CVE-2026-103412 - Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apac

CVE-2026-103220 - The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bound

CVE-2026-101130 - The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bound

CVE-2026-101094 - The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incom

CVE-2026-89235 - The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parame

CVE-2026-87846 - The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, non

CVE-2026-86851 - The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-k

CVE-2026-85348 - The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updatin

CVE-2026-62042 - Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exp

CVE-2026-62041 - Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploit

CVE-2026-62040 - Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with F

CVE-2026-62039 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-62036 - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI Al

CVE-2026-39779 - Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorre

CVE-2026-107419 - Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translatio

CVE-2026-103329 - The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incom

CVE-2026-97791 - In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate

CVE-2026-97468 - Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens und

CVE-2026-86463 - Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query express

CVE-2026-79650 - Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after s

CVE-2026-78384 - CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A

CVE-2026-73179 - Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code

CVE-2026-71575 - The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a m

CVE-2026-108039 - By default, StaxUtils placed no limit on the total number of elements or the total number of charact

CVE-2026-107938 - In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not v

CVE-2026-107937 - In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the confi

CVE-2026-100227 - Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security m

CVE-2026-96809 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-96761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-96671 - Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-f

CVE-2026-96607 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-96553 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-96539 - Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allo

CVE-2026-96518 - Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting

CVE-2026-96461 - Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Config

CVE-2026-96337 - Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting

CVE-2026-96336 - Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Sp

CVE-2026-96334 - Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploit

CVE-2026-96333 - Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identit

CVE-2026-96332 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-96331 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-96330 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-96329 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-96328 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-96327 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-95610 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-95609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-95608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-95607 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-95599 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-95598 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-95597 - Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploit

CVE-2026-95596 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-95591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-95589 - Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce

CVE-2026-94668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94667 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94666 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zeal

CVE-2026-94665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94664 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-

CVE-2026-94663 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-94661 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94641 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94632 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94568 - Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-

CVE-2026-94503 - Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Uploa

CVE-2026-94415 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94170 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94167 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94166 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94159 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-94158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-93947 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i

CVE-2026-78341 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrec

CVE-2026-78340 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-78339 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrec

CVE-2026-78027 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Si

CVE-2026-78026 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authoriz

CVE-2026-78025 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing A

CVE-2026-78024 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Si

CVE-2026-78023 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authoriz

CVE-2026-71884 - In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check th

CVE-2026-62049 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-107935 - A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-ta

CVE-2026-84224 - The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetch

CVE-2026-84220 - The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being exec

CVE-2026-78022 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Faili

CVE-2026-78021 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generatio

CVE-2026-78020 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-78019 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusio

CVE-2026-78018 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initiali

CVE-2026-78017 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-78016 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-78015 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of L

CVE-2026-78013 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initiali

CVE-2026-76779 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper

CVE-2026-76769 - Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing A

CVE-2026-107655 - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service

CVE-2026-104635 - Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an u

CVE-2026-98384 - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of

CVE-2026-98383 - In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data

CVE-2026-98382 - In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only prog

CVE-2026-98381 - In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointe

CVE-2026-98380 - In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error poi

CVE-2026-98379 - In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: rejec

CVE-2026-98378 - In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in li

CVE-2026-98377 - In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to

CVE-2026-98376 - In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal f

CVE-2026-98375 - In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets w

CVE-2026-97075 - Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Co

CVE-2026-4264 - Reflected Cross-Site Scripting (XSS) on the BeeTienda e-commerce platform, specifically in the lates

CVE-2026-19575 - The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in ke

CVE-2026-19574 - The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare ro

CVE-2026-19571 - The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_i

CVE-2026-19570 - The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata

CVE-2026-19569 - dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynami

CVE-2026-106155 - In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vul

CVE-2026-106145 - In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in

CVE-2025-14123 - The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to

CVE-2026-79191 - Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote at

CVE-2026-79190 - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79189 - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to po

CVE-2026-79188 - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to po

CVE-2026-79187 - Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut

CVE-2026-79186 - Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79185 - Information leak in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass

CVE-2026-79184 - Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker w

CVE-2026-79183 - Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker le

CVE-2026-79182 - Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79181 - Observable discrepancy in Glic in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to

CVE-2026-79180 - UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a r

CVE-2026-79179 - Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to

CVE-2026-79178 - Incorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 1

CVE-2026-79177 - Incorrect authorization in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a rem

CVE-2026-79176 - UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79175 - Type confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remo

CVE-2026-79174 - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79173 - UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote atta

