CVE-2026 records published in June 2026
This page lists the 7,316 CVE-2026 records published in June 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 25 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.
- Critical
- 89312.2% of these records
- Listed in CISA KEV
- 250.3% of these records
- Reported exploited
- 160.2% of these records
- Detection signal
- 781.1% of these records
- Exploit code
- 2022.8% of these records
- Actionable vendor fix
- 6,13183.8% of these records
Figures as of 2026-10-24 13:48 UTC. Records published in June 2026 have had from about four months to about five months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-58450 | Invoice Ninja open redirect in client Portal Login via intended parameter | 5.3CNA v4.0 | 0.3% | 2026-06-30 | |
| CVE-2026-58449 | txtai unauthenticated remote code execution via unsafe reflection in API /reindex function parameter | 9.3CNA v4.0 | 1.4% | 2026-06-30 | |
| CVE-2026-58448 | yudao-cloud BPM module broken access control via process-instance API | 7.1CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-58447 | Invidious Cross-User Playlist Video Deletion via Missing Ownership Check | 7.1CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-58446 | Presenton authentication bypass of Session Auth via Unprotected MCP endpoint | 6.9CNA v4.0 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-58377 | JeecgBoot OpenAPI credential endpoints missing authorization | 8.6CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-58376 | Dolibarr SQL injection via sqlfilters parameter in multiple REST API List endpoints | 7.2CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-58375 | JimuReport Unauthenticated Report Export via /jmreport/auto/export | 8.7CNA v4.0 | 0.6% | 2026-06-30 | |
| CVE-2026-58374 | w1.fi hostapd off-by-one error | 7.1v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-58373 | CVAT quality reports API missing authorization | 5.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-58372 | SeaweedFS Cross-Bucket Object Deletion via DeleteObjects Request-Body Keys | 7.2CNA v4.0 | 0.9% | 2026-06-30 | Fix |
| CVE-2026-58371 | SeaweedFS Cross-Origin information disclosure via Unvalidated JSONP callback parameter | 2.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-58370 | Woodpecker GitLab Approval Gate Bypass via Spoofable Commit Author Name | 9.2CNA v4.0 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-58369 | Woodpecker organization lookup endpoint null pointer dereference | 6.9CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-58302 | LinuxCNC path traversal | 8.4CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-58176 | RuoYi-Vue-Plus missing authorization on Workflow Task Management endpoints | 7.1CNA v4.0 | 0.5% | 2026-06-30 | |
| CVE-2026-58174 | nesquena hermes-webui Hermes WebUI Cross-Profile authorization bypass | 6.0CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58173 | Vibe-Trading path traversal via Persistent Memory Type | 6.0CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-58172 | Ocelot IP Allow/Block List Bypass for WebSocket Upgrade requests | 9.3CNA v4.0 | 0.6% | 2026-06-30 | |
| CVE-2026-58171 | Vibe-Trading path traversal via Swarm Run Identifier | 2.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-58170 | Vibe-Trading path traversal in Proposal Identifier allows Forging Live Trading Mandates | 7.2CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-58169 | HKUDS Vibe-Trading local API server authentication bypass | 7.7CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-58168 | DeepTutor insecure default Grants Unrestricted MCP Tool Access to Non-Admin Users | 7.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-58167 | Nightingale Datasource credential disclosure to Low-Privilege Users | 7.1CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-58166 | OpenBMB ChatDev file upload handler path traversal | 8.8CNA v4.0 | 0.9% | 2026-06-30 | |
| CVE-2026-58165 | OpenZiti privilege escalation to Admin via Unauthorized Enrollment Creation | 8.7CNA v4.0 | 0.3% | 2026-06-30 | |
| CVE-2026-58138 | Orkes Conductor Unauthenticated RCE via GraalVM Script Evaluators | 9.3CNA v4.0 | 14.7% | 2026-06-30 | Reported exploitedNucleiExploit codeFix |
| CVE-2026-58116 | LLaMA-Factory remote code execution via WebUI Model Path | 8.8NVD v3.1 | 0.9% | 2026-06-30 | |
| CVE-2026-58016 | GLib: Integer underflow in gio/gdbusintrospection.c via g_dbus_node_info_new_for_xml | 9.1NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58015 | GLib: Path traversal in GLib/gio/gdbusauthmechanismsha1.c | 7.5NVD v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-58014 | GLib: Off-by-one error in GLib/gkeyfile.c via g_key_file_get_locale_string_list | 8.6NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58013 | GLib: Buffer over-read in GLib/giochannel.c via g_io_channel_read_line_backend | 8.2NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58012 | GLib: Buffer over-read in g_regex_replace via GLib/gregex.c:string_append and g_utf8_next_char | 8.2NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58011 | GLib: Out-of-bounds read in GLib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | 7.5NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-58010 | GLib: Buffer over-read in GLib/gvariant-serialiser.c via gvs_tuple_is_normal | 8.2NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-57995 | phpMyFAQ privilege escalation | 8.7CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-57585 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error | 7.5CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-57204 | pypdf content stream parser denial of service | 6.9CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-57082 | SANKO Net::BitTorrent MSE key exchange insufficient randomness | 5.9CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-57081 | Net::BitTorrent versions for Perl allow remote memory exhaustion via deeply nested bencoded input | 7.5CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-57080 | Net::BitTorrent versions for Perl allow remote memory exhaustion | 7.5CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-57079 | SANKO Net::BitTorrent peer metadata handling path traversal | 5.3CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56809 | Ricoh Multiple laser printers and MFPs which implement Ricoh Web Image Monitor cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-06-30 | |
| CVE-2026-56808 | AVTECH SECURITY DGM3103SCT OS command injection | 8.6CNA v4.0 | 2.5% | 2026-06-30 | |
| CVE-2026-56777 | n8n AST Validator Bypass in Python Code Node | 5.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56700 | Grav multiple remote code execution vulnerabilities via Unsafe Unserialize and command injection | 9.3CNA v4.0 | 2.5% | 2026-06-30 | Fix |
| CVE-2026-56415 | OS command injection in StoneFly Storage Concentrator | 10.0CNA v4.0 | 4.4% | 2026-06-30 | Fix |
| CVE-2026-56413 | OS command injection in StoneFly Storage Concentrator | 10.0CNA v4.0 | 4.2% | 2026-06-30 | Fix |
| CVE-2026-56399 | open-webui open WebUI server-side request forgery | 5.3CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56377 | ImageMagick Policy Bypass via Incorrect Path Validation | 4.8CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-56369 | ImageMagick information disclosure via AES-CTR nonce reuse in PasskeyEncipherImage | 6.3CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-56365 | ImageMagick memory leak in PNG Encoder via MNG Image Writing | 5.3v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56364 | ImageMagick memory leak in LoadOpenCLDeviceBenchmark via Malformed XML | 1.8CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-56363 | ImageMagick division by zero in Binomial Kernel Processing | 4.8CNA v4.0 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-56361 | ImageMagick heap buffer overflow via off-by-one in Morphology Processing | 7.1v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-56356 | n8n stored cross-site scripting in Chat Trigger Node Custom CSS field | 5.1CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56350 | n8n SSO Enforcement Bypass via API | 7.7v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56334 | Capgo Missing UPDATE RLS Policy for Build Status Persistence | 5.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56333 | Capgo Server-Side Validation Bypass via Direct Browser-Side Organization Security Settings Updates | 5.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56331 | Capgo improper error handling in Accept Invitation endpoint via Invalid Magic String | 6.9CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56328 | Capgo Integrity issue in Release Routing via multiple Public Channels | 7.1CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56327 | Capgo Unauthenticated Organization Existence Oracle via public.invite_user_to_org RPC | 6.9CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56320 | Capgo Org/App Scope Mismatch in Device Creation endpoint | 7.1CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56318 | Capgo information disclosure via /private/validate_password_compliance endpoint | 6.9CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56300 | Capgo Unauthenticated API Key Validity and Permission Oracle via RPC functions | 8.7CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56286 | Capgo Account Deletion without Password Confirmation | 7.0CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56278 | Flowise session hijacking via Weak Default Express Session Secret | 9.3CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56277 | Flowise Hard-coded CORS Wildcard in TTS endpoint | 6.5v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-56264 | Crawl4AI arbitrary JavaScript Execution via /execute_js endpoint | 6.1NVD v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56249 | Capgo Unauthorized Channel Overwrite and Ownership takeover via POST /channel Name Collision | 7.2CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56247 | Capgo privilege escalation via Cross-Scope RBAC Role Assignment | 8.7CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56233 | Capgo SSRF and privilege escalation via path traversal in Builder Upload Proxy | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-56230 | Capgo Broken Object Level Authorization via x-limited-key-id header | 8.7CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-56224 | Capgo login CSRF and session fixation via URL Query parameters | 5.1CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-56219 | Capgo Unauthenticated RBAC Bindings and email disclosure | 8.7CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-56137 | Gotcha Gotcha Games RPG MAKER MV OS command injection | 8.4CNA v4.0 | 1.1% | 2026-06-30 | |
| CVE-2026-55721 | SQL injection in StoneFly Storage Concentrator | 9.2CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-55223 | c3p0 exposes a deserialization sink via JDBC DataSource bean properties | 6.3CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-54696 | Ruby JSON: JSON generator heap buffer overflow when streaming to an IO | 3.7CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-54673 | electron-updater HTTP redirect handler information disclosure | 8.2CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-54672 | Electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib` | 7.8CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-54475 | Apache ActiveMQ Broker missing authorization | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-53917 | Apache ActiveMQ excessive memory allocation | 7.5CISA ADP v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-53916 | Apache ActiveMQ excessive memory allocation | 7.5CISA ADP v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-53692 | Weak hashing algorithm in Redeight CMS | 5.9CNA v4.0 | 0.1% | 2026-06-30 | |
| CVE-2026-53691 | Remote code execution in Redeight CMS | 8.6CNA v4.0 | 0.7% | 2026-06-30 | |
| CVE-2026-53690 | SQL injection in Redeight CMS | 9.3CNA v4.0 | 0.5% | 2026-06-30 | |
| CVE-2026-53433 | Denial of service in fzf | 7.5v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-53432 | Integer overflow in fzf | 7.5v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-52868 | OFFIS DCMTK Toolkit path traversal | 8.8CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-52760 | Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS | 6.1CISA ADP v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-52198 | UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-52197 | UTT nv518G denial of service | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-52196 | UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-52195 | UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-52193 | UTT nv518G nv518GV3v3.2.7-210919-161313 buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-50750 | Apache ActiveMQ Broker denial of service | 7.5CISA ADP v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-50734 | Apache ActiveMQ Client excessive memory allocation | 7.5CISA ADP v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-50254 | OFFIS DCMTK Toolkit missing release of memory after effective lifetime | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-50110 | StoneFly Storage Concentrator hard-coded credentials | 9.3CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-50040 | Cross-site scripting in StoneFly Storage Concentrator | 5.1CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-50003 | OFFIS DCMTK Toolkit path traversal | 9.3CNA v4.0 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-49877 | Apache ActiveMQ: Authenticated web users retain admin access by default in the Web console | 8.1CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-49451 | Microsoft OpenAPI.NET Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing | 7.5CNA v3.1 | 1.2% | 2026-06-30 | Fix |
| CVE-2026-49434 | Apache ActiveMQ Broker improper input validation | 7.5CISA ADP v3.1 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-49432 | Apache ActiveMQ improper input validation | 7.5CISA ADP v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-48315 | Adobe ColdFusion improper input validation | 9.3CNA v3.1 | 1.0% | 2026-06-30 | Fix |
| CVE-2026-48314 | Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal) | 6.5CNA v3.1 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-48313 | Adobe ColdFusion improper limitation of a pathname to a restricted directory (path traversal) | 9.3CNA v3.1 | 3.0% | 2026-06-30 | Reported exploitedNucleiEmerging ThreatsKCVFix |
| CVE-2026-48307 | Adobe ColdFusion cross-site scripting (reflected XSS) | 8.8CNA v3.1 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-48286 | Adobe Campaign Classic (ACC) incorrect authorization | 10.0CNA v3.1 | 1.2% | 2026-06-30 | Fix |
| CVE-2026-48285 | Adobe ColdFusion server-side request forgery (SSRF) | 8.6CNA v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-48283 | Adobe ColdFusion unrestricted upload of file with dangerous type | 10.0CNA v3.1 | 1.3% | 2026-06-30 | KCVFix |
| CVE-2026-48282 | Adobe ColdFusion path traversal | 10.0CNA v3.1 | 42.4% | 2026-06-30 | KEVNucleiExploit codeFix |
| CVE-2026-48281 | Adobe ColdFusion improper input validation | 10.0CNA v3.1 | 1.4% | 2026-06-30 | Fix |
| CVE-2026-48277 | Adobe ColdFusion improper input validation | 10.0CNA v3.1 | 1.3% | 2026-06-30 | Fix |
| CVE-2026-48276 | Adobe ColdFusion unrestricted upload of file with dangerous type | 10.0CNA v3.1 | 1.3% | 2026-06-30 | Fix |
| CVE-2026-48192 | Siemens Mendix Studio Pro code injection | 6.8CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-45822 | SamVerschueren decode-uri-component algorithmic complexity | 6.6CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-44949 | SUSE Rancher unauthenticated namespace creation and RBAC injection | 7.0CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-44948 | Path traversal in Rancher Fleet ImageScan GitRepo Path handler | 5.3CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-44947 | Stale PSA ClusterRoleBinding Persists after RoleTemplate Downgrade in Rancher | 6.9CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-44946 | SAML Authentication Replay in Rancher | 9.5CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-44628 | OFFIS DCMTK Toolkit type confusion | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-41053 | Over-inclusive team membership expansion in GitHub App authentication provider for Rancher | 8.8CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-37106 | DokuWiki user registration function vulnerability | 9.8CISA ADP v3.1 | 0.7% | 2026-06-30 | |
| CVE-2026-35505 | OFFIS DCMTK Toolkit missing release of memory after effective lifetime | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-35098 | Improper restriction of excessive authentication attempts in KTM System e-BOK | 6.9CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-35097 | Weak password requirements in KTM System e-BOK | 6.9CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-35096 | Cross-site request forgery (CSRF) in KTM System e-BOK | 5.1CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-35095 | Session fixation in KTM System e-BOK | 4.8CNA v4.0 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-28322 | SolarWinds Database Performance Analyzer stored cross-site scripting | 5.6CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-27957 | Coolify: Authenticated RCE via command injection in CA certificate management feature | 8.8CNA v3.1 | 1.2% | 2026-06-30 | Fix |
| CVE-2026-27956 | Coolify: Cross-team application domain enumeration via domains_by_server endpoint | 4.3CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-27955 | Coolify: Command injection via Single-Quote Breakout in `executeInDocker` | 6.6CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-27883 | Coolify: IDOR in Deployment API Cross-Team Deployment information disclosure | 5.0CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-27882 | Coolify: Timing Attack in GitLab Webhook Token Validation | 4.8CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-27881 | Coolify deployments API insecure direct object reference | 5.0CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14241 | Mozilla memory safety bugs fixed in Firefox | 9.8v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14209 | Red Hat Keycloak admin UI brute-force-user endpoint insecure direct object reference | 4.3CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14178 | openGauss-server-7.0.0-RC2 openGauss存在非法内存访问导致DoS漏洞 | 5.9CNA v3.1 | 0.4% | 2026-06-30 | |
| CVE-2026-14164 | Red Hat Enterprise Linux 10 libarchive: Double free vulnerability in rar5 decompression logic | 7.5CNA v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-14162 | Advantech|Hospital Quering Management missing authentication | 9.3CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-14161 | Advantech|Hospital Queuing Management sensitive data exposure | 8.7CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-14160 | Samsung Open Source Escargot time-of-check time-of-use race condition | 5.9CNA v3.1 | 0.1% | 2026-06-30 | |
| CVE-2026-14156 | Google Chrome StorageAccessAPI insufficient policy enforcement | 6.5v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14155 | Google Chrome StorageAccessAPI insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14154 | Google Chrome DevTools inappropriate implementation | 4.8CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14153 | Google Chrome Glic inappropriate implementation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14152 | Google Chrome ANGLE out-of-bounds read | 9.6CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14151 | Google Chrome AI inappropriate implementation | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14150 | Google Chrome spoofing | 5.4v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14149 | Google Chrome Audio use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14148 | Google Chrome CSS type confusion | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14147 | Google Chrome CSS inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14146 | Google Chrome CSS inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14145 | Google Chrome CSS inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14144 | Google Chrome Views incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14143 | Google Chrome Passwords incorrect security UI | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14142 | Google Chrome extensions inappropriate implementation | 5.4v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14141 | Google Chrome Document Picture-in-Picture incorrect security UI | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14140 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14139 | Google Chrome TabStrip inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14138 | Google Chrome WebAppInstalls inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14137 | Google Chrome spoofing | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14136 | Google Chrome UI misrepresentation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14135 | Google Chrome spoofing | 5.4v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14134 | Google Chrome Autofill inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14133 | Google Chrome race condition | 4.2v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14132 | Google Chrome WebXR inappropriate implementation | 5.4v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14131 | Google Chrome spoofing | 5.4v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14130 | Google Chrome Omnibox incorrect security UI | 4.3v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14129 | Google Chrome PreviewTab inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14128 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14127 | Google Chrome Printing inappropriate implementation | 4.3v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14126 | Google Chrome UI incorrect security UI | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14125 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14124 | Google Chrome CredentialProvider inappropriate implementation | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-14123 | Google Chrome Chrome for iOS incorrect security UI | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14122 | Google Chrome improper input validation | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14121 | Google Chrome Chromoting use-after-free | 9.8CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-14120 | Google Chrome DevTools inappropriate implementation | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14119 | Google Chrome Bluetooth type confusion | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14118 | Google Chrome DevTools improper input validation | 6.5v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14117 | Google Chrome improper input validation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14116 | Google Chrome improper input validation | 4.3v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14115 | Google Chrome privilege escalation | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14114 | Google Chrome WebAppInstalls inappropriate implementation | 7.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14113 | Google Chrome Updater use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14112 | Google Chrome Enterprise inappropriate implementation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14111 | Google Chrome WebProtect use-after-free | 8.1CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14110 | Google Chrome DarkMode inappropriate implementation | 4.3v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14109 | Google Chrome Mojo insufficient policy enforcement | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14108 | Google Chrome PDFium use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14107 | Google Chrome Scheduling use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14106 | Google Chrome sandbox escape | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14105 | Google Chrome Speech insufficient policy enforcement | 4.3NVD v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14104 | Google Chrome arbitrary code execution | 9.8v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-14103 | Google Chrome SSL use-after-free | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14102 | Google Chrome Passwords use-after-free | 8.8v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14101 | Google Chrome Sandbox insufficient policy enforcement | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14100 | Google Chrome NetworkCache improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14099 | Google Chrome Chrome for iOS use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14098 | Google Chrome CSS inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14097 | Google Chrome WebAppInstalls inappropriate implementation | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14096 | Google Chrome Input inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14095 | Google Chrome Browser insufficient policy enforcement | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14094 | Google Chrome Installer use-after-free | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-14093 | Google Chrome Cast use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14092 | Google Chrome Privacy insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14091 | Google Chrome DevTools use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14090 | Google Chrome out-of-bounds read | 8.1NVD v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14089 | Google Chrome spoofing | 4.3v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14088 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14087 | Google Chrome WebNN heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14086 | Google Chrome HID insufficient policy enforcement | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14085 | Google Chrome CSS side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14084 | Google Chrome improper input validation | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14083 | Google Chrome improper input validation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14082 | Google Chrome race condition | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14081 | Google Chrome DevTools insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14080 | Google Chrome improper input validation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14079 | Google Chrome Network insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14078 | Google Chrome privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14077 | Google Chrome Select inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14076 | Google Chrome Network insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14075 | Google Chrome Chrome for iOS insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14074 | Google Chrome WebAuthentication side-channel information leak | 6.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14073 | Google Chrome improper input validation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14072 | Google Chrome SplitView inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14071 | Google Chrome WebAudio side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14070 | Google Chrome WebNN integer overflow | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14069 | Google Chrome WebNN integer overflow | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14068 | Google Chrome Omnibox inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14067 | Google Chrome Chrome for iOS use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14066 | Google Chrome improper input validation | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14065 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14064 | Google Chrome PageInfo use-after-free | 7.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14063 | Google Chrome Chromecast out-of-bounds read | 5.7CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-14062 | Google Chrome Views inappropriate implementation | 5.9CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14061 | Google Chrome Dawn inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14060 | Google Chrome privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-14059 | Google Chrome Related-Website-Sets insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14058 | Google Chrome parser insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14057 | Google Chrome FedCM inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14056 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14055 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14054 | Google Chrome Network insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14053 | Google Chrome extensions insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14052 | Google Chrome FileSystem insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14051 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14050 | Google Chrome Passwords insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14049 | Google Chrome GPU inappropriate implementation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14048 | Google Chrome Chromecast use-after-free | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14047 | Google Chrome extensions insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14046 | Google Chrome CustomTabs inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14045 | Google Chrome improper input validation | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14044 | Google Chrome ANGLE use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14043 | Google Chrome GetUserMedia use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14042 | Google Chrome Isolated Web Apps inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14041 | Google Chrome Serial insufficient policy enforcement | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14040 | Google Chrome BrowserTag use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14039 | Google Chrome GetUserMedia insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14038 | Google Chrome sandbox escape | 9.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14037 | Google Chrome GPU insufficient policy enforcement | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14036 | Google Chrome Bluetooth insufficient policy enforcement | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14035 | Google Chrome Bluetooth insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14034 | Google Chrome WebXR inappropriate implementation | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14033 | Google Chrome Media insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14032 | Google Chrome Bluetooth use-after-free | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14031 | Google Chrome File Input inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14030 | Google Chrome SplitView inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14028 | Google Chrome Chrome for iOS incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14027 | Google Chrome SignIn use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14026 | Google Chrome SplitView incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14025 | Google Chrome Views use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14024 | Google Chrome Ozone use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14023 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14022 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14021 | Google Chrome StorageAccessAPI insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14020 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14019 | Google Chrome Passwords inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14018 | Google Chrome Updater use-after-free | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-14017 | Google Chrome Navigation inappropriate implementation | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14016 | Google Chrome SVG inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14015 | Google Chrome race condition | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14014 | Google Chrome Paint inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14013 | Google Chrome SVG inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14012 | Google Chrome CSS side-channel information leak | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14011 | Google Chrome SurfaceCapture out-of-bounds read | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14010 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14009 | Google Chrome Passwords inappropriate implementation | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14008 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14007 | Google Chrome PermissionsPolicy insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14006 | Google Chrome Navigation use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-14005 | Google Chrome Omnibox use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14004 | Google Chrome CSS inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14003 | Google Chrome extensions insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14002 | Google Chrome Geolocation inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-14001 | Google Chrome Network inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-14000 | Google Chrome XML inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13999 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13998 | Google Chrome File Input incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13997 | Google Chrome extensions incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13996 | Google Chrome Permissions inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13995 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13994 | Google Chrome Credential Management inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13993 | Google Chrome WebAppInstalls incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13992 | Google Chrome UI inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13991 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13990 | Google Chrome spoofing | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13989 | Google Chrome PageInfo inappropriate implementation | 5.3v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13988 | Google Chrome Paint inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13987 | Google Chrome Mobile incorrect security UI | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13986 | Google Chrome Media UI inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13985 | Google Chrome MediaCapture inappropriate implementation | 6.5v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13984 | Google Chrome TabStrip incorrect security UI | 4.3v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13983 | Google Chrome Chrome for iOS inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13982 | Google Chrome Passwords incorrect security UI | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13981 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13980 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13979 | Google Chrome Paint inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13978 | Google Chrome PageInfo insufficient policy enforcement | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13977 | Google Chrome HTMLParser inappropriate implementation | 5.4CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13976 | Google Chrome Storage improper input validation | 5.8CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13975 | Google Chrome ANGLE out-of-bounds read | 5.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13974 | Google Chrome Safe Browsing integer overflow | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13973 | Google Chrome UI inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13972 | Google Chrome Paint inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13971 | Google Chrome uninitialized variable use | 5.3CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13970 | Google Chrome uninitialized variable use | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13969 | Google Chrome uninitialized variable use | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13968 | Google Chrome arbitrary code execution | 7.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13967 | Google Chrome V8 heap-based buffer overflow | 8.8CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13966 | Google Chrome History inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13965 | Google Chrome Oilpan use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13964 | Google Chrome WebView insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13963 | Google Chrome DevTools inappropriate implementation | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13962 | Google Chrome PDF improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13961 | Google Chrome improper input validation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13960 | Google Chrome Passwords inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13959 | Google Chrome improper input validation | 4.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13958 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13957 | Google Chrome extensions incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13956 | Google Chrome PageInfo incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13955 | Google Chrome spoofing | 3.3CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13954 | Google Chrome XML insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13953 | Google Chrome SplitView inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13952 | Google Chrome PerformanceAPIs inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13951 | Google Chrome USB insufficient policy enforcement | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13950 | Google Chrome uninitialized variable use | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13949 | Google Chrome Payments insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13948 | Google Chrome extensions insufficient policy enforcement | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13947 | Google Chrome uninitialized variable use | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13946 | Google Chrome ScriptInjections inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13945 | Google Chrome extensions insufficient policy enforcement | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13944 | Google Chrome DataTransfer inappropriate implementation | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13943 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13942 | Google Chrome Video Capture inappropriate implementation | 3.3CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13941 | Google Chrome SiteSettings inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13940 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13939 | Google Chrome spoofing | 3.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13938 | Google Chrome Fonts integer overflow | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13937 | Google Chrome Passwords insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13936 | Google Chrome Passwords inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13935 | Google Chrome ComputePressure side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13934 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Exploit codeFix |
| CVE-2026-13933 | Google Chrome Passwords insufficient policy enforcement | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13932 | Google Chrome Sharing inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13931 | Google Chrome Media inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13930 | Google Chrome Actor insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13929 | Google Chrome DevTools insufficient policy enforcement | 5.5CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13928 | Google Chrome privilege escalation | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13927 | Google Chrome privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13926 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13925 | Google Chrome Downloads inappropriate implementation | 7.