CVE-2026-46771 - Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middlew

CVE-2026-46770 - Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middlew

CVE-2026-46769 - Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middlew

CVE-2026-46768 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: VMSVGA device

CVE-2026-46767 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose

CVE-2026-46766 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-46765 - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Compose

CVE-2026-35327 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35326 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35325 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35324 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35323 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35322 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35321 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35320 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35319 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35318 - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente

CVE-2026-35317 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35316 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35315 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35314 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Serve

CVE-2026-35313 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic

CVE-2026-35312 - Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtua

CVE-2026-35311 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support

CVE-2026-35310 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor

CVE-2026-35309 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th

CVE-2026-35308 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th

CVE-2026-35307 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor

CVE-2026-35306 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th

CVE-2026-35305 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th

CVE-2026-35304 - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor

CVE-2026-35303 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35302 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35301 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35300 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support

CVE-2026-35299 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35298 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support

CVE-2026-35296 - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente

CVE-2026-35295 - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente

CVE-2026-35294 - Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Main

CVE-2026-35293 - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCente

CVE-2026-35292 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35291 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35289 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D

CVE-2026-35288 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D

CVE-2026-35286 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35285 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35284 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35283 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35282 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35281 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35280 - Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (compon

CVE-2026-35279 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: P

CVE-2026-35278 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: P

CVE-2026-35276 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: A

CVE-2026-35275 - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Shared Folder

CVE-2026-35274 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D

CVE-2026-35272 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: D

CVE-2026-35271 - Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: W

CVE-2026-35270 - Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Conten

CVE-2026-35269 - Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServic

CVE-2026-35268 - Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). Suppor

CVE-2026-35267 - Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServic

CVE-2026-35265 - Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Su

CVE-2026-35263 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core). Support

CVE-2026-35262 - Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market P

CVE-2026-35261 - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentic

CVE-2026-35259 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-35258 - Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supp

CVE-2026-12348 - Address bar spoofing in Arc Search for Android allows a remote attacker to display a trusted domain

CVE-2026-48777 - FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable,

CVE-2026-47750 - stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wa

CVE-2026-47747 - stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wa

CVE-2026-46448 - In OpenStack Nova before 33.0.2, the server create API does not strip certain hint data. The resulti

CVE-2026-22313 - The device has a webserver that exposes a REST API authenticated with a token on the management netw

CVE-2026-22312 - The device has a webserver that exposes a REST API authenticated with a constant token. The unauthen

CVE-2026-12425 - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab

CVE-2026-12117 - Improper access control in the social login connection endpoint in Devolutions Server 2026.2.5 allo

CVE-2026-12105 - Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated user to a

CVE-2026-11890 - Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, 2026.1.21

CVE-2026-10303 - In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not s

CVE-2026-0165 - In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a mis

CVE-2026-0164 - In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to

CVE-2026-0162 - In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion.

CVE-2026-0161 - In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to an integer

CVE-2026-0160 - In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out o

CVE-2026-0158 - In Camera, there is a possible unauthorized way to access photos due to a missing permission check.

CVE-2026-0157 - In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds check. This co

CVE-2026-0156 - In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missi

CVE-2026-0155 - In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds check. Th

CVE-2026-0154 - In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory

CVE-2026-0153 - In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bound

CVE-2026-0152 - In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to

CVE-2026-0151 - In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integer overflo

CVE-2026-0150 - In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to

CVE-2026-0149 - In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overflow. This

CVE-2026-0148 - In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due

CVE-2026-0147 - In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds

CVE-2026-0146 - In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write

CVE-2026-0145 - In keymint, there is a possible Permission Bypass due to a logic error in the code. This could lead

CVE-2026-0144 - In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bo

CVE-2026-0143 - In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a u

CVE-2026-0142 - In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to improper input va

CVE-2026-0141 - In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bounds check.

