Security Box Score — June 30, 2026 — page 2
Edition of June 30, 2026, continued — page 2 of 2. Back to page 1
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-13893 | 6.5 | 21.3 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebUI in Google Chrome prior to… | |
| CVE-2026-58450 | 5.3 | 21.3 | invoiceninja | invoiceninja | CWE-601 | Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Par… |
| CVE-2026-27956 | 4.3 | 21.3 | coollabsio | coolify | CWE-639 | Coolify: Cross-team application domain enumeration via domains_by_server endp… |
| CVE-2026-13872 | 9.1 | 21.2 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome… | |
| CVE-2025-71381 | 6.9 | 21.2 | Hono | Hono | CWE-113 | Hono - Vary Header Injection in CORS Middleware |
| CVE-2026-13974 | 8.1 | 21.0 | Chrome | CWE-472 | Integer overflow in Safe Browsing in Google Chrome on Mac prior to 150.0.7871… | |
| CVE-2026-14122 | 8.1 | 20.9 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome… | |
| CVE-2026-13864 | 8.1 | 20.8 | Chrome | CWE-284 | Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.787… | |
| CVE-2026-13988 | 6.5 | 20.8 | Chrome | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-13996 | 6.5 | 20.8 | Chrome | CWE-451 | Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7… | |
| CVE-2026-14002 | 6.5 | 20.8 | Chrome | CWE-451 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7… | |
| CVE-2026-14014 | 6.5 | 20.8 | Chrome | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-13969 | 5.3 | 20.7 | Chrome | CWE-457 | Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 al… | |
| CVE-2026-13970 | 5.3 | 20.7 | Chrome | CWE-457 | Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a … | |
| CVE-2026-13971 | 5.3 | 20.7 | Chrome | CWE-457 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.47 allowed a r… | |
| CVE-2026-13818 | 6.5 | 20.6 | Chrome | CWE-284 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.787… | |
| CVE-2026-13953 | 6.5 | 20.6 | Chrome | CWE-284 | Inappropriate implementation in SplitView in Google Chrome prior to 150.0.787… | |
| CVE-2026-14156 | 6.5 | 20.6 | Chrome | CWE-862 | Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to… | |
| CVE-2026-14052 | 4.3 | 20.4 | Chrome | CWE-284 | Insufficient policy enforcement in FileSystem in Google Chrome prior to 150.0… | |
| CVE-2026-13828 | 6.5 | 20.3 | Chrome | CWE-284 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.78… | |
| CVE-2026-14035 | 6.5 | 20.3 | Chrome | CWE-284 | Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.… | |
| CVE-2026-14061 | 6.5 | 20.3 | Chrome | CWE-284 | Inappropriate implementation in Dawn in Google Chrome prior to 150.0.7871.47 … | |
| CVE-2025-36333 | 4.3 | 20.3 | IBM | watsonx.data intelligence | CWE-841 | Vulnerabilities found in Watson Data Intelligence |
| CVE-2026-13820 | 6.5 | 20.1 | Chrome | CWE-125 | Out of bounds read in Skia in Google Chrome on Mac prior to 150.0.7871.47 all… | |
| CVE-2026-13892 | 6.5 | 20.1 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13875 | 5.3 | 20.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in GPU in Google Chrome on Windows… | |
| CVE-2026-13877 | 5.3 | 20.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to… | |
| CVE-2026-13961 | 5.3 | 20.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome on Wi… | |
| CVE-2026-14117 | 5.3 | 20.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome on Wi… | |
| CVE-2026-54592 | 7.5 | 19.7 | ohler55 | oj | CWE-125 | Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input |
| CVE-2026-13931 | 6.5 | 19.7 | Chrome | CWE-284 | Inappropriate implementation in Media in Google Chrome on Windows prior to 15… | |
| CVE-2026-13985 | 6.5 | 19.7 | Chrome | CWE-290 | Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.… | |
| CVE-2026-4360 | 2.0 | 19.6 | Python Software Foundation | CPython | CWE-281 | Tarfile.extract() doesn't fully respect filter parameter |
| CVE-2026-7874 | 9.1 | 19.3 | IBM | Langflow OSS | CWE-338 | Weak Cryptographic Key Derivation Exposed All Stored Credentials |
| CVE-2026-13795 | 6.5 | 19.4 | Chrome | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS pri… | |