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13924 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13923 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13922 | Google Chrome Paint side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13921 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13920 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13919 | Google Chrome extensions insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13918 | Google Chrome Chrome for iOS use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13917 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13916 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13915 | Google Chrome Chrome for iOS use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13914 | Google Chrome Passwords inappropriate implementation | 5.5CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13913 | Google Chrome Autofill insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13912 | Google Chrome Safe Browsing inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13911 | Google Chrome Spellcheck insufficient policy enforcement | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13910 | Google Chrome WebXR insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13909 | Google Chrome DevTools insufficient policy enforcement | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13908 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13907 | Google Chrome iOSWeb inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13906 | Google Chrome Codecs out-of-bounds read | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13905 | Google Chrome race condition | 4.2CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13904 | Google Chrome Safe Browsing inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13903 | Google Chrome Bluetooth insufficient policy enforcement | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13902 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13901 | Google Chrome Serial insufficient policy enforcement | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13900 | Google Chrome Chromecast inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13899 | Google Chrome HTML use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13898 | Google Chrome Cast Receiver use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13897 | Google Chrome Chromecast insufficient policy enforcement | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13896 | Google Chrome Glic insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13895 | Google Chrome Autofill inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13894 | Google Chrome Network insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13893 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13892 | Google Chrome Chrome for iOS inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13891 | Google Chrome privilege escalation | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13890 | Google Chrome Chromecast out-of-bounds read | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13889 | Google Chrome WebAuthentication side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13888 | Google Chrome extensions use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13887 | Google Chrome NFC inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13886 | Google Chrome Isolated Web Apps insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13885 | Google Chrome Skia use-after-free | 8.8CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13884 | Google Chrome Chromecast integer overflow | 8.8CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13883 | Google Chrome ANGLE type confusion | 9.6CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13882 | Google Chrome race condition | 9.6CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13881 | Google Chrome WebAppInstalls inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13880 | Google Chrome USB use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13879 | Google Chrome Bluetooth use-after-free | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13878 | Google Chrome Bluetooth use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13877 | Google Chrome improper input validation | 5.3CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13876 | Google Chrome Network inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13875 | Google Chrome improper input validation | 5.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13874 | Google Chrome race condition | 5.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13873 | Google Chrome Layout out-of-bounds read | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13872 | Google Chrome sandbox escape | 9.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13871 | Google Chrome GuestView insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13870 | Google Chrome WebView use-after-free | 8.8CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13869 | Google Chrome Device use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13868 | Google Chrome Network inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13867 | Google Chrome Geolocation inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13866 | Google Chrome Input inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13865 | Google Chrome spoofing | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13864 | Google Chrome WebHID insufficient policy enforcement | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13863 | Google Chrome privilege escalation | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13862 | Google Chrome Web Authentication insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13861 | Google Chrome Core use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13860 | Google Chrome Autofill incorrect security UI | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13859 | Google Chrome ANGLE inappropriate implementation | 9.6CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13858 | Google Chrome FFmpeg out-of-bounds read | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13857 | Google Chrome Geometry inappropriate implementation | 4.2CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13856 | Google Chrome privilege escalation | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13855 | Google Chrome Ozone use-after-free | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13854 | Google Chrome Ozone use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13853 | Google Chrome Journeys use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13852 | Google Chrome improper input validation | 9.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13851 | Google Chrome improper input validation | 9.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13850 | Google Chrome arbitrary code execution | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13849 | Google Chrome sandbox escape | 8.6CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13848 | Google Chrome forms use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13847 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13846 | Google Chrome USB use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13845 | Google Chrome DOM use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13844 | Google Chrome Updater use-after-free | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13843 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13842 | Google Chrome Chrome for iOS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13841 | Google Chrome Skia integer overflow | 8.3CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13840 | Google Chrome Canvas insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13839 | Google Chrome CSS inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13838 | Google Chrome CSS inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13837 | Google Chrome CSS inappropriate implementation | 4.3CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13836 | Google Chrome CSS inappropriate implementation | 6.1CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13835 | Google Chrome XML inappropriate implementation | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13834 | Google Chrome sandbox escape | 8.3CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13833 | Google Chrome uninitialized variable use | 6.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13832 | Google Chrome Headless use-after-free | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13831 | Google Chrome GPU out-of-bounds read | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13830 | Google Chrome Chromoting use-after-free | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13829 | Google Chrome sandbox escape | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13828 | Google Chrome Enterprise inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13827 | Google Chrome Updater use-after-free | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13826 | Google Chrome Autofill inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13825 | Google Chrome uninitialized variable use | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13824 | Google Chrome extensions insufficient policy enforcement | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13823 | Google Chrome Glic use-after-free | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13822 | Google Chrome extensions inappropriate implementation | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13821 | Google Chrome Canvas use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13820 | Google Chrome Skia out-of-bounds read | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13819 | Google Chrome ANGLE out-of-bounds read | 8.1CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13818 | Google Chrome Passwords inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13817 | Google Chrome sandbox escape | 8.8CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13816 | Google Chrome improper input validation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13815 | Google Chrome Blink use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13814 | Google Chrome Views use-after-free | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13813 | Google Chrome Chrome for iOS insufficient policy enforcement | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13812 | Google Chrome improper input validation | 4.7CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13811 | Google Chrome IME use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13810 | Google Chrome Input inappropriate implementation | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13809 | Google Chrome Safe Browsing side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13808 | Google Chrome Chrome for iOS improper input validation | 4.6CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13807 | Google Chrome Import use-after-free | 7.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13806 | Google Chrome improper input validation | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13805 | Google Chrome GFX use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13804 | Google Chrome Chromecast use-after-free | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13803 | Google Chrome Chrome Tabs type confusion | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13802 | Google Chrome Views use-after-free | 7.5CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13801 | Google Chrome Chromecast integer overflow | 8.3CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13800 | Google Chrome Updater inappropriate implementation | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13799 | Google Chrome QUIC use-after-free | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13798 | Google Chrome Chromecast heap-based buffer overflow | 9.6CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13797 | Google Chrome sandbox escape | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13796 | Google Chrome Chromecast integer overflow | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13795 | Google Chrome Chrome for iOS insufficient policy enforcement | 6.5v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13794 | Google Chrome arbitrary code execution | 7.5CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13793 | Google Chrome SVG insufficient policy enforcement | 6.5CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13792 | Google Chrome Touchbar use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13791 | Google Chrome arbitrary code execution | 8.1CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13790 | Google Chrome Scroll side-channel information leak | 6.5CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13789 | Google Chrome GPU use-after-free | 9.6CISA ADP v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13788 | Google Chrome Fullscreen use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13787 | Google Chrome Chromoting use-after-free | 8.1CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13786 | Google Chrome Ozone use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13785 | Google Chrome Bluetooth use-after-free | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13784 | Google Chrome Views use-after-free | 8.8NVD v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13783 | Google Chrome Views use-after-free | 8.8NVD v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13782 | Google Chrome Browser use-after-free | 10.0v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13781 | Google Chrome sandbox escape | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13780 | Google Chrome sandbox escape | 9.6v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13779 | Google Chrome Chromoting use-after-free | 8.1CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13778 | Google Chrome WebUSB use-after-free | 7.8CISA ADP v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-13777 | Google Chrome improper input validation | 8.8v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13776 | Google Chrome Dawn type confusion | 9.8v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13775 | Google Chrome GPU use-after-free | 9.8v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13774 | Google Chrome extensions use-after-free | 8.1v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-13773 | IBM WebSphere eXtreme Scale CORBA ORB transport server-side request forgery | 6.0CNA v3.1 | 6.1% | 2026-06-30 | Fix |
| CVE-2026-13772 | IBM WebSphere eXtreme Scale's OQL is affected by remote code execution | 7.5CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13766 | DBIx::QuickORM versions for Perl allow SQL injection via unquoted SQL identifiers | 9.8CISA ADP v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13759 | IBM WebSphere eXtreme Scale ObjectInputStream deserialization deserialization of untrusted data | 7.5CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-13474 | NetScaler ADC denial of service via malformed HTTP/2 requests | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-13455 | PostgreSQL Anonymizer: Unrestricted function can leak the secret salt | 4.3CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-13449 | XXE attack in IBM Business Automation Manager Open Editions | 7.6CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-13316 | Foreman: Ssrf to cloud metada service through unvalidated test_url parameters in Foreman config | 4.4CNA v3.1 | 0.2% | 2026-06-30 | |