CVE-2026-79155 - Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who h

CVE-2026-79154 - Missing authorization in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79152 - Incorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed

CVE-2026-79151 - Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote a

CVE-2026-79150 - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79149 - Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute

CVE-2026-79148 - Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker lever

CVE-2026-79147 - Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had c

CVE-2026-79146 - Information leak in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local

CVE-2026-79144 - Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain

CVE-2026-79143 - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79142 - Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote atta

CVE-2026-79141 - Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79140 - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79139 - Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a r

CVE-2026-79138 - Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote

CVE-2026-79137 - Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79136 - Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote at

CVE-2026-79134 - Incorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote att

CVE-2026-79133 - Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker t

CVE-2026-79132 - Improper input validation in Input in Google Chrome on on Android prior to 152.0.7977.65 allowed a r

CVE-2026-79131 - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to ex

CVE-2026-79130 - Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut

CVE-2026-79129 - Use after free in Sessions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote at

CVE-2026-79128 - Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79127 - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to ex

CVE-2026-79126 - Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to 152.

CVE-2026-79125 - Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain s

CVE-2026-79124 - Information leak in Intents in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote a

CVE-2026-79123 - Improper input validation in NTP Footer in Google Chrome on on Windows prior to 152.0.7977.65 allowe

CVE-2026-79122 - Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obta

CVE-2026-79121 - Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote att

CVE-2026-79120 - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to

CVE-2026-79119 - Use after free in PDF in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute a

CVE-2026-79118 - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to

CVE-2026-79117 - Race condition in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a rem

CVE-2026-79116 - Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who h

CVE-2026-79112 - Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had

CVE-2026-79111 - Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79110 - Missing authorization in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker t

CVE-2026-79109 - Improper input validation in Printing in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79108 - UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.

CVE-2026-79107 - Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attack

CVE-2026-79106 - Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79105 - Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remo

CVE-2026-79104 - Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker wh

CVE-2026-79103 - Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote at

CVE-2026-79099 - Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker t

CVE-2026-79098 - UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote a

CVE-2026-79097 - Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute ar

CVE-2026-79095 - Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to ob

CVE-2026-79094 - Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypas

CVE-2026-79093 - Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker t

CVE-2026-79091 - Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79090 - Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote atta

CVE-2026-79089 - Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowe

CVE-2026-79088 - Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79087 - Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potent

CVE-2026-79086 - Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a

CVE-2026-79085 - Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker w

CVE-2026-79084 - Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.6

CVE-2026-79083 - Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed

CVE-2026-79082 - Incorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a r

CVE-2026-79078 - Use after free in FedCM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging

CVE-2026-79077 - Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79076 - Improper input validation in Sync in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79075 - Information leak in Geolocation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker le

CVE-2026-79074 - Information leak in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who ha

CVE-2026-79073 - Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacke

CVE-2026-79072 - Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote at

CVE-2026-79071 - Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had comp

CVE-2026-79070 - Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote att

CVE-2026-79069 - Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacke

CVE-2026-79068 - Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote at

CVE-2026-79067 - Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker w

CVE-2026-79066 - Improper input validation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote att

CVE-2026-79065 - Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attack

CVE-2026-79064 - Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacke

CVE-2026-79060 - Incorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote

CVE-2026-79059 - Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who ha

CVE-2026-79058 - Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79057 - Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attack

CVE-2026-79056 - Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to

CVE-2026-79055 - Information leak in Sharing in Google Chrome on on Android prior to 152.0.7977.65 allowed a local at

CVE-2026-79054 - Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who h

CVE-2026-79053 - Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacke

CVE-2026-79052 - Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute

CVE-2026-79051 - Incorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79050 - Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79049 - Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote

CVE-2026-79048 - Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote

CVE-2026-79047 - Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging

CVE-2026-79046 - Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote

CVE-2026-79045 - Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging so

CVE-2026-79044 - Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowe

CVE-2026-79043 - Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to po

CVE-2026-79042 - Missing authorization in Payments in Google Chrome on on Android prior to 152.0.7977.65 allowed a re

CVE-2026-79041 - Missing authorization in Browser in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote

CVE-2026-79040 - Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote

CVE-2026-79039 - Use after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79038 - Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79034 - Information leak in CORS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had c

CVE-2026-79033 - Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a r

CVE-2026-79032 - Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attack

CVE-2026-79031 - Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attac

CVE-2026-79030 - Observable discrepancy in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79028 - Observable discrepancy in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker

CVE-2026-79027 - Use after free in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execut

CVE-2026-79026 - Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker lever

CVE-2026-79025 - Improper input validation in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attack

CVE-2026-79024 - Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker