CVE-2026-87554 - Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local a

CVE-2026-87553 - Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote

CVE-2026-87552 - Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36

CVE-2026-87551 - Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote att

CVE-2026-87550 - Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a rem

CVE-2026-87549 - Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker le

CVE-2026-87548 - Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote atta

CVE-2026-87547 - Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remot

CVE-2026-87546 - Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36

CVE-2026-87545 - Information leak in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87544 - Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attac

CVE-2026-87543 - Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87542 - Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute

CVE-2026-87541 - Information leak in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87540 - Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87539 - Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87538 - Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had comp

CVE-2026-87537 - Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87536 - Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute ar

CVE-2026-87535 - Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allow

CVE-2026-87534 - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a rem

CVE-2026-87533 - Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execu

CVE-2026-87532 - Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote a

CVE-2026-87531 - Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had c

CVE-2026-87530 - Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0

CVE-2026-87529 - Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87528 - Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87527 - Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execut

CVE-2026-87526 - Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker levera

CVE-2026-87525 - Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a loc

CVE-2026-87524 - Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87523 - Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker lev

CVE-2026-87522 - Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a rem

CVE-2026-87521 - Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had

CVE-2026-87520 - Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87519 - Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote att

CVE-2026-87518 - Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a r

CVE-2026-87517 - Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87516 - Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87515 - Incorrect authorization in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87514 - Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute

CVE-2026-87513 - Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote at

CVE-2026-87512 - Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attac

CVE-2026-87511 - Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87510 - Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87509 - Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a l

CVE-2026-87508 - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87507 - UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87506 - Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who h

CVE-2026-87505 - Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attac

CVE-2026-87504 - Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging

CVE-2026-87503 - Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allo

CVE-2026-87502 - Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87501 - UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87500 - Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote

CVE-2026-87499 - Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87498 - Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87497 - Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker t

CVE-2026-87496 - UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker le

CVE-2026-87495 - Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had

CVE-2026-87494 - Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote att

CVE-2026-87493 - Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87492 - Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87491 - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execu

CVE-2026-87490 - Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote a

CVE-2026-87489 - Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potenti

CVE-2026-87488 - Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attac

CVE-2026-87487 - Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87486 - Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a

CVE-2026-87485 - Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker wh

CVE-2026-87484 - UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker l

CVE-2026-87483 - Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a r

CVE-2026-87482 - Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.

CVE-2026-87481 - Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a r

CVE-2026-87480 - Use after free in Printing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had

CVE-2026-87479 - Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remo

CVE-2026-87478 - Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87477 - Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak s

CVE-2026-87476 - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87475 - Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker l

CVE-2026-87474 - Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to pote

CVE-2026-87473 - Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote att

CVE-2026-87472 - Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87471 - Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote at

CVE-2026-87470 - Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a rem

CVE-2026-87469 - Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote att

CVE-2026-87468 - Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87467 - Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local atta

CVE-2026-87466 - Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87465 - Incorrect authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attack

CVE-2026-87464 - Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute

CVE-2026-87463 - Incorrect authorization in Certificate in Google Chrome on on Android prior to 153.0.8010.36 allowed

CVE-2026-87462 - UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leve

CVE-2026-87461 - Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak c

CVE-2026-87460 - Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exec

CVE-2026-87459 - Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker t

CVE-2026-87458 - UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker l

CVE-2026-87457 - Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local atta

CVE-2026-87456 - Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker wh

CVE-2026-87455 - Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentia

CVE-2026-87454 - Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remot

CVE-2026-87453 - Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87452 - Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote at

CVE-2026-87451 - Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87450 - Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote atta

CVE-2026-87449 - Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36

CVE-2026-87448 - Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exec

CVE-2026-87447 - Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87446 - Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker l

CVE-2026-87445 - UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to

CVE-2026-87444 - Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exe

CVE-2026-87443 - Missing authorization in Actor in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to

CVE-2026-87442 - Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who h

CVE-2026-87441 - Missing authorization in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87440 - Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to exe

CVE-2026-87439 - Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker

CVE-2026-87438 - Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote

CVE-2026-87437 - Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak

CVE-2026-87436 - Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leve

CVE-2026-87435 - Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87434 - Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who

CVE-2026-87433 - Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had

CVE-2026-87432 - Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attac

CVE-2026-87431 - Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacke

CVE-2026-87430 - Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to poten

CVE-2026-87429 - Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote atta

CVE-2026-53939 - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In ve

CVE-2026-53938 - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior

CVE-2026-53937 - MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol.