| CVE-2026-13933 | 5.3 | 19.1 | Chrome | CWE-284 | Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.… | |
| CVE-2026-56224 | 5.1 | 18.8 | Capgo | Capgo | CWE-384 | Capgo - Login CSRF and Session Fixation via URL Query Parameters |
| CVE-2026-27881 | 5.0 | 18.7 | coollabsio | coolify | CWE-639 | Coolify: Cross-team deployment information disclosure via GET /api/v1/deploym… |
| CVE-2025-36324 | 4.3 | 18.7 | IBM | watsonx.data intelligence | CWE-918 | Vulnerabilities found in Watson Data Intelligence |
| CVE-2026-13830 | 8.8 | 18.5 | Chrome | CWE-416 | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47… | |
| CVE-2026-9002 | 6.5 | 18.5 | IBM | WebSphere Extreme Scale | CWE-400 | IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption… |
| CVE-2026-13989 | 5.3 | 18.6 | Chrome | CWE-451 | Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871… | |
| CVE-2026-3602 | 5.5 | 18.4 | IBM | App Connect Enterprise | CWE-89 | IBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulner… |
| CVE-2026-13886 | 6.5 | 17.8 | Chrome | CWE-693 | Insufficient policy enforcement in Isolated Web Apps in Google Chrome prior t… | |
| CVE-2026-13896 | 6.5 | 17.8 | Chrome | CWE-602 | Insufficient policy enforcement in Glic in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-13904 | 6.5 | 17.8 | Chrome | CWE-693 | Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior t… | |
| CVE-2026-13917 | 6.5 | 17.8 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome… | |
| CVE-2026-13890 | 5.3 | 17.8 | Chrome | CWE-125 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allo… | |
| CVE-2026-13975 | 5.3 | 17.8 | Chrome | CWE-125 | Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 al… | |
| CVE-2026-14012 | 5.3 | 17.8 | Chrome | CWE-1300 | Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-14049 | 5.3 | 17.8 | Chrome | CWE-200 | Inappropriate implementation in GPU in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-14112 | 5.3 | 17.8 | Chrome | CWE-203 | Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.78… | |
| CVE-2026-14153 | 5.3 | 17.8 | Chrome | CWE-451 | Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 … | |
| CVE-2026-56334 | 5.3 | 17.9 | Capgo | Capgo | CWE-284 | Capgo - Missing UPDATE RLS Policy for Build Status Persistence |
| CVE-2026-14040 | 8.8 | 17.7 | Chrome | CWE-416 | Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed … | |
| CVE-2026-12084 | 7.5 | 17.7 | IBM | UCD - IBM DevOps Deploy | CWE-942 | IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive… |
| CVE-2026-14045 | 4.3 | 17.2 | Chrome | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior … | |
| CVE-2026-14116 | 4.3 | 17.2 | Chrome | CWE-20 | Insufficient validation of untrusted input in DevTools in Google Chrome prior… | |
| CVE-2025-36320 | 6.4 | 16.9 | IBM | watsonx.data intelligence | CWE-79 | Vulnerabilities found in Watson Data Intelligence |
| CVE-2026-13990 | 6.5 | 16.8 | Chrome | CWE-20 | Insufficient validation of untrusted input in DataTransfer in Google Chrome o… | |
| CVE-2026-14015 | 6.5 | 16.6 | Chrome | CWE-362 | Race in WebRTC in Google Chrome on Windows prior to 150.0.7871.47 allowed a r… | |
| CVE-2026-14082 | 6.5 | 16.6 | Chrome | CWE-362 | Race in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote atta… | |
| CVE-2026-13862 | 6.5 | 16.4 | Chrome | CWE-693 | Insufficient policy enforcement in Web Authentication (Passkeys & Security Ke… | |
| CVE-2026-8403 | 6.1 | 16.4 | Eksagate Electronic Engineering and Computer Industry Trade Inc. | SYSGUARD 6001 | CWE-79 | Stored XSS in Exagate's SYSGUARD 6001 |
| CVE-2026-13959 | 4.3 | 16.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in Blink in Google Chrome prior to… | |
| CVE-2026-14058 | 4.3 | 16.4 | Chrome | CWE-693 | Insufficient policy enforcement in Parser in Google Chrome prior to 150.0.787… | |
| CVE-2026-14075 | 4.3 | 16.4 | Chrome | CWE-602 | Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS pri… | |
| CVE-2026-56356 | 5.1 | 16.1 | n8n | n8n | CWE-79 | n8n - Stored Cross-Site Scripting in Chat Trigger Node Custom CSS Field |