| CVE-2026-13207 | Frangoteam FUXA SCADA/HMI authentication bypass by spoofing | 8.7CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-13149 | juliangruber brace-expansion algorithmic complexity | 7.7CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-12819 | DVP-12SE missing authentication and Unauthorized Write access | 9.3CNA v4.0 | 0.5% | 2026-06-30 | |
| CVE-2026-12818 | DVP-12SE exposure of sensitive information | 9.3CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-12610 | Fedora sssd PAM responder use-after-free | 6.4CNA v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-12578 | DTMSoft deserialization of untrusted data | 8.4CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-12560 | Editorial Rating WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-12388 | Keycloak-broker: Keycloak: Privilege escalation to realm administrator | 6.5CNA v3.1 | 0.4% | 2026-06-30 | |
| CVE-2026-12349 | Premium Addons for KingComposer WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.4% | 2026-06-30 | |
| CVE-2026-12240 | Export User Data WordPress plugin PHP object injection to arbitrary file deletion | 8.0CNA v3.1 | 0.6% | 2026-06-30 | |
| CVE-2026-12114 | Team Members WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-12086 | IBM UrbanCode Deploy log files information disclosure | 6.2CNA v3.1 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-12085 | IBM UrbanCode Deploy API responses information disclosure | 6.5CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-12084 | IBM UCD permissive cross-domain policy | 5.4CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-12076 | SQL injection in Raytha CMS | 9.3CNA v4.0 | 0.5% | 2026-06-30 | |
| CVE-2026-12073 | ProfileGrid WordPress plugin privilege escalation | 9.8CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-11906 | IBM Db2 improper quantity validation | 6.5CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11806 | IBM WebSphere Application Server Liberty is affected by a an arbitrary file read | 7.2CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-11714 | IBM WebSphere Application Server Liberty is affected by an authorization bypass | 8.5CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11712 | IBM WebSphere Application Server is affected by a cross-site scripting | 9.3CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11708 | IBM WebSphere Application Server is affected by a cross-site scripting | 9.3CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11595 | IBM WebSphere Application Server is affected by a path traversal | 4.3CNA v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-11594 | IBM WebSphere Application Server is affected by multiple cross-site scripting | 8.5CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-11590 | WP Support Plus Responsive Ticket System WordPress plugin unauthenticated SQL injection | 8.6CISA ADP v3.1 | 0.4% | 2026-06-30 | |
| CVE-2026-11589 | WP Support Plus Responsive Ticket System WordPress plugin unauthenticated stored XSS via file upload | 8.8CISA ADP v3.1 | 0.5% | 2026-06-30 | |
| CVE-2026-11581 | Kali Forms WordPress plugin Contributor+ stored XSS via form field Caption | 5.9CISA ADP v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-11546 | IBM WebSphere Application Server Liberty is affected by a server-side request forgery | 7.1CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11541 | IBM inconsistent interpretation of HTTP requests in CICS Transaction Gateway for Multiplatforms | 7.4CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-11367 | PixMagix WordPress plugin authenticated (Author+) path traversal in layers[].id parameter | 6.5CNA v3.1 | 0.8% | 2026-06-30 | Fix |
| CVE-2026-10817 | NetScaler ADC insufficient input validation leading to memory overread | 6.9CNA v4.0 | 0.6% | 2026-06-30 | Exploit codeFix |
| CVE-2026-10816 | NetScaler ADC arbitrary file read (Unauthenticated) | 7.1CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-10763 | Hitachi Energy PROMOD V Digipede server communication vulnerability | 7.0CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10655 | Zephyr SNTP client socket close use-after-free | 6.5CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10654 | zephyrproject zephyr A race condition | 3.1CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-10653 | Zephyr net_buf reference counting double free | 6.4CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10652 | Out-of-bounds read in Zephyr DNS resolver TXT/SRV record parsing (unvalidated `rdlength`) | 4.8CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10585 | GitHub Enterprise Server Discussion Q&A titles stored cross-site scripting | 6.3CNA v4.0 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-10564 | IBM SSRF vulnerability in Langflow OSS Legacy Components Bypasses Protection | 8.2CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-10562 | Unauthenticated open redirect vulnerability on TP-Link Archer AX20 Web interface | 5.9CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-10560 | IBM unauthenticated access to Private Flow Build Events and Cancellation in Langflow OSS | 8.2CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-10546 | IBM DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL component | 7.1CNA v3.1 | 0.2% | 2026-06-30 | Fix |
| CVE-2026-10513 | Webmention WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10140 | IBM Cross-Tenant API Key Reuse and Billing Fraud in Langflow Voice Mode subsystem | 9.6CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-10134 | IBM Langflow OSS Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows | 10.0CNA v3.1 | 0.6% | 2026-06-30 | MetasploitExploit codeFix |
| CVE-2026-10129 | IBM SSRF via HTTP Redirect Following in Langflow API request component | 8.5CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-10109 | IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling | 9.8CNA v3.1 | 0.9% | 2026-06-30 | Fix |
| CVE-2026-9836 | IBM DataStage Flow Designer application is affected by an information disclosure | 3.5CNA v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-9711 | EventON - WordPress Virtual Event Calendar plugin unauthenticated blind SQL injection | 9.8CNA v3.1 | 0.5% | 2026-06-30 | |
| CVE-2026-9576 | Fluent Booking WordPress plugin Calendar Manager+ sensitive information disclosure | 4.9CISA ADP v3.1 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-9263 | Zephyr Bluetooth Controller ISOAL out-of-bounds read | 6.5CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-9132 | GitHub Enterprise Server Copilot pull request diff summary endpoint missing authorization | 6.0CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-9106 | GitHub Enterprise Server OAuth consent screen UI misrepresentation | 4.8CNA v4.0 | 0.4% | 2026-06-30 | Fix |
| CVE-2026-9002 | IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled | 6.5CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-8944 | Plugin for Google Analytics by IO technologies WordPress plugin cross-site request forgery | 4.3CNA v3.1 | 0.1% | 2026-06-30 | |
| CVE-2026-8864 | HP Fan Control App potential escalation of privilege | 7.3CNA v4.0 | 0.1% | 2026-06-30 | Fix |
| CVE-2026-8655 | NetScaler ADC and Gateway memory corruption | 8.8CNA v4.0 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway improper restriction of operations within the bounds of a memory buffer | 8.8CNA v4.0 | 1.0% | 2026-06-30 | KEVEmerging ThreatsExploit codeFix |
| CVE-2026-8451 | NetScaler ADC insufficient input validation leading to memory overread | 8.8CNA v4.0 | 0.5% | 2026-06-30 | Reported exploitedExploit codeFix |
| CVE-2026-8403 | Stored XSS in Exagate's SYSGUARD 6001 | 6.1CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-8402 | SQLi in Exagate's SYSGUARD 6001 | 9.8CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-8141 | Ajax Load More - Filters WordPress plugin unauthenticated stored cross-site scripting | 7.2CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-7874 | IBM Langflow OSS weak cryptographic Key Derivation Exposed All Stored Credentials | 9.1CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-7873 | IBM Langflow OSS code injection vulnerability in Code Validation endpoint | 9.9CNA v3.1 | 0.5% | 2026-06-30 | MetasploitExploit codeFix |
| CVE-2026-7871 | IBM Langflow OSS insecure deserialization in Redis Cache Backend | 9.8CNA v3.1 | 0.7% | 2026-06-30 | Fix |
| CVE-2026-7803 | IBM Langflow OSS Flow Validation Bypass via Empty Component Type field | 9.8CNA v3.1 | 0.6% | 2026-06-30 | Fix |
| CVE-2026-7663 | IBM Langflow streamable MCP transport endpoint authorization bypass | 9.1CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-6954 | Intermark IT WebControl CMS Intermark IT's cross-site scripting | 5.1CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-6953 | Intermark IT WebControl CMS Intermark IT's HTML injection | 5.1CNA v4.0 | 0.4% | 2026-06-30 | |
| CVE-2026-6556 | @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins | 9.1CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-4629 | Keycloak: Keycloak: Privilege escalation through hard-coded role mapper injection | 6.5CNA v3.1 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-4360 | Python CPython tarfile.extract doesn't fully respect filter parameter | 2.0CNA v4.0 | 0.5% | 2026-06-30 | Fix |
| CVE-2026-3602 | IBM App Connect Enterprise and Integration Bus SQL injection | 4.7CNA v3.1 | 0.3% | 2026-06-30 | Fix |
| CVE-2026-58000 | luci-proto-openvpn command injection via cl_meta parameter in generateKey | 8.7CNA v4.0 | 2.7% | 2026-06-29 | |
| CVE-2026-57999 | luci-app-tailscale-community command injection via tailscale.do_login RPC | 7.7CNA v4.0 | 2.3% | 2026-06-29 | |
| CVE-2026-57997 | Strapi users-permissions JWT Algorithm Confusion via Missing Algorithm Configuration | 5.4v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-57966 | Spice-vdagent: Path traversal in file transfer via unsanitized filename | 4.4CNA v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-57965 | Spice-vdagent: Integer overflow in udscs_write leading to heap buffer overflow | 5.1CNA v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-57960 | Hi.Events Unauthenticated Attendee PII Exposure via Check-in List short_id | 8.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-57959 | Hi.Events Promo Code Max-Usage Bypass via Asynchronous Job race condition | 8.2CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57958 | Mixpost reflected XSS via OAuth Callback Error parameter | 5.1CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57957 | Papermark CORS Misconfiguration in Viewer upload endpoint | 2.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-57956 | SigNoz Cross-Organization insecure direct object reference in Alert Rules | 6.1CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57955 | SigNoz SQL injection in Alert History endpoints via Rule ID parameter | 8.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57954 | Elide permission bypass in Sort Expression Validation | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57953 | Mythic Unauthorized Automation Workflow Modification via eventing_import_automatic_webhook endpoint | 5.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57952 | Mythic Unauthorized C2 Profile Configuration Access via Unverified Payload UUID | 6.5v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57951 | Mythic Broken Permission Filter in payload_build_step Table | 7.1CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57950 | ruoyi-vue-pro Incorrect Permission Namespace in ErpSaleOrderController | 8.6CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-57949 | ruoyi-vue-pro missing authorization in CRM Follow-up Record GET endpoint | 7.1CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-57948 | Pinpoint Insecure Session Cookie attributes in pinpointJwt | 7.6CNA v4.0 | 0.2% | 2026-06-29 | |
| CVE-2026-57947 | Pinpoint server-side request forgery via Alarm Webhook Registration | 6.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57946 | Invidious Private Playlist Disclosure via Unauthenticated RSS Feed endpoint | 6.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57945 | PhotoPrism user profile endpoint insecure direct object reference | 5.3CNA v4.0 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57943 | LibrePhotos insecure direct object reference in SetPhotosShared endpoint | 6.0CNA v4.0 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57942 | LibreTranslate IP spoofing via X-Forwarded-For header | 6.9CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-57919 | Matrix42 Empirum PBackupVSS named pipe privilege escalation | 7.8CNA v3.1 | 0.2% | 2026-06-29 | |
| CVE-2026-57676 | Simple User Avatar WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57498 | Coolify Livewire deployment endpoints insecure direct object reference | 9.6CNA v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57346 | Embed Privacy WordPress plugin arbitrary file deletion | 7.1CNA v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-57341 | Colissimo Officiel: Méthodes de livraison pour WooCommerce insecure direct object reference | 6.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57340 | Japanized For WooCommerce WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57339 | Business Directory WordPress plugin broken access control | 6.6CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57338 | ARForms WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57337 | Landing Page Builder WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57336 | Jobify WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57335 | Ads by WPQuads WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57334 | WP User Frontend WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57333 | Link Whisper Free WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57332 | Wallet System for WooCommerce WordPress plugin broken access control | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57331 | Paid Videochat Turnkey Site WordPress plugin arbitrary file deletion | 9.9CNA v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-57330 | MasterStudy LMS WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-57329 | WooCommerce Designer Pro WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-57328 | Business Directory WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-57327 | MainWP WordPress plugin broken access control | 6.3CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57326 | Business Directory WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-57320 | BEAR WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-56783 | Parseable Cleartext credential exposure in Notification Target API | 7.1CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-56782 | Gorse Unauthenticated Database Dump and Restore via /API/dump and /API/restore endpoints | 9.3CNA v4.0 | 3.6% | 2026-06-29 | NucleiExploit codeFix |
