CVE Vulnerability Database

Search and browse 420,257 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-119270HIGH8.8Incorrect reference resolution in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had...
CVE-2026-119269HIGH8.8Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin ...
CVE-2026-119268HIGH8.8Use after free in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code in...
CVE-2026-119267HIGH8.8Use after free in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside...
CVE-2026-119266HIGH8.8Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compro...
CVE-2026-119265HIGH8.8Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compro...
CVE-2026-119264HIGH8.8Use after free in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrar...
CVE-2026-119263CRITICAL9.6Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitra...
CVE-2026-119262HIGH8.8Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code in...
CVE-2026-119261CRITICAL9.6Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the render...
CVE-2026-119260HIGH8.8Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code ins...
CVE-2026-118959MEDIUM5.4A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request i...
CVE-2026-118947MEDIUM4.3A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core l...
CVE-2026-112605LOW3.3This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to re...
CVE-2026-112602LOW3.3An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be ab...
CVE-2026-110133MEDIUM5.8A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an account...
CVE-2026-92744HIGH8.7Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as ...
CVE-2026-112211——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-107239HIGH8.8A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R...
CVE-2026-107238HIGH8.7A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account ...
CVE-2023-22793CRITICAL9.3A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam...
CVE-2026-61719HIGH8.9WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in `saud...
CVE-2026-61707CRITICAL9SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76,...
CVE-2026-61673MEDIUM6.3WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in `...
CVE-2026-61671HIGH8.1WeGIA is a web manager for charitable institutions. Prior to the advisory's stated patched version 3.8.7, the `/controle...