| CVE-2026-13793 | 6.5 | 15.8 | Chrome | CWE-346 | Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.4… | |
| CVE-2026-13826 | 6.5 | 15.8 | Chrome | CWE-346 | Inappropriate implementation in Autofill in Google Chrome on Android prior to… | |
| CVE-2026-13840 | 6.5 | 15.8 | Chrome | CWE-346 | Insufficient policy enforcement in Canvas in Google Chrome prior to 150.0.787… | |
| CVE-2026-13887 | 6.5 | 15.8 | Chrome | CWE-346 | Inappropriate implementation in NFC in Google Chrome on Android prior to 150.… | |
| CVE-2026-13913 | 6.5 | 15.8 | Chrome | CWE-346 | Insufficient policy enforcement in Autofill in Google Chrome on iOS prior to … | |
| CVE-2026-14016 | 6.5 | 15.8 | Chrome | CWE-352 | Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-10546 | 6.5 | 15.7 | IBM | Langflow OSS | CWE-918 | DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component |
| CVE-2026-13837 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-13865 | 4.3 | 15.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in Enterprise in Google Chrome pri… | |
| CVE-2026-13867 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7… | |
| CVE-2026-13902 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13912 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior t… | |
| CVE-2026-13916 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13941 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in SiteSettings in Google Chrome on Android prio… | |
| CVE-2026-13960 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Passwords in Google Chrome prior to 150.0.787… | |
| CVE-2026-13966 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in History in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-13972 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-13978 | 4.3 | 15.4 | Chrome | CWE-451 | Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7… | |
| CVE-2026-13979 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-13980 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13981 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13987 | 4.3 | 15.4 | Chrome | CWE-451 | Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.78… | |
| CVE-2026-13994 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Credential Management in Google Chrome on And… | |
| CVE-2026-13995 | 4.3 | 15.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in Autofill in Google Chrome on An… | |
| CVE-2026-14013 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-14020 | 4.3 | 15.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to… | |
| CVE-2026-14042 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 1… | |
| CVE-2026-14072 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in SplitView in Google Chrome prior to 150.0.787… | |
| CVE-2026-14089 | 4.3 | 15.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in PopupBlocker in Google Chrome p… | |
| CVE-2026-14126 | 4.3 | 15.4 | Chrome | CWE-451 | Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.4… | |
| CVE-2026-14127 | 4.3 | 15.4 | Chrome | CWE-20 | Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871… | |
| CVE-2026-14130 | 4.3 | 15.4 | Chrome | CWE-20 | Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allo… | |
| CVE-2026-14134 | 4.3 | 15.4 | Chrome | CWE-451 | Inappropriate implementation in Autofill in Google Chrome on Android prior to… | |
| CVE-2026-14140 | 4.3 | 15.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in Input in Google Chrome on Andro… | |
| CVE-2026-14141 | 4.3 | 15.4 | Chrome | CWE-451 | Incorrect security UI in Document Picture-in-Picture in Google Chrome on Andr… | |
| CVE-2026-13882 | 9.6 | 15.3 | Chrome | CWE-362 | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker… | |
| CVE-2026-13908 | 6.5 | 15.2 | Chrome | CWE-20 | Insufficient validation of untrusted input in Omnibox in Google Chrome on iOS… | |
| CVE-2026-9836 | 7.5 | 14.9 | IBM | InfoSphere Information Server | CWE-200 | IBM DataStage Flow Designer application is affected by an information disclos… |
| CVE-2026-11581 | 5.9 | 14.9 | Unknown | Kali Forms — Contact Form & Drag-and-Drop Builder | — | Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption |
| CVE-2026-14062 | 5.9 | 14.8 | Chrome | CWE-200 | Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 1… | |
| CVE-2026-13838 | 6.5 | 14.6 | Chrome | CWE-346 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-13839 | 6.5 | 14.6 | Chrome | CWE-346 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-13868 | 6.5 | 14.6 | Chrome | CWE-346 | Inappropriate implementation in Network in Google Chrome on Android prior to … | |
| CVE-2026-13984 | 4.3 | 14.3 | Chrome | CWE-290 | Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 all… | |
| CVE-2026-14046 | 4.3 | 14.4 | Chrome | CWE-346 | Inappropriate implementation in CustomTabs in Google Chrome on Android prior … | |
| CVE-2026-14057 | 4.3 | 14.4 | Chrome | CWE-346 | Inappropriate implementation in FedCM in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-14079 | 4.3 | 14.4 | Chrome | CWE-346 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.78… | |
| CVE-2026-14110 | 4.3 | 14.3 | Chrome | CWE-1021 | Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871… | |
| CVE-2026-54673 | 8.2 | 14.2 | electron-userland | electron-builder | CWE-200 | electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case … |
| CVE-2026-57082 | 5.9 | 14.1 | SANKO | Net::BitTorrent | CWE-330 | Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellma… |
| CVE-2026-14073 | 4.3 | 14.0 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebXR in Google Chrome prior to… | |
| CVE-2026-14076 | 4.3 | 14.0 | Chrome | CWE-693 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.78… | |
| CVE-2026-14080 | 4.3 | 14.0 | Chrome | CWE-20 | Insufficient validation of untrusted input in TabSwitcher in Google Chrome on… | |
| CVE-2026-14114 | 7.5 | 13.9 | Chrome | CWE-451 | Inappropriate implementation in WebAppInstalls in Google Chrome on Android pr… | |
| CVE-2026-13939 | 3.1 | 13.9 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebShare in Google Chrome on An… | |
| CVE-2025-36323 | 5.4 | 13.7 | IBM | watsonx.data intelligence | CWE-79 | Vulnerabilities found in Watson Data Intelligence |
| CVE-2026-14105 | 4.3 | 13.7 | Chrome | CWE-346 | Insufficient policy enforcement in Speech in Google Chrome prior to 150.0.787… | |
| CVE-2026-27882 | 4.8 | 13.5 | coollabsio | coolify | CWE-208 | Coolify: Timing Attack in GitLab Webhook Token Validation |
| CVE-2026-13876 | 6.5 | 13.2 | Chrome | CWE-693 | Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-13842 | 4.3 | 13.2 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-14137 | 4.2 | 13.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome… | |
| CVE-2026-14047 | 4.3 | 13.0 | Chrome | CWE-602 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0… | |
| CVE-2026-14081 | 6.5 | 12.9 | Chrome | CWE-602 | Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7… | |
| CVE-2026-35096 | 5.1 | 12.7 | KTM System | e-BOK | CWE-352 | Cross-Site Request Forgery (CSRF) in KTM System e-BOK |
| CVE-2026-13836 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-14000 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-14001 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-14068 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.… | |
| CVE-2026-14083 | 6.1 | 12.4 | Chrome | CWE-20 | Insufficient validation of untrusted input in HTML in Google Chrome prior to … | |
| CVE-2026-14145 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-14147 | 6.1 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-13977 | 5.4 | 12.4 | Chrome | CWE-79 | Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.78… | |
| CVE-2026-14131 | 5.4 | 12.0 | Chrome | CWE-20 | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome… | |
| CVE-2026-14132 | 5.4 | 12.0 | Chrome | CWE-451 | Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47… | |
| CVE-2026-14135 | 5.4 | 12.0 | Chrome | CWE-20 | Insufficient validation of untrusted input in Network in Google Chrome prior … | |
| CVE-2026-14150 | 5.4 | 12.0 | Chrome | CWE-20 | Insufficient validation of untrusted input in Speech in Google Chrome prior t… | |