| CVE-2026-56781 | Teable Unauthenticated Hidden Field Disclosure via Projection Parameter Override | 6.9CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-56780 | Modoboa insecure direct object reference in Account Password Change API | 7.7CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-56457 | HCL DevOps Deploy / HCL Launch is susceptible to an exposure of sensitive information | 4.3CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-56290 | Joomlack Page Builder improper access control | 9.8NVD v3.1 | 30.9% | 2026-06-29 | KEVNucleiExploit codeFix |
| CVE-2026-56285 | Nitter server-side request forgery in /video Media Proxy endpoint | 7.7CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-56124 | phpUploader Unauthenticated Database Exposure via index model | 8.7CNA v4.0 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-56018 | GTERMARS JavaScript::Minifier::XS minify function memory leak | 7.5CISA ADP v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-56017 | GTERMARS JavaScript::Minifier::XS token disambiguator null pointer dereference | 7.5CISA ADP v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-55957 | Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind | 7.3CISA ADP v3.1 | 2.9% | 2026-06-29 | Exploit codeFix |
| CVE-2026-55956 | Apache Tomcat: Security constraints for default servlet ignored method | 6.5CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-55955 | Apache Tomcat: EncryptInterceptor not protected against replay attacks | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-55844 | Home Assistant iOS companion app information disclosure | 7.5CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-55607 | anthropics claude-code Claude Code: Sandbox escape | 7.7CNA v4.0 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-55276 | Apache Tomcat: Logged effective web.xml is incomplete | 9.1CISA ADP v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-54889 | Unsanitized URL schemes in MDEx Quill Delta output allow javascript: Injection (XSS) | 5.1CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-54888 | Uncontrolled recursion over deeply nested Markdown crashes the BEAM in mdex | 6.9CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-54371 | attr Symlink Traversal privilege escalation via getfattr/setfattr | 8.4CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-54370 | acl TOCTOU Symlink Traversal via getfacl/setfacl/chacl | 7.2CNA v4.0 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-54369 | acl Symlink Traversal privilege escalation via libacl functions | 8.4CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-53434 | Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector | 9.1CISA ADP v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-53429 | Unbounded native memory leak in mdex escaped-tag rendering enables unauthenticated denial of service | 6.9CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-53428 | Unbounded memory allocation in highlight_lines range expansion in mdex | 6.9CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-53427 | Cross-site scripting in MDEx via unescaped highlight_lines_class code-fence attribute | 2.3CNA v4.0 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-53426 | Atom-table exhaustion denial of service via JSON parse_document in MDEx | 8.2CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-53404 | Apache Tomcat: Bad ornext processing in RewriteValve | 7.3CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-53325 | Linux kernel AMD64 AGP driver null pointer dereference | 5.5NVD v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-51221 | EIPStackGroup OpENer attribute list handling buffer overflow | 7.5CISA ADP v3.1 | 0.5% | 2026-06-29 | |
| CVE-2026-51219 | A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload. | 7.5CISA ADP v3.1 | 0.7% | 2026-06-29 | |
| CVE-2026-51218 | TS7Worker::PerformFunctionWrite function A heap-based buffer overflow | 7.5CISA ADP v3.1 | 0.6% | 2026-06-29 | |
| CVE-2026-50229 | Apache Tomcat: XSS in number guess example | 6.1CISA ADP v3.1 | 4.1% | 2026-06-29 | NucleiExploit codeFix |
| CVE-2026-49049 | Joomla extension joomshaper.com unauthenticated access to Helix3 template ajax handler | 7.5CISA ADP v3.1 | 1.0% | 2026-06-29 | Reported exploitedNucleiExploit code |
| CVE-2026-46406 | Anthropic Claude Code /copy command temporary file handling information disclosure | 4.4CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-43746 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-43745 | Apple Safari out-of-bounds write | 6.5CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-43743 | Apple macOS race condition | 4.7CISA ADP v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-43742 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43740 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43735 | Apple Safari cross-site request forgery | 8.1CISA ADP v3.1 | 0.2% | 2026-06-29 | Exploit codeFix |
| CVE-2026-43734 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43732 | Apple Safari path traversal | 6.5CISA ADP v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-43731 | Apple Safari use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43727 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43726 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43725 | Apple Safari improper input validation | 7.1CISA ADP v3.1 | 0.9% | 2026-06-29 | Fix |
| CVE-2026-43724 | Apple macOS denial of service | 7.8CISA ADP v3.1 | 0.2% | 2026-06-29 | Exploit codeFix |
| CVE-2026-43722 | Apple macOS information disclosure | 5.5CISA ADP v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-43721 | Apple Safari incorrect permission assignment | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43720 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-43718 | Apple Safari stack-based buffer overflow | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43717 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43716 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-43715 | Apple Safari use-after-free | 8.8CISA ADP v3.1 | 1.3% | 2026-06-29 | Fix |
| CVE-2026-43713 | Apple Safari insecure permissions | 6.5CISA ADP v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-43712 | Apple Safari out-of-bounds read | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43709 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43708 | Apple Safari improper input validation | 4.3CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43707 | Apple Safari memory corruption | 6.5CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-43706 | Apple macOS double free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43705 | Apple Safari type confusion | 8.8CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43704 | Apple Safari use-after-free | 5.3CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43703 | Apple macOS out-of-bounds read | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43701 | Apple Safari improper access control | 7.1CISA ADP v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-43700 | Apple Safari origin validation error | 6.5CISA ADP v3.1 | 0.2% | 2026-06-29 | Exploit codeFix |
| CVE-2026-43699 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-43676 | Apple Safari out-of-bounds read | 6.5CISA ADP v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-43663 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-41992 | Global buffer overflow in GNU gzip | 7.5v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-41991 | Predictable Temporary file in GNU gzip | 4.7v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-41896 | Coolify: Unauthenticated Deployment Trigger via Webhook HMAC Bypass with Null Secret | 7.5CNA v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-41052 | Rancher privilege escalation from Project Owner to host | 9.4CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-40524 | FrontAccounting SQL injection via get_gl_transactions | 7.2CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-40523 | FrontAccounting SQL injection via reporting/rep710.php | 7.2CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-40522 | FrontAccounting SQL injection via rep601.php | 7.1CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-40521 | FrontAccounting path traversal RCE via attachment upload | 8.7CNA v4.0 | 1.0% | 2026-06-29 | Fix |
| CVE-2026-39872 | Apple Safari use-after-free | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-39868 | Apple macOS denial of service | 9.1CISA ADP v3.1 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-37637 | Alexantr filemanager filemanager.php code injection | 9.1CISA ADP v3.1 | 0.7% | 2026-06-29 | Exploit code |
| CVE-2026-36848 | Gigamon Gigavue-os path traversal | 7.5CISA ADP v3.1 | 0.9% | 2026-06-29 | Exploit code |
| CVE-2026-34597 | Coolify: Authenticated host RCE | 8.8CNA v3.1 | 1.0% | 2026-06-29 | Fix |
| CVE-2026-34594 | Coolify: Authenticated remote code execution via command injection in Destination Network Management | 8.8CNA v3.1 | 1.9% | 2026-06-29 | Fix |
| CVE-2026-34592 | Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups exposes SSH Keys and Infrastructure | 7.7CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-31016 | Squidex.io Squidex CMS v.7.21.0 and cross-site request forgery | 6.5CISA ADP v3.1 | 0.2% | 2026-06-29 | |
| CVE-2026-28979 | Apple Safari out-of-bounds read | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-25707 | Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp | 8.8CNA v3.1 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-22078 | O+ Connect's lack of authentication for IPC channels led to a local privilege escalation | 7.3CNA v3.1 | 0.1% | 2026-06-29 | |
| CVE-2026-13763 | HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF | 7.9CNA v4.0 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-13762 | HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF | 7.9CNA v4.0 | 0.6% | 2026-06-29 | Fix |
| CVE-2026-13758 | CryptX AEAD tag verification timing side channel | 3.7CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13757 | P11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing | 6.2CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13752 | Snowflake CLI SQL injection | 8.0v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-13751 | Snowflake CLI server-side request forgery via arbitrary URL Fetch in !source/!load | 9.6v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13750 | Snowflake CLI sensitive credential exposure through Debug Logging | 5.5CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13749 | Snowflake CLI arbitrary code execution via Snowpark Annotation Processor template injection | 8.8CNA v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-13748 | Snowflake CLI arbitrary Local File Read and Exfiltration through Improper File Path Restriction | 6.3CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13746 | Snowflake CLI SQL injection through improper neutralization of Local CLI parameters | 5.4v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13744 | Snowflake CLI SQL injection through improper neutralization of User-Controlled Input | 8.8v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-13742 | Honeywell IQ MultiAccess lack of signature verification before execution of downloaded content | 5.9CNA v4.0 | 0.1% | 2026-06-29 | |
| CVE-2026-13676 | fast-uri vulnerable to host confusion via failed IDN canonicalization | 7.5CNA v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-13601 | GNOME Yelp yelp-xsl content security policy information disclosure | 6.5NVD v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13595 | Util-linux: Util-linux: Heap use-after-free in libblkid nested partition probing | 5.3NVD v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13593 | CSS::Minifier::XS versions for Perl have a memory leak when the entire document is minified away | 6.5CISA ADP v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-13592 | liftoff-sr CIPster EtherNet IP message append out-of-bounds write | 6.9CNA v4.0 | 0.6% | 2026-06-29 | |
| CVE-2026-13591 | DeepMyst Mysti Contact Tracking ChannelBridge.ts _isTrackedConversation improper authorization | 2.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13590 | seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow | 6.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13589 | seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow | 6.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13588 | seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow | 6.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13587 | seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow | 6.3CNA v4.0 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13583 | Edimax EW-7478APC POST request formUSBFolder buffer overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13582 | Edimax EW-7478APC POST request formUSBAccount buffer overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13581 | Edimax EW-7478APC POST request formStaDrvSetup os command injection | 5.3CNA v4.0 | 2.0% | 2026-06-29 | |
| CVE-2026-13580 | Edimax EW-7478APC POST request formQoS buffer overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13579 | itsourcecode Hospital Management System patientchangepassword.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13578 | itsourcecode Hospital Management System patientdetail.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13574 | llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow | 4.8CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13573 | llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow | 4.8CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13572 | itsourcecode Hospital Management System insertbillingrecord.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13571 | SourceCodester Simple Food Ordering System cart.php logic error | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13570 | SourceCodester Inventory Management System user registration endpoint cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13569 | weng-xianhu EyouCMS API index.php SQL injection | 5.1CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13568 | SourceCodester Inventory Management System user registration endpoint vulnerability | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13567 | code-projects Online Music Site POST Request Feedback.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13566 | SourceCodester Class and Exam Timetabling System preview3.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13565 | SourceCodester Class and Exam Timetabling System edit_class1.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13564 | Edimax EW-7478APC POST request formPPPoESetup stack-based overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13563 | Edimax EW-7478APC POST request formL2TPSetup stack-based overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13562 | Edimax EW-7478APC POST request formiNICSiteSurvey buffer overflow | 8.7CNA v4.0 | 0.8% | 2026-06-29 | |
| CVE-2026-13561 | Edimax EW-7478APC POST request formiNICbasic os command injection | 5.3CNA v4.0 | 2.0% | 2026-06-29 | |
| CVE-2026-13560 | Edimax EW-7478APC POST request formAccept os command injection | 5.3CNA v4.0 | 2.0% | 2026-06-29 | |
| CVE-2026-13559 | code-projects Real State Services single-list_sale.php add SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13558 | CodeAstro Complaint Management System Report addreport cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13557 | itsourcecode Online Hotel Management System POST request controller.php add cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13556 | itsourcecode Online Hotel Management System POST request controller.php edit cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13555 | itsourcecode Online Hotel Management System controller.php add SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13554 | itsourcecode Online Hotel Management System POST request controller.php add cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13553 | itsourcecode Online Hotel Management System controller.php add unrestricted upload | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13552 | itsourcecode Online Hotel Management System controller.php edit SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13551 | itsourcecode Baptism Information Management System editBaptism.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13550 | itsourcecode Baptism Information Management System delbaptism.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13549 | CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13548 | itsourcecode Hospital Management System doctortimings.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13547 | Hanwang e-Face General Management Platform upload.do unrestricted upload | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13546 | Feehi CMS REST API endpoint articles missing authentication | 6.9CNA v4.0 | 0.7% | 2026-06-29 | |
| CVE-2026-13545 | D-Link DCS-935L POST parameter setconf.cgi sub_400E40 os command injection | 8.7CNA v4.0 | 5.5% | 2026-06-29 | |
| CVE-2026-13544 | Feehi CMS API users access control | 5.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13543 | Documenso Google OAuth Login handle-oauth-callback-url.ts improper authentication | 6.3CNA v4.0 | 0.6% | 2026-06-29 | |
| CVE-2026-13542 | itsourcecode Hospital Management System doctorprofile.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13541 | itsourcecode Hospital Management System doctorchangepassword.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13540 | GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery | 5.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13539 | Wavlink WL-NU516U1-A POST parameter wireless.cgi sub_407504 stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | Fix |
| CVE-2026-13538 | Wavlink WL-NU516U1-A POST parameter wireless.cgi sub_401D68 command injection | 5.3CNA v4.0 | 2.2% | 2026-06-29 | Fix |
| CVE-2026-13537 | CodeAstro Human Resource Management System cross-site request forgery | 5.3CNA v4.0 | 0.2% | 2026-06-29 | |
| CVE-2026-13536 | GotoHTTP reg.12x cross-site scripting | 5.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13535 | CodeAstro Human Resource Management System employee view endpoint SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13534 | CherryHQ cherry-studio CherryIN Preload API MemoryService.ts sha256 authorization | 2.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13533 | Agentejo Cockpit CMS htaccess config.yaml YAMLLoad file access | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13532 | itsourcecode Hospital Management System departmentDoctor.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13531 | itsourcecode Hospital Management System department.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13530 | itsourcecode Hospital Management System Appointment appointmentdetail.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13529 | YzmCMS index.php SQL injection | 6.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13528 | YunaiV ruoyi-vue-pro path traversal | 6.9CNA v4.0 | 0.6% | 2026-06-29 | |
| CVE-2026-13527 | SourceCodester Class and Exam Timetabling System preview4.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13526 | SourceCodester Class and Exam Timetabling System edit_class.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13525 | CodeAstro Human Resource Management System Update Earn Leave endpoint SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13524 | CherryHQ cherry-studio MCP OAuth Local Callback Server callback.ts improper authorization | 6.3CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13523 | GPAC ISOBMFF base_encoding.c data amplification | 4.8CNA v4.0 | 0.2% | 2026-06-29 | |
| CVE-2026-13522 | Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds | 5.3CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-13521 | SourceCodester Class and Exam Timetabling System preview5.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-29 | |
| CVE-2026-13520 | itsourcecode Hospital Management System Appointment appointmentapproval.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-13519 | Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | |
| CVE-2026-13518 | Tenda JD12L addressNat fromAddressNat stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | |
| CVE-2026-13517 | Tenda JD12L WifiBasicSet formWifiBasicSet stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | |
| CVE-2026-13516 | Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | |
| CVE-2026-13515 | Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow | 8.7CNA v4.0 | 0.9% | 2026-06-29 | |
| CVE-2026-13514 | Chess Play and Learn App com.Chess AndroidManifest.xml backup | 2.4CNA v4.0 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-13513 | MyScale MyScaleDB SegmentId.h getCacheKey data authenticity | 2.3CNA v4.0 | 0.2% | 2026-06-29 | |
| CVE-2026-13437 | Devolutions PowerShell Universal AI agent job API information disclosure | 6.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-13165 | Remote code execution in SzafirHost | 8.6CNA v4.0 | 0.7% | 2026-06-29 | Fix |
| CVE-2026-12912 | Red Hat Enterprise Linux 10 libtiff: Libtiff: Heap-based buffer overflow | 7.3CNA v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-12856 | Red Hat OpenShift Dev Spaces argument injection | 8.8CNA v3.1 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-12616 | Eclipse CSI log injection | 6.9CNA v4.0 | 0.5% | 2026-06-29 | |
| CVE-2026-11979 | Stack-based buffer overflow in libxml2 | 7.8v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-11720 | Path traversal in googleapis/mcp-toolbox HTTP Tool URL Builder | 9.3CNA v4.0 | 0.5% | 2026-06-29 | Fix |
| CVE-2026-10648 | Zephyr MCUmgr serial transport null pointer dereference | 6.2CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-10647 | zephyrproject zephyr deadlock denial of service in USB CDC-NCM device class on TX enqueue failure | 5.3CNA v3.1 | 0.2% | 2026-06-29 | Fix |
| CVE-2026-10083 | APCu Manager WordPress plugin unauthenticated stored XSS via Cache Key Pollution | 7.5CISA ADP v3.1 | 0.4% | 2026-06-29 | Fix |
| CVE-2026-9676 | f4 Post Tree WordPress plugin Subscriber+ arbitrary post Parent/Menu order modification | 4.3CISA ADP v3.1 | 0.1% | 2026-06-29 | Fix |
| CVE-2026-9267 | Eclipse tinydtls out-of-bounds read | 6.9CNA v4.0 | 0.3% | 2026-06-29 | |
| CVE-2026-9105 | Authenticated stack-based buffer overflow in TP-Link TL-WR841N Web interface | 6.8CNA v4.0 | 1.1% | 2026-06-29 | Emerging ThreatsFix |
| CVE-2026-8023 | Zephyr HTTP server static-filesystem handler path traversal | 7.5CNA v3.1 | 0.9% | 2026-06-29 | Exploit codeFix |
| CVE-2026-7656 | Zephyr IPv6 neighbor discovery spoofing | 8.1CNA v3.1 | 0.3% | 2026-06-29 | Fix |
| CVE-2026-58058 | Nmap integer underflow in IPv6 extension Header Parsing | 6.9CNA v4.0 | 1.5% | 2026-06-28 | Exploit codeFix |
| CVE-2026-58057 | Flowise Custom MCP Environment Variable Denylist Bypass via Case Sensitivity | 2.3CNA v4.0 | 1.6% | 2026-06-28 | Exploit codeFix |
| CVE-2026-58056 | RustDesk FileTransfer Session Authorization Scope Bypass | 7.2CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-58055 | nghttp2 nghttpx HTTP Request/Response Smuggling via Upgrade request with Content-Length | 6.3CNA v4.0 | 0.3% | 2026-06-28 | Fix |
| CVE-2026-58053 | Gitea act_runner Container Hardening Bypass via Workflow Container options | 9.4CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-58052 | 7-Zip Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision | 4.8CNA v4.0 | 0.2% | 2026-06-28 | Fix |
| CVE-2026-58051 | libssh2 Free of uninitialized pointer in publickey List Cleanup | 8.3CNA v4.0 | 0.3% | 2026-06-28 | Fix |
| CVE-2026-58050 | libssh2 integer overflow in publickey subsystem Attribute Allocation | 7.5v3.1 | 0.4% | 2026-06-28 | Fix |
| CVE-2026-58049 | FFmpeg out-of-bounds write in RASC Decoder decode_dlta | 8.8CNA v4.0 | 0.5% | 2026-06-28 | Fix |
| CVE-2026-49048 | Joomla Extension Joomcoder.com unauthenticated SQL injection in JoomCCK extension for Joomla | 9.8CISA ADP v3.1 | 0.6% | 2026-06-28 | Exploit code |
| CVE-2026-13512 | Databend Tenant client_session_manager.rs state_key authorization | 5.3CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13511 | VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization | 2.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13510 | SimStudioAI sim Password Protection deployment.ts weak hash | 6.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13509 | RAGapp Knowledge file files.py FileHandler.remove_file path traversal | 5.3CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13508 | khoj-ai khoj Conversation Sharing api_chat.py authorization | 5.1CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13507 | Volcengine OpenViking insufficient verification of data authenticity | 2.3CNA v4.0 | 0.2% | 2026-06-28 | |
| CVE-2026-13504 | code-projects Project Management System Mail Compose mail.php cross-site scripting | 5.1CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13503 | antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal | 6.9CNA v4.0 | 0.8% | 2026-06-28 | |
| CVE-2026-13502 | antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou | 2.0CNA v4.0 | 0.1% | 2026-06-28 | |
| CVE-2026-13501 | antlr ANTLR4 gofmt GoTarget.java GoTarget command injection | 4.8CNA v4.0 | 1.2% | 2026-06-28 | |
| CVE-2026-13500 | antlr ANTLR4 Grammar action Block OutputFile.java code injection | 6.9CNA v4.0 | 0.5% | 2026-06-28 | |
| CVE-2026-13499 | yashpokharna2555 restaurent-management-system Registration login_register.php cross-site scripting | 5.3CNA v4.0 | 0.5% | 2026-06-28 | |
| CVE-2026-13498 | yashpokharna2555 restaurent-management-system POST parameter forgotpassword.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13497 | itsourcecode Hospital Management System appointment.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13496 | itsourcecode Hospital Management System ajaxmedicine.php SQL injection | 5.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13495 | itsourcecode Hospital Management System adminprofile.php SQL injection | 5.1CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13493 | AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resource injection | 2.3CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13491 | 78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service | 6.3CNA v4.0 | 0.6% | 2026-06-28 | |
| CVE-2026-13490 | glpi-project glpi Document document.send.php canViewFile authorization | 6.3CNA v4.0 | 0.5% | 2026-06-28 | |
| CVE-2026-13489 | 78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization | 2.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-13488 | SourceCodester Class and Exam Timetabling System preview7.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13487 | SourceCodester Class and Exam Timetabling System archive.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13486 | SourceCodester Class and Exam Timetabling System preview6.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13485 | SourceCodester Class and Exam Timetabling System preview.php SQL injection | 6.9CNA v4.0 | 0.4% | 2026-06-28 | |