CVE-2026-0140 - In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This

CVE-2026-0139 - In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to

CVE-2026-0138 - In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory c

CVE-2026-0137 - In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privile

CVE-2026-0136 - In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r

CVE-2026-0135 - In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to r

CVE-2026-0134 - In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a factory reset

CVE-2026-0133 - In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootc

CVE-2026-0132 - In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to

CVE-2026-0131 - In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. Thi

CVE-2026-0130 - In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer overflow.

CVE-2026-0129 - In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. This could le

CVE-2026-0128 - In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an integer overfl

CVE-2026-0127 - In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible out-of-bound

CVE-2026-0126 - In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead

CVE-2026-0125 - In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race condition. Th

CVE-2026-53866 - OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing

CVE-2026-53865 - OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that

CVE-2026-53864 - OpenClaw before 2026.5.26 contains an insufficient sanitization vulnerability in the host environmen

CVE-2026-53863 - OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers th

CVE-2026-53862 - OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pend

CVE-2026-53861 - OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature

CVE-2026-53860 - OpenClaw before 2026.5.7 contains a sender policy bypass vulnerability in BlueBubbles that allows pa

CVE-2026-53859 - OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass

CVE-2026-53858 - OpenClaw before 2026.5.2 contains an environment variable injection vulnerability where workspace .e

CVE-2026-53857 - OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutabl

CVE-2026-53856 - OpenClaw 2026.4.23 before 2026.4.24 contains an insecure file permissions vulnerability in config re

CVE-2026-53855 - OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticated operato

CVE-2026-53854 - OpenClaw before 2026.4.25 contains a privilege escalation vulnerability in internal and webchat comm

CVE-2026-53853 - OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that

CVE-2026-53852 - OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-pairing tha

CVE-2026-53851 - OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction event

CVE-2026-53850 - OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus com

CVE-2026-53849 - OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature i

CVE-2026-53848 - OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated ope

CVE-2026-53847 - OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write sc

CVE-2026-53846 - OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper that allows

CVE-2026-53845 - OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through th

CVE-2026-53844 - OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shared memory

CVE-2026-53843 - OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-s

CVE-2026-53842 - OpenClaw before 2026.5.2 contains an environment variable injection vulnerability allowing workspace

CVE-2026-53841 - OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML tha

CVE-2026-53840 - OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP se

CVE-2026-50656 - Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros

CVE-2026-4367 - A flaw was found in libXpm. A local user with low privileges could exploit an Out-of-Bounds Read vul

CVE-2026-48775 - LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (b

CVE-2026-47964 - DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability t

CVE-2026-47963 - DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that cou

CVE-2026-47934 - DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that cou

CVE-2026-47927 - DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerability that cou

CVE-2026-47749 - stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wa

CVE-2026-47748 - stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wa

CVE-2026-10748 - An authenticated user with the nx-licensing-create privilege can upload a specially crafted license

CVE-2024-39575 - update_disk_psu_baseline.sh requires password in plain text

CVE-2026-53776 - Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass

CVE-2026-44932 - Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked 0.6.79 co

CVE-2026-42089 - Yeoman Environment provides an API to discover, create, and run generators, and to configure where a

CVE-2026-39927 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-39926 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-24228 - NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization

CVE-2026-24155 - NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploi

CVE-2026-12412 - Rejected reason: loading template...

CVE-2026-12003 - To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), t

CVE-2026-10649 - A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vu

CVE-2025-71261 - An attacker with network-level access between the SUSE Virtualization and Rancher Manager in SUSE H

CVE-2024-38487 - api-gateway container running with root privilege would allow an attacker to escape the container an

CVE-2024-30476 - PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager. A remote

CVE-2024-24909 - Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vul

CVE-2024-22451 - Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element v

CVE-2026-9307 - A sensitive information disclosure security issue exists within the affected CompactLogix controller

CVE-2026-48780 - Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously craft

CVE-2026-47684 - Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and synci

CVE-2026-12398 - A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the lega

CVE-2026-11317 - A denial of service security issue exists in the affected product. The security issue stems from a f

CVE-2026-10831 - A denial-of-service vulnerability exists in NPort devices because of improper access control on the