| CVE-2026-13982 | 3.1 | 12.0 | Chrome | CWE-451 | Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 al… | |
| CVE-2026-13991 | 4.3 | 11.9 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome… | |
| CVE-2026-14031 | 4.3 | 11.9 | Chrome | CWE-451 | Inappropriate implementation in File Input in Google Chrome prior to 150.0.78… | |
| CVE-2026-14077 | 4.3 | 11.9 | Chrome | CWE-451 | Inappropriate implementation in Select in Google Chrome on Mac prior to 150.0… | |
| CVE-2026-14123 | 4.3 | 11.9 | Chrome | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.… | |
| CVE-2026-14128 | 4.3 | 11.9 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-14136 | 4.3 | 11.9 | Chrome | CWE-451 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome… | |
| CVE-2026-14143 | 4.3 | 11.9 | Chrome | CWE-451 | Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.787… | |
| CVE-2026-13946 | 4.3 | 11.5 | Chrome | CWE-352 | Inappropriate implementation in ScriptInjections in Google Chrome on iOS prio… | |
| CVE-2026-13952 | 4.3 | 11.5 | Chrome | CWE-352 | Inappropriate implementation in PerformanceAPIs in Google Chrome prior to 150… | |
| CVE-2026-14053 | 4.3 | 11.5 | Chrome | CWE-346 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0… | |
| CVE-2026-13894 | 6.5 | 11.3 | Chrome | CWE-602 | Insufficient policy enforcement in Network in Google Chrome prior to 150.0.78… | |
| CVE-2026-13857 | 4.2 | 11.3 | Chrome | CWE-451 | Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871… | |
| CVE-2026-13860 | 4.2 | 11.3 | Chrome | CWE-451 | Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.… | |
| CVE-2026-13895 | 4.2 | 11.3 | Chrome | CWE-451 | Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871… | |
| CVE-2026-13907 | 4.2 | 11.3 | Chrome | CWE-451 | Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0… | |
| CVE-2026-13956 | 4.2 | 11.3 | Chrome | CWE-451 | Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 all… | |
| CVE-2026-13983 | 4.2 | 11.3 | Chrome | CWE-451 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2026-13986 | 4.2 | 11.3 | Chrome | CWE-451 | Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior t… | |
| CVE-2026-13881 | 6.5 | 11.2 | Chrome | CWE-346 | Inappropriate implementation in WebAppInstalls in Google Chrome prior to 150.… | |
| CVE-2026-13874 | 5.3 | 11.1 | Chrome | CWE-362 | Race in DataTransfer in Google Chrome prior to 150.0.7871.47 allowed a remote… | |
| CVE-2026-35095 | 4.8 | 11.2 | KTM System | e-BOK | CWE-384 | Session fixation in KTM System e-BOK |
| CVE-2026-14142 | 5.4 | 11.0 | Chrome | CWE-1021 | Inappropriate implementation in Extensions in Google Chrome prior to 150.0.78… | |
| CVE-2026-13884 | 8.8 | 10.3 | Chrome | CWE-122 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowe… | |
| CVE-2025-12530 | 5.9 | 10.2 | IBM | watsonx.data intelligence | CWE-319 | Vulnerabilities found in Watson Data Intelligence |
| CVE-2025-36336 | 5.9 | 10.2 | IBM | watsonx.data intelligence | CWE-319 | Cleartext Transmission of Sensitive Information in Watson Data Intelligence |
| CVE-2026-14039 | 4.3 | 10.0 | Chrome | CWE-346 | Insufficient policy enforcement in GetUserMedia in Google Chrome prior to 150… | |
| CVE-2026-54500 | 5.3 | 9.5 | ohler55 | oj | CWE-125 | Oj: intern.c form_attr has an uninitialized stack read |
| CVE-2026-13973 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 al… | |
| CVE-2026-13992 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.787… | |
| CVE-2026-13993 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-13997 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in Extensions in Google Chrome on Android prior to 150.… | |
| CVE-2026-13998 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.78… | |
| CVE-2026-14026 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 al… | |
| CVE-2026-14028 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.… | |
| CVE-2026-14030 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in SplitView in Google Chrome on Linux prior to … | |
| CVE-2026-14129 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in PreviewTab in Google Chrome on Android prior … | |