CVE-2026-19201 - An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestatio

CVE-2026-86564 - A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the vir

CVE-2026-55250 - Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-

CVE-2026-53639 - Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to vers

CVE-2026-53638 - Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to vers

CVE-2026-53637 - Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 throug

CVE-2026-53581 - OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core

CVE-2026-47680 - The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external s

CVE-2026-18090 - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-b

CVE-2026-86996 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the workflow setting

CVE-2026-86995 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git n

CVE-2026-86994 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest

CVE-2026-86993 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Str

CVE-2026-86085 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slu

CVE-2026-86084 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the publi

CVE-2026-86083 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the legac

CVE-2026-86082 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenA

CVE-2026-86081 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git n

CVE-2026-86080 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the GitHu

CVE-2026-86079 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elast

CVE-2026-86078 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI work

CVE-2026-86077 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket

CVE-2026-86076 - n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expre

CVE-2026-86075 - n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Cl

CVE-2026-81904 - Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout

CVE-2026-53933 - Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-

CVE-2026-49156 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-49155 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-49154 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-49153 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-86819 - Waves Central for macOS contains a local privilege escalation in the privileged helper service. The

CVE-2026-85983 - The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This

CVE-2026-85982 - The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to imprope

CVE-2026-85981 - The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the

CVE-2026-84685 - The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to

CVE-2026-82001 - Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to

CVE-2026-81997 - Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Securi

CVE-2026-81996 - Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privileg

CVE-2026-81994 - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes (

CVE-2026-81993 - Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosu

CVE-2026-81992 - Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitr

CVE-2026-81991 - Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s

CVE-2026-81990 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81989 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81988 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81987 - Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in a

CVE-2026-81986 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81985 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81984 - Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensit

CVE-2026-81983 - Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary co

CVE-2026-81982 - Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s

CVE-2026-81981 - Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary co

CVE-2026-81980 - Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary co

CVE-2026-81979 - Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary co

CVE-2026-81978 - Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s

CVE-2026-81977 - Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could lea

CVE-2026-81976 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81975 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81973 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-81192 - `OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for ho

CVE-2026-80162 - Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensit

CVE-2026-80161 - Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulne

CVE-2026-80160 - Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s

CVE-2026-80159 - Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege

CVE-2026-7809 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-79910 - Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of s

CVE-2026-79909 - Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code exe

CVE-2026-79908 - Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary co

CVE-2026-79907 - Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execut

CVE-2026-79588 - U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentia

CVE-2026-78971 - In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, w

CVE-2026-78742 - Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library appli

CVE-2026-78741 - Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image up

CVE-2026-78738 - Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file u

CVE-2026-78635 - The Okta Privileged Access client URL handler does not insert an option terminator before appending

CVE-2026-78631 - The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file a

CVE-2026-78630 - The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before

CVE-2026-78629 - The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the

CVE-2026-78622 - The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesys

CVE-2026-77827 - Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard u

CVE-2026-45220 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-45219 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-30754 - A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_

CVE-2026-19651 - IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an att

CVE-2026-19625 - When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such

CVE-2026-86810 - A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function

CVE-2026-86808 - A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected elem

CVE-2026-86806 - A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within

CVE-2026-86464 - In the current development version of Eclipse aeriOS, for which no official release has yet been pub

CVE-2026-85630 - HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escapi

CVE-2026-85485 - HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without esc

CVE-2026-85484 - HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labe

CVE-2026-84942 - Improper input validation in the Vega expression function implementation in OpenSearch Dashboards al

CVE-2026-84869 - A condition in the ScreenConnect client may allow files to be transferred and executed through an ac

CVE-2026-84197 - In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascri

CVE-2026-82007 - Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result i

CVE-2026-82006 - Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arb

CVE-2026-82005 - Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary

CVE-2026-79905 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-78834 - A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low

CVE-2026-78627 - The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MS

CVE-2026-78626 - The Okta Access Gateway improperly handles input sanitization and regular expression evaluation with

CVE-2026-78625 - The Okta Access Gateway does not sanitize dashboard label values before writing them into generated

CVE-2026-78624 - The Okta Access Gateway backup restore function does not validate the filename embedded in an encryp

CVE-2026-78623 - The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into datab

CVE-2026-78620 - The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in eve

CVE-2026-78579 - The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them

CVE-2026-78574 - The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the

CVE-2026-78560 - The Okta Access Gateway includes an optional pass-through authentication source that accepts user id

CVE-2026-78552 - The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom

CVE-2026-78550 - The Okta Access Gateway management console passes user-supplied input to eval() without sanitization

CVE-2026-78545 - The Okta Access Gateway does not sanitize the application label field before including it in the gen

CVE-2026-76199 - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result

CVE-2026-76190 - ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('E

CVE-2026-76002 - ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is ab

CVE-2026-76000 - ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to appl

CVE-2026-75999 - ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary

CVE-2026-75998 - ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file

CVE-2026-75993 - ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could ex

CVE-2026-75992 - Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code

CVE-2026-75991 - Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary