CVE search

366,258 results
CVE-2026-13777HIGHInsufficient validation of untrusted input in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to potentiallyEPSS 0.3%CVE-2026-13776CRITICALType Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentiEPSS 0.3%CVE-2026-13775CRITICALUse after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentiaEPSS 0.3%CVE-2026-13774HIGHUse after free in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extensiEPSS 0.3%CVE-2026-55721CRITICALSQL Injection in StoneFly Storage ConcentratorEPSS 0.4%CVE-2026-50040MEDIUMCross-site Scripting in StoneFly Storage ConcentratorEPSS 0.2%CVE-2026-28322MEDIUMSolarWinds Database Performance Analyzer Stored Cross-Site Scripting VulnerabilityEPSS 0.2%CVE-2026-54672HIGHelectron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`EPSS 0.1%CVE-2026-54673HIGHelectron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`EPSS 0.2%CVE-2026-57995HIGHphpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissionsEPSS 0.3%CVE-2026-56777MEDIUMn8n - AST Validator Bypass in Python Code NodeEPSS 0.2%CVE-2026-56700CRITICALGrav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command InjectionEPSS 1.7%CVE-2026-56399MEDIUMOpen WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/webEPSS 0.3%CVE-2026-56377MEDIUMImageMagick - Policy Bypass via Incorrect Path ValidationEPSS 0.2%CVE-2026-56369MEDIUMImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImageEPSS 0.2%CVE-2026-56365MEDIUMImageMagick - Memory Leak in PNG Encoder via MNG Image WritingEPSS 0.3%CVE-2026-56364LOWImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XMLEPSS 0.1%CVE-2026-56363MEDIUMImageMagick - Division by Zero in Binomial Kernel ProcessingEPSS 0.1%CVE-2026-56361MEDIUMImageMagick - Heap Buffer Overflow via Off-by-One in Morphology ProcessingEPSS 0.1%CVE-2026-56356MEDIUMn8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS FieldEPSS 0.2%