CVE-2026-10640 - Zephyr's IPv6 Neighbor Discovery send paths (net_ipv6_send_na, net_ipv6_send_ns, net_ipv6_send_rs in

CVE-2026-10639 - In Zephyr's native IPv4 stack, icmpv4_handle_echo_request() in subsys/net/ip/icmpv4.c builds an echo

CVE-2026-10638 - subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has been handed

CVE-2026-10637 - subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after net_send_

CVE-2026-10636 - In Zephyr's IPv4 IGMP implementation, igmp_send() in subsys/net/ip/igmp.c read the network interface

CVE-2026-0647 - An improper authentication security issue exists within the 1794-AENTR adapter's embedded web server

CVE-2026-0646 - A denial-of-service security issue exists within the 1794-AENTR adapter due to improper memory handl

CVE-2025-14272 - A security issue was identified in Pavilion due to improper authorization enforcement in API endpoin

CVE-2025-13036 - An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continu

CVE-2025-11694 - A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequen

CVE-2024-22447 - Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulner

CVE-2026-9507 - A session fixation vulnerability has been identified in osTicket v1.18.2. This security flaw allows

CVE-2026-53900 - Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects

CVE-2026-53899 - Firefox for iOS used partial domain matching when attaching cookies to PDF requests, allowing a mali

CVE-2026-12330 - Incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in

CVE-2026-12329 - Memory safety bug fixed in Thunderbird ESR 140.12. This vulnerability was fixed in Firefox ESR 140.1

CVE-2026-12328 - Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefo

CVE-2026-12327 - Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbir

CVE-2026-12326 - Memory safety bugs present in Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of

CVE-2026-12325 - Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152,

CVE-2026-12324 - Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed i

CVE-2026-12323 - Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152 and Th

CVE-2026-12322 - Clickjacking issue in the Widget: Gtk component. This vulnerability was fixed in Firefox 152 and Thu

CVE-2026-12321 - JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox

CVE-2026-12320 - Information disclosure in the Password Manager component. This vulnerability was fixed in Firefox 15

CVE-2026-12319 - Denial-of-service in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 15

CVE-2026-12318 - Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Fir

CVE-2026-12317 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird

CVE-2026-12316 - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Th

CVE-2026-12315 - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firef

CVE-2026-12314 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12313 - Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerabi

CVE-2026-12312 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12311 - Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerabi

CVE-2026-12310 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12309 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12308 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12307 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12306 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12305 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12304 - Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Fire

CVE-2026-12303 - Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This

CVE-2026-12302 - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firef

CVE-2026-12301 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird

CVE-2026-12300 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152 and Thunderbird

CVE-2026-12299 - JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, F

CVE-2026-12298 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12297 - Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability

CVE-2026-12296 - Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefo

CVE-2026-12295 - Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 152, Firefo

CVE-2026-12294 - Sandbox escape in the DOM: Workers component. This vulnerability was fixed in Firefox 152, Firefox E

CVE-2026-12293 - Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Th

CVE-2026-12292 - Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 15

CVE-2026-12291 - Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 152, Firef

CVE-2026-12290 - Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140

CVE-2026-12289 - Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 1

CVE-2026-8484 - A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size

CVE-2026-40750 - Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store al

CVE-2026-12225 - syracom AG Secure Login (2FA) for Atlassian Jira, Confluence, and Bitbucket 3.4.0.x contains an auth

CVE-2026-10829 - A stack-based buffer overflow vulnerability has been found in the NPort W2150A-W4/W2250A-W4 Series v

CVE-2026-10828 - A format string vulnerability has been found in the "alias" parameter of the Serial Param configurat

CVE-2026-8442 - The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in versions u

CVE-2026-8176 - The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerab

CVE-2026-5416 - Due to the improper neutralization of special elements used in a name parameter a low privileged rem

CVE-2026-54198 - Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.

CVE-2026-54197 - Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.

CVE-2026-54191 - Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.

CVE-2026-54190 - Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.

CVE-2026-52715 - Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.

CVE-2026-52714 - Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.

CVE-2026-52712 - Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.