CVE Vulnerability Database
Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-107252 | MEDIUM | 5.4 | 0.1% | Oct 30, 2026 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal MathJax: La... |
| CVE-2026-107251 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This... |
| CVE-2026-107250 | MEDIUM | 5.9 | 0.1% | Oct 30, 2026 | Vulnerability in Drupal ECA Helper. This issue affects ECA Helper versions: *.*. |
| CVE-2026-107249 | CRITICAL | 9.8 | 0.2% | Oct 30, 2026 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows... |
| CVE-2026-91920 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | A flaw was found in the ChunkReader component of the Undertow web server, which is used to handle chunked transfer encod... |
| CVE-2026-74915 | HIGH | 8.8 | 0.1% | Oct 30, 2026 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger a OOB read and/or wr... |
| CVE-2026-74912 | CRITICAL | 9.8 | 0.1% | Oct 30, 2026 | On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is ... |
| CVE-2026-65587 | MEDIUM | 5.5 | 0.1% | Oct 30, 2026 | A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB write in the ... |
| CVE-2026-65586 | HIGH | 7.1 | 0.1% | Oct 30, 2026 | Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in still in use... |
| CVE-2026-65584 | HIGH | 7.8 | 0.2% | Oct 30, 2026 | Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in th... |
| CVE-2026-19199 | HIGH | 7.1 | 0.1% | Oct 30, 2026 | Software installed and run as a non-privileged user may conduct improper system calls to allocate physical memory. A 32-... |
| CVE-2026-18629 | HIGH | 7.5 | 0.1% | Oct 30, 2026 | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation ... |
| CVE-2026-15466 | HIGH | 7 | 0.2% | Oct 30, 2026 | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in har... |
| CVE-2026-118475 | LOW | 3.6 | 0.1% | Oct 30, 2026 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata... |
| CVE-2026-112922 | LOW | 3.3 | 0.1% | Oct 30, 2026 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a spec... |
| CVE-2026-76031 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | Incorrect authorization in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social eng... |
| CVE-2026-76030 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia... |
| CVE-2026-76029 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Improper input validation in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitr... |
| CVE-2026-76028 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia... |
| CVE-2026-76027 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origi... |
| CVE-2026-76026 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web orig... |
| CVE-2026-76025 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia... |
| CVE-2026-76024 | MEDIUM | 6.5 | 0.2% | Oct 30, 2026 | Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary cod... |
| CVE-2026-119272 | MEDIUM | 4.3 | 0.2% | Oct 30, 2026 | Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging socia... |
| CVE-2026-119271 | HIGH | 8.8 | 0.2% | Oct 30, 2026 | Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the... |