2026 CVE Vulnerabilities
85,257 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0908 | HIGH | 8.8 | 0.3% | Jan 20, 2026 | Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap co... |
| CVE-2026-0907 | CRITICAL | 9.8 | 0.2% | Jan 20, 2026 | Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoo... |
| CVE-2026-0906 | CRITICAL | 9.8 | 0.3% | Jan 20, 2026 | Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the content... |
| CVE-2026-0905 | CRITICAL | 9.8 | 0.2% | Jan 20, 2026 | Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a netw... |
| CVE-2026-0904 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perfor... |
| CVE-2026-0903 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker t... |
| CVE-2026-0902 | HIGH | 8.8 | 0.3% | Jan 20, 2026 | Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out o... |
| CVE-2026-0901 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to pe... |
| CVE-2026-0900 | HIGH | 8.8 | 0.3% | Jan 20, 2026 | Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially expl... |
| CVE-2026-0899 | HIGH | 8.8 | 0.4% | Jan 20, 2026 | Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially explo... |
| CVE-2026-1051 | MEDIUM | 4.3 | 0.1% | Jan 20, 2026 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in ... |
| CVE-2026-23950 | MEDIUM | 5.9 | 0.2% | Jan 20, 2026 | node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an ... |
| CVE-2026-23949 | HIGH | 8.6 | 0.5% | Jan 20, 2026 | jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Sli... |
| CVE-2026-23947 | CRITICAL | 9.8 | 0.8% | Jan 20, 2026 | Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions prior ... |
| CVE-2026-23876 | CRITICAL | 9.8 | 0.6% | Jan 20, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-1... |
| CVE-2026-23874 | MEDIUM | 5.5 | 0.2% | Jan 20, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-1... |
| CVE-2026-22770 | CRITICAL | 9.8 | 0.3% | Jan 20, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage me... |
| CVE-2026-1203 | HIGH | 8.1 | 0.7% | Jan 20, 2026 | A weakness has been identified in CRMEB up to 5.6.3. The impacted element is the function remoteRegister of the file crm... |
| CVE-2026-1202 | CRITICAL | 9.8 | 0.8% | Jan 20, 2026 | A security flaw has been discovered in CRMEB up to 5.6.3. The affected element is the function appleLogin of the file cr... |
| CVE-2026-1197 | LOW | 3.1 | 0.3% | Jan 20, 2026 | A vulnerability was detected in MineAdmin 1.x/2.x. Affected by this vulnerability is an unknown functionality of the fil... |
| CVE-2026-1196 | MEDIUM | 5.3 | 0.4% | Jan 20, 2026 | A security vulnerability has been detected in MineAdmin 1.x/2.x. Affected is an unknown function of the file /system/get... |
| CVE-2026-1195 | HIGH | 7.5 | 0.2% | Jan 20, 2026 | A weakness has been identified in MineAdmin 1.x/2.x. This impacts the function refresh of the file /system/refresh of th... |
| CVE-2026-22219 | HIGH | 7.7 | 5.1% | Jan 20, 2026 | Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element upda... |
| CVE-2026-22218 | MEDIUM | 6.5 | 8.8% | Jan 20, 2026 | Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An au... |
| CVE-2026-1194 | HIGH | 7.5 | 0.7% | Jan 20, 2026 | A security flaw has been discovered in MineAdmin 1.x/2.x. This affects an unknown function of the component Swagger. The... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now