| CVE-2026-13484 | MLflow Experiment-scoped Label Schema CRUD API authorization | 8.8v3.1 | 0.5% | 2026-06-28 | Fix |
| CVE-2026-13483 | arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity | 2.3CNA v4.0 | 0.1% | 2026-06-28 | |
| CVE-2026-13482 | skypilot-org skypilot User ID server.py username.encode weak hash | 6.3CNA v4.0 | 0.3% | 2026-06-28 | |
| CVE-2026-10646 | Zephyr DNS getaddrinfo resolver use-after-free | 7.4CNA v3.1 | 0.4% | 2026-06-28 | Fix |
| CVE-2026-10644 | zephyrproject zephyr out-of-bounds write in Microchip SERCOM-G1 async UART RX with 1-byte buffer | 4.2CNA v3.1 | 0.2% | 2026-06-28 | Fix |
| CVE-2026-10593 | Zephyr Bluetooth LE Audio BAP unicast client null pointer dereference | 6.5CNA v3.1 | 0.3% | 2026-06-28 | Fix |
| CVE-2026-8095 | Frontend File Manager WordPress plugin authenticated (Subscriber+) arbitrary file deletion | 8.1CNA v3.1 | 0.6% | 2026-06-28 | |
| CVE-2026-49417 | FreeBSD multiple vulnerabilities in the sound(4) mmap path | 7.0CISA ADP v3.1 | 0.1% | 2026-06-27 | Exploit codeFix |
| CVE-2026-49416 | FreeBSD integer overflow in vt(4) CONS_HISTORY ioctl | 7.8CISA ADP v3.1 | 0.2% | 2026-06-27 | Fix |
| CVE-2026-49414 | FreeBSD ASLR bypass for setuid executables via procctl(2) | 7.8CISA ADP v3.1 | 0.2% | 2026-06-27 | Fix |
| CVE-2026-49413 | FreeBSD flaw in Linuxulator execution of setugid binaries | 7.1CISA ADP v3.1 | 0.1% | 2026-06-27 | Exploit codeFix |
| CVE-2026-49412 | FreeBSD use-after-free bug in the IPV6_MSFILTER socket option handler | 7.8CISA ADP v3.1 | 0.2% | 2026-06-27 | Fix |
| CVE-2026-45259 | FreeBSD sigqueue(2) missing capability mode restriction | 6.5CISA ADP v3.1 | 0.1% | 2026-06-27 | Fix |
| CVE-2026-45258 | FreeBSD multiple vulnerabilities in the sound(4) mmap path | 7.8CISA ADP v3.1 | 0.2% | 2026-06-27 | Exploit codeFix |
| CVE-2026-13422 | HD Quiz - cross-site request forgery via multiple AJAX Handlers | 4.3CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2026-13335 | CodePeople Post Map for Google Maps WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-13333 | Groundhogg WordPress plugin authenticated (Sales Rep+) SQL injection via query[select] parameter | 6.5CNA v3.1 | 0.6% | 2026-06-27 | Fix |
| CVE-2026-13331 | Groundhogg WordPress plugin authenticated (Marketer+) SQL injection via search parameter | 6.5CNA v3.1 | 0.5% | 2026-06-27 | Fix |
| CVE-2026-13295 | Page Builder by SiteOrigin WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-13245 | MaxButtons WordPress plugin reflected cross-site scripting via view parameter | 6.1CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-12471 | Spexo WordPress theme missing authorization to authenticated (Subscriber+) limited plugin activation | 4.3CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2026-12432 | WP Full Stripe Free WordPress plugin missing authorization | 5.3CNA v3.1 | 0.6% | 2026-06-27 | Exploit codeFix |
| CVE-2026-12415 | Invoice Generator WordPress plugin unauthenticated privilege escalation | 9.8CNA v3.1 | 0.8% | 2026-06-27 | Exploit code |
| CVE-2026-12404 | NEX-Forms WordPress plugin missing authorization unauthenticated sensitive information disclosure | 5.3CNA v3.1 | 0.5% | 2026-06-27 | Fix |
| CVE-2026-12399 | Gutenverse WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-11987 | Dokan Multivendor Marketplace product listing endpoint insecure direct object reference | 4.3CNA v3.1 | 0.5% | 2026-06-27 | Fix |
| CVE-2026-11783 | dokaninc Dokan product SKU field stored cross-site scripting | 6.4CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-11773 | Masteriyo LMS WordPress plugin authorization bypass | 4.3CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2026-11597 | Surbma Infusionsoft Shortcode WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2026-11364 | Product Specifications for WooCommerce WordPress plugin unauthorized access | 4.3CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-11356 | Ivory Search WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-10820 | ProfilePress subscription cancellation insecure direct object reference | 8.1CISA ADP v3.1 | 0.4% | 2026-06-27 | Fix |
| CVE-2026-10643 | Out-of-bounds heap write in Zephyr `recvmsg` ancillary-data path | 8.7CNA v3.1 | 0.2% | 2026-06-27 | Fix |
| CVE-2026-9677 | Shariff for WordPress plugin Admin+ stored cross-site scripting | 4.8CISA ADP v3.1 | 0.2% | 2026-06-27 | |
| CVE-2026-9242 | RegistrationMagic WordPress plugin authentication bypass | 5.3CNA v3.1 | 0.3% | 2026-06-27 | Fix |
| CVE-2026-9233 | Quiz and Survey Master WordPress plugin missing authorization authenticated arbitrary modification | 4.3CNA v3.1 | 0.5% | 2026-06-27 | Fix |
| CVE-2026-3462 | Frisbii Pay WordPress plugin missing authorization authenticated Payment Token modification | 6.5CNA v3.1 | 0.4% | 2026-06-27 | Exploit codeFix |
| CVE-2026-57940 | danpros HTMLy server-side request forgery | 2.1CNA v4.0 | 0.4% | 2026-06-26 | |
| CVE-2026-57926 | JetBrains YouTrack prototype pollution | 2.6CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57925 | JetBrains YouTrack missing authorization | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57924 | JetBrains YouTrack incorrect default permissions | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57923 | JetBrains YouTrack missing authorization | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57922 | JetBrains YouTrack missing authorization | 3.1CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57921 | JetBrains YouTrack missing authorization | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57920 | Peplink InControl 2 REST API access control vulnerability | 7.7CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57918 | sahlberg libnfs integer underflow | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57915 | Apache Kerby: Kerberos Pre-authentication bypass | 7.3CISA ADP v3.1 | 0.5% | 2026-06-26 | Fix |
| CVE-2026-57914 | Apache Kerby: StackOverflow on parsing deeply nested ASN1 structures | 6.5CISA ADP v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57913 | Johnson & Johnson Audit Tracking Management System client-side enforcement of server-side security | 7.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57912 | Johnson & Johnson Campus Recruiting client-side enforcement of server-side security | 7.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57881 | GeoVision GV-LPCLPC2011/2211 vlsvr stack-based buffer overflow | 9.8CNA v3.1 | 0.6% | 2026-06-26 | |
| CVE-2026-57880 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow | 9.8CNA v3.1 | 0.9% | 2026-06-26 | |
| CVE-2026-57879 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow | 9.8CNA v3.1 | 0.9% | 2026-06-26 | |
| CVE-2026-57878 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow vulnerability (thttpd) | 9.8CNA v3.1 | 1.0% | 2026-06-26 | |
| CVE-2026-57877 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized format string vulnerability (vlsvr) | 8.6CNA v3.1 | 0.4% | 2026-06-26 | |
| CVE-2026-57876 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized out-of-bounds writing vulnerability | 7.5CNA v3.1 | 0.5% | 2026-06-26 | |
| CVE-2026-57875 | GeoVision GV-LPCLPC2011/2211 null pointer dereference | 7.5CNA v3.1 | 0.7% | 2026-06-26 | |
| CVE-2026-57874 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized buffer overflow vulnerability | 7.5CNA v3.1 | 0.5% | 2026-06-26 | |
| CVE-2026-57873 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized null pointer dereference vulnerability | 7.5CNA v3.1 | 0.3% | 2026-06-26 | |
| CVE-2026-57872 | GeoVision GV-LPCLPC2011/2211 GV-LPC2011/LPC2211 unauthorized directory traversal vulnerability | 7.5CNA v3.1 | 1.5% | 2026-06-26 | |
| CVE-2026-57667 | Groundhogg WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57665 | GravityView WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57664 | Bopo WooCommerce Product Bundle Builder WordPress plugin sensitive data exposure | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57663 | Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57662 | Contest Gallery WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57661 | WPComplete WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57660 | Booking and Rental Manager WordPress plugin broken access control | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57659 | Paid Memberships Pro - Add Member From Admin WordPress plugin cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57658 | TemplateSpare WordPress plugin arbitrary file upload | 9.1CNA v3.1 | 0.5% | 2026-06-26 | Fix |
| CVE-2026-57657 | Gmail SMTP WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2026-06-26 | Fix |
| CVE-2026-57656 | Hester Core WordPress plugin cross-site scripting (XSS) | 5.9CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57655 | Child theme Wizard WordPress plugin cross-site request forgery (CSRF) | 8.2CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57654 | Affiliates Manager WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57653 | WP Job Portal WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57652 | JS Help Desk WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57651 | Ghost Kit WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57650 | Magazine Blocks WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57649 | Shoppable Images Lite WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57648 | Nelio Content WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57647 | Panorama Viewer 360 Degree Image + Video Viewer WordPress plugin local file inclusion | 7.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57646 | Majestic Support WordPress plugin insecure direct object references (IDOR) | 5.4CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57645 | Newsletters WordPress plugin broken access control | 8.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57644 | Restaurant Menu by MotoPress WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57643 | WP Post Author WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57642 | Gallery WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57641 | Real Estate 7 WordPress theme cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57640 | MasterStudy LMS WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57638 | Fluent Booking WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57637 | Abandoned Cart Lite for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.1% | 2026-06-26 | Fix |
| CVE-2026-57636 | wpForo Forum WordPress plugin SQL injection | 8.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57635 | FunnelKit Payment Gateway for Stripe WooCommerce WordPress plugin cross-site request forgery (CSRF) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57634 | PPWP WordPress plugin insecure direct object references (IDOR) | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57633 | WCBoost Products Compare WordPress plugin sensitive data exposure | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57632 | Email Marketing for WooCommerce by Omnisend WordPress plugin broken access control | 5.4CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57631 | Popup box WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57630 | Blocksy Companion Pro WordPress plugin insecure direct object references (IDOR) | 5.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57629 | StatCounter WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57628 | WP All Import WordPress plugin SQL injection | 7.6CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57627 | Kirki WordPress plugin server side request forgery (SSRF) | 4.9CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57622 | WPCafe WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57620 | Exclusive Addons Elementor WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57618 | Neve PRO WordPress theme cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57617 | SeedProd Pro WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57527 | zaproxy zap-extensions ZAP ViewState Add-on insecure deserialization via JSFViewState.decode | 8.7CNA v4.0 | 0.7% | 2026-06-26 | Fix |
| CVE-2026-57518 | Pagekit CMS privilege escalation via UserApiController | 8.7CNA v4.0 | 0.7% | 2026-06-26 | |
| CVE-2026-57473 | Reolink Home Hub weak credentials | 5.8CNA v4.0 | 0.2% | 2026-06-26 | |
| CVE-2026-57431 | Featured Image WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57430 | SEOPress PRO WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57325 | NanoMag WordPress theme cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57324 | GIFT4U WordPress plugin broken access control | 6.5CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57323 | Flash and HTML5 Video WordPress plugin broken access control | 5.8CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57322 | weMail WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57321 | H5P WordPress plugin arbitrary file deletion | 7.1CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57319 | FOX WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57318 | Site Reviews WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57317 | Simply Schedule Appointments WordPress plugin cross-site scripting (XSS) | 7.1CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57316 | GetGenie WordPress plugin sensitive data exposure | 6.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-57315 | Blocksy Companion Pro WordPress plugin remote code execution (RCE) | 8.5CNA v3.1 | 0.6% | 2026-06-26 | Fix |
| CVE-2026-57314 | SureCart WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57313 | SureCart WordPress plugin cross-site scripting (XSS) | 6.5CNA v3.1 | 0.2% | 2026-06-26 | Fix |
| CVE-2026-57312 | Everest Forms WordPress plugin reflected cross-site scripting (XSS) | 7.1CNA v3.1 | 0.3% | 2026-06-26 | Fix |
| CVE-2026-57231 | Podman environment variable passthrough information disclosure | 7.5CNA v3.1 | 0.4% | 2026-06-26 | Fix |
| CVE-2026-56876 | extract-zip unvalidated symlink path traversal | 8.6CNA v4.0 | 0.5% | 2026-06-26 | Exploit codeFix |