CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-110879 | CRITICAL | 9.8 | 1.2% | Oct 28, 2026 | jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its gene... |
| CVE-2026-110747 | HIGH | 7.5 | 0.4% | Oct 28, 2026 | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry's string key into an attacker-controlled... |
| CVE-2026-118129 | MEDIUM | 6.3 | 0.3% | Oct 28, 2026 | A vulnerability was found in jeremyckahn Chitchatter up to f82538633813c854a81a8b2112a2f6ba17b39cbc. The affected elemen... |
| CVE-2026-104895 | HIGH | 7.5 | 0.4% | Oct 28, 2026 | The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to... |
| CVE-2026-104016 | HIGH | 7.5 | 0.7% | Oct 28, 2026 | ProtobufParser parses length-prefixed protobuf string and bytes fields by checking (_inputPtr + len) <= _inputEnd and th... |
| CVE-2026-59158 | HIGH | 7.5 | 0.5% | Oct 27, 2026 | Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, `src/module.ts` un... |
| CVE-2026-58496 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. Prior to 1.0.7, the `SFNT/TTF` font loader's... |
| CVE-2026-58257 | HIGH | 7.2 | 0.5% | Oct 27, 2026 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the databa... |
| CVE-2026-58256 | CRITICAL | 9.1 | 0.6% | Oct 27, 2026 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an adminis... |
| CVE-2026-58255 | HIGH | 8.8 | 0.4% | Oct 27, 2026 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrat... |
| CVE-2026-58205 | HIGH | 8.1 | 0.3% | Oct 27, 2026 | GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` para... |
| CVE-2026-50571 | MEDIUM | 5.7 | 0.2% | Oct 27, 2026 | WebSub is a W3C recommendation produced by the Social Web Working Group. In recommendation REC-websub-20180123, the inte... |
| CVE-2026-22063 | MEDIUM | 6 | 0.1% | Oct 27, 2026 | The private keys of eight eMudhra intermediate CA certificates have been compromised. eMudhra revoked the eight affected... |
| CVE-2026-18326 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-118359 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside ... |
| CVE-2026-118358 | HIGH | 8.8 | 0.4% | Oct 27, 2026 | Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-118357 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code... |
| CVE-2026-118356 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary... |
| CVE-2026-118355 | CRITICAL | 9.6 | 0.3% | Oct 27, 2026 | Use after free in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code in... |
| CVE-2026-118354 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Uninitialized resource in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin ... |
| CVE-2026-118353 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Missing authorization in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to obtain cross-origin ... |
| CVE-2026-118352 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outs... |
| CVE-2026-118351 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code outsi... |
| CVE-2026-118350 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Type confusion in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code i... |
| CVE-2026-118349 | HIGH | 8.8 | 0.3% | Oct 27, 2026 | Use after free in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker leveraging social engineeri... |