2026 CVE Vulnerabilities
48,715 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-7950 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Out of bounds read and write in GFX in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform arbitra... |
| CVE-2026-7947 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker ... |
| CVE-2026-7946 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowe... |
| CVE-2026-7943 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker wh... |
| CVE-2026-7942 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data vi... |
| CVE-2026-7941 | MEDIUM | 4.4 | 0.1% | May 6, 2026 | Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local ... |
| CVE-2026-7939 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject... |
| CVE-2026-7935 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Inappropriate implementation in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI s... |
| CVE-2026-7934 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in Popup Blocker in Google Chrome prior to 148.0.7778.96 allowed a remote att... |
| CVE-2026-7933 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Out of bounds read in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of b... |
| CVE-2026-7932 | MEDIUM | 4.4 | 0.1% | May 6, 2026 | Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass ... |
| CVE-2026-7931 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attack... |
| CVE-2026-7924 | MEDIUM | 6.5 | 0.2% | May 6, 2026 | Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensit... |
| CVE-2026-7915 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to... |
| CVE-2026-7912 | MEDIUM | 4.2 | 0.2% | May 6, 2026 | Integer overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised... |
| CVE-2026-7904 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bound... |
| CVE-2026-41931 | MEDIUM | 6.9 | 0.2% | May 6, 2026 | Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to o... |
| CVE-2026-20219 | MEDIUM | 5.4 | 0.2% | May 6, 2026 | A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social... |
| CVE-2026-20195 | MEDIUM | 5.3 | 0.3% | May 6, 2026 | A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to e... |
| CVE-2026-20193 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with ... |
| CVE-2026-20189 | MEDIUM | 4.3 | 0.2% | May 6, 2026 | A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, ... |
| CVE-2026-20172 | MEDIUM | 4.3 | 0.1% | May 6, 2026 | A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote ... |
| CVE-2026-20169 | MEDIUM | 6.4 | 0.2% | May 6, 2026 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, ... |
| CVE-2026-20168 | MEDIUM | 6.5 | 0.3% | May 6, 2026 | A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, ... |
| CVE-2026-6863 | MEDIUM | 6.8 | 0.2% | May 6, 2026 | Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with onl... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now