attacker who had compromise | 133d ago |
| CVE-2026-12451 | 8.3 | — | — | — | google / chrome | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had co | 133d ago |
| CVE-2026-12438 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attac | 133d ago |
| CVE-2026-12437 | 8.3 | — | — | — | google / chrome | Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had c | 133d ago |
| CVE-2024-32949 | 8.3 | — | — | — | — | Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Acce | 133d ago |
| CVE-2026-46925 | 8.3 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). | 133d ago |
| CVE-2026-35302 | 8.3 | — | — | — | oracle / weblogic server | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). | 133d ago |
| CVE-2026-35262 | 8.3 | — | — | — | oracle / data integrator | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place). | 133d ago |
| CVE-2026-53853 | 8.3 | — | — | — | openclaw / openclaw | OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attacke | 133d ago |
| CVE-2026-53831 | 8.3 | — | — | — | openclaw / openclaw | OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation | 137d ago |
| CVE-2026-12034 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 149.0.7827. | 138d ago |
| CVE-2026-12031 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacke | 138d ago |
| CVE-2026-12030 | 8.3 | — | — | — | google / chrome | Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had c | 138d ago |
| CVE-2026-12029 | 8.3 | — | — | — | google / chrome | Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had comp | 138d ago |
| CVE-2026-12028 | 8.3 | — | — | — | google / chrome | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compro | 138d ago |
| CVE-2026-12023 | 8.3 | — | — | — | google / chrome | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromise | 138d ago |
| CVE-2026-12022 | 8.3 | — | — | — | google / chrome | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromise | 138d ago |
| CVE-2026-12019 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior to 149.0.7827.115 allowed a remote att | 138d ago |
| CVE-2026-12016 | 8.3 | — | — | — | google / chrome | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who ha | 138d ago |
| CVE-2026-12014 | 8.3 | — | — | — | google / chrome | Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment t | 138d ago |
| CVE-2026-12011 | 8.3 | — | — | — | google / chrome | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had co | 138d ago |
| CVE-2026-12010 | 8.3 | — | — | — | google / chrome | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had | 138d ago |
| CVE-2026-12009 | 8.3 | — | — | — | google / chrome | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowe | 138d ago |
| CVE-2026-12008 | 8.3 | — | — | — | google / chrome | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had co | 138d ago |
| CVE-2026-53814 | 8.3 | — | — | — | openclaw / openclaw | OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectl | 138d ago |
| CVE-2026-46558 | 8.3 | — | — | — | plane / plane | Plane is an open-source project management tool. | 139d ago |
| CVE-2026-45567 | 8.3 | — | — | — | — | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. | 139d ago |
| CVE-2026-11700 | 8.3 | — | — | — | google / chrome | Use after free in Tracing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised t | 141d ago |
