CVE Vulnerability Database
Search and browse 395,260 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12011 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromi... |
| CVE-2026-12010 | HIGH | 8.3 | 0.3% | Jun 11, 2026 | Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compro... |
| CVE-2026-12009 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Mac prior to 149.0.7827.115 allowed a re... |
| CVE-2026-12008 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromi... |
| CVE-2026-12007 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to execute arbitrar... |
| CVE-2026-53819 | HIGH | 7.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env... |
| CVE-2026-53818 | MEDIUM | 6.9 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-own... |
| CVE-2026-53817 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with ... |
| CVE-2026-53816 | HIGH | 8.6 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allow... |
| CVE-2026-53815 | HIGH | 7.1 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allo... |
| CVE-2026-53814 | HIGH | 8.7 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.20 contains a privilege escalation vulnerability where hook-triggered agent runs incorrectly rece... |
| CVE-2026-53813 | HIGH | 7.8 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state ... |
| CVE-2026-53812 | HIGH | 7.7 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authentica... |
| CVE-2026-53811 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authe... |
| CVE-2026-53810 | HIGH | 8.8 | 0.4% | Jun 11, 2026 | OpenClaw before 2026.5.18 contains a code execution vulnerability where marketplace runtime extension metadata can redir... |
| CVE-2026-53809 | MEDIUM | 4.8 | 0.1% | Jun 11, 2026 | OpenClaw before 2026.4.25 contains a policy bypass vulnerability in embedded runner policy that allows requests using pr... |
| CVE-2026-53808 | MEDIUM | 6.5 | 0.2% | Jun 11, 2026 | OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows a... |
| CVE-2026-53807 | HIGH | 8.8 | 0.3% | Jun 11, 2026 | OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows au... |
| CVE-2026-53806 | HIGH | 8.8 | 0.4% | Jun 11, 2026 | OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass... |
| CVE-2026-50245 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Brickcom cameras allow unauthenticated access to live snapshot images via the /ONVIF endpoint and no authentication is r... |
| CVE-2026-50005 | HIGH | 8.3 | 0.2% | Jun 11, 2026 | Brickcom cameras ship with default credentials that allows any unauthenticated remote attacker to silently access camera... |
| CVE-2026-41005 | CRITICAL | 9 | 0.1% | Jun 11, 2026 | Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML s... |
| CVE-2026-53782 | HIGH | 7.4 | 0.3% | Jun 11, 2026 | Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast... |
| CVE-2026-53781 | MEDIUM | 5.3 | 0.3% | Jun 11, 2026 | Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhausti... |
| CVE-2026-49973 | CRITICAL | 9.4 | 0.5% | Jun 11, 2026 | Hermes WebUI before version 0.51.358 contains an improper access control vulnerability that allows unauthenticated remot... |