CVE Vulnerability Database
Search and browse 420,094 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121041 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive inf... |
| CVE-2026-121040 | — | — | — | Nov 3, 2026 | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised th... |
| CVE-2026-121039 | MEDIUM | 5.3 | 0.1% | Nov 3, 2026 | Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sen... |
| CVE-2026-121038 | MEDIUM | 6.5 | 0.2% | Nov 3, 2026 | Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin... |
| CVE-2026-121037 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentia... |
| CVE-2026-121036 | HIGH | 8.8 | 0.3% | Nov 3, 2026 | Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside... |
| CVE-2026-121035 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ... |
| CVE-2026-121034 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging socia... |
| CVE-2026-121033 | — | — | — | Nov 3, 2026 | Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had co... |
| CVE-2026-121032 | — | — | — | Nov 3, 2026 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the ... |
| CVE-2026-121031 | — | — | — | Nov 3, 2026 | Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin poli... |
| CVE-2026-121030 | CRITICAL | 9.6 | 0.4% | Nov 3, 2026 | Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social ... |
| CVE-2026-121029 | — | — | — | Nov 3, 2026 | Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolatio... |
| CVE-2026-120959 | LOW | 3.7 | 0.2% | Nov 3, 2026 | A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside ... |
| CVE-2026-120952 | HIGH | 7.1 | 0.4% | Nov 3, 2026 | An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type ... |
| CVE-2026-120734 | MEDIUM | 6.5 | 0.1% | Nov 3, 2026 | Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and ea... |
| CVE-2026-120733 | HIGH | 7.5 | 0.1% | Nov 3, 2026 | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows... |
| CVE-2026-120716 | MEDIUM | 6.5 | 0.1% | Nov 3, 2026 | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 20... |
| CVE-2026-120715 | HIGH | 8.1 | 0.1% | Nov 3, 2026 | Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier ... |
| CVE-2026-119636 | HIGH | 8.8 | 0.2% | Nov 3, 2026 | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.... |
| CVE-2026-115878 | HIGH | 7.8 | — | Nov 3, 2026 | Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human language... |
| CVE-2026-115779 | MEDIUM | 6.3 | — | Nov 3, 2026 | Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applicati... |
| CVE-2026-115732 | CRITICAL | 9 | 0.7% | Nov 3, 2026 | Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in th... |
| CVE-2026-115731 | CRITICAL | 9.4 | 0.4% | Nov 3, 2026 | Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected rel... |
| CVE-2026-111754 | MEDIUM | 5.1 | — | Nov 3, 2026 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other... |