CVE Vulnerability Database
Search and browse 420,074 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121580 | HIGH | 8.1 | 0.2% | Nov 3, 2026 | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an ... |
| CVE-2026-121517 | MEDIUM | 5 | 0.3% | Nov 3, 2026 | A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality ... |
| CVE-2026-121514 | MEDIUM | 6.3 | — | Nov 3, 2026 | A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange ... |
| CVE-2026-121509 | MEDIUM | 5.3 | — | Nov 3, 2026 | A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_requi... |
| CVE-2026-121502 | HIGH | 7.3 | — | Nov 3, 2026 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function o... |
| CVE-2026-121257 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in TabStrip in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbi... |
| CVE-2026-121256 | HIGH | 8.3 | 0.3% | Nov 3, 2026 | Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised th... |
| CVE-2026-121255 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross... |
| CVE-2026-121254 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive informa... |
| CVE-2026-121253 | — | — | — | Nov 3, 2026 | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social en... |
| CVE-2026-121252 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin p... |
| CVE-2026-121251 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin polic... |
| CVE-2026-121250 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social enginee... |
| CVE-2026-121249 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code out... |
| CVE-2026-121248 | — | — | — | Nov 3, 2026 | Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access... |
| CVE-2026-121247 | CRITICAL | 9.6 | — | Nov 3, 2026 | Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially e... |
| CVE-2026-121246 | CRITICAL | 9.6 | — | Nov 3, 2026 | Use after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially e... |
| CVE-2026-121245 | MEDIUM | 5.3 | 0.2% | Nov 3, 2026 | Race condition in Autofill in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially obtain sensi... |
| CVE-2026-121244 | MEDIUM | 5.4 | 0.2% | Nov 3, 2026 | UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engi... |
| CVE-2026-121243 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Frames in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive informa... |
| CVE-2026-121242 | — | — | — | Nov 3, 2026 | Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass we... |
| CVE-2026-121241 | CRITICAL | 9.6 | 0.3% | Nov 3, 2026 | Use after free in Navigation in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentia... |
| CVE-2026-121240 | — | — | — | Nov 3, 2026 | Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass syst... |
| CVE-2026-121239 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data v... |
| CVE-2026-121238 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in Source in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ins... |