| CVE-2026-14138 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in WebAppInstalls in Google Chrome on Windows pr… | |
| CVE-2026-14139 | 4.2 | 9.5 | Chrome | CWE-451 | Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871… | |
| CVE-2026-14144 | 4.2 | 9.5 | Chrome | CWE-451 | Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowe… | |
| CVE-2026-13812 | 4.7 | 9.2 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome… | |
| CVE-2026-58302 | 8.4 | 9.1 | LinuxCNC | LinuxCNC | CWE-22 | rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escala… |
| CVE-2026-13976 | 5.8 | 8.7 | Chrome | CWE-122 | Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.… | |
| CVE-2026-14003 | 4.3 | 8.7 | Chrome | CWE-284 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0… | |
| CVE-2026-14154 | 4.8 | 8.4 | Chrome | CWE-451 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871… | |
| CVE-2026-13455 | 4.3 | 8.4 | DALIBO | PostgreSQL Anonymizer | CWE-328 | PostgreSQL Anonymizer: Unrestricted function can leak the secret salt |
| CVE-2026-13999 | 4.3 | 8.3 | Chrome | CWE-20 | Insufficient validation of untrusted input in Extensions in Google Chrome pri… | |
| CVE-2026-54672 | 7.8 | 8.2 | electron-userland | electron-builder | CWE-427 | electron-updater: Uncontrolled search path elements within `AppImage` built b… |
| CVE-2026-13944 | 3.1 | 8.0 | Chrome | CWE-352 | Inappropriate implementation in DataTransfer in Google Chrome on Mac prior to… | |
| CVE-2026-13963 | 3.1 | 8.0 | Chrome | CWE-352 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871… | |
| CVE-2026-14092 | 4.3 | 7.9 | Chrome | CWE-693 | Insufficient policy enforcement in Privacy in Google Chrome prior to 150.0.78… | |
| CVE-2026-13822 | 6.5 | 7.7 | Chrome | CWE-346 | Inappropriate implementation in Extensions in Google Chrome on Android prior … | |
| CVE-2026-14133 | 4.2 | 7.6 | Chrome | CWE-362 | Race in History Embeddings in Google Chrome prior to 150.0.7871.47 allowed a … | |
| CVE-2026-56277 | 6.9 | 7.5 | Flowise | Flowise | CWE-346 | Flowise - Hardcoded CORS Wildcard in TTS Endpoint |
| CVE-2026-50110 | 9.3 | 7.0 | StoneFly | Storage Concentrator | CWE-798 | Use of Hard-coded Credentials in StoneFly Storage Concentrator |
| CVE-2026-10654 | 3.1 | 6.6 | zephyrproject | zephyr | CWE-362 | RFCOMM session-disconnect race leaks session/L2CAP and denies further RFCOMM … |
| CVE-2026-13940 | 6.5 | 6.3 | Chrome | CWE-457 | Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an … | |
| CVE-2026-56361 | 4.8 | 6.4 | ImageMagick | ImageMagick | CWE-125 | ImageMagick - Heap Buffer Overflow via Off-by-One in Morphology Processing |
| CVE-2026-54897 | 2.1 | 6.1 | ohler55 | oj | CWE-416 | Oj : Use-After-Free in Oj::Doc Iterators via Reentrant Close |
| CVE-2026-54898 | 2.1 | 6.1 | ohler55 | oj | CWE-416 | Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation |
| CVE-2026-13945 | 3.1 | 6.0 | Chrome | CWE-451 | Insufficient policy enforcement in Extensions in Google Chrome on Linux prior… | |
| CVE-2026-13948 | 3.1 | 6.0 | Chrome | CWE-451 | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0… | |
| CVE-2026-54896 | 2.1 | 6.1 | ohler55 | oj | CWE-122 | Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent |
| CVE-2026-56377 | 4.8 | 5.8 | ImageMagick | ImageMagick | CWE-22 | ImageMagick - Policy Bypass via Incorrect Path Validation |
| CVE-2025-24815 | 7.8 | 5.5 | Nokia | MantaRay NM | CWE-434 | An unrestricted file upload vulnerability in Nokia MantaRay NM |
| CVE-2026-13957 | 4.2 | 5.1 | Chrome | CWE-79 | Incorrect security UI in Extensions in Google Chrome prior to 150.0.7871.47 a… | |
| CVE-2026-13879 | 6.5 | 5.0 | Chrome | CWE-416 | Use after free in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a… | |
| CVE-2026-14048 | 6.5 | 5.0 | Chrome | CWE-416 | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed … | |
| CVE-2026-14119 | 6.5 | 5.0 | Chrome | CWE-843 | Type Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.4… | |
| CVE-2026-56364 | 1.8 | 4.8 | ImageMagick | ImageMagick | CWE-401 | ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML |
| CVE-2026-56363 | 4.8 | 4.4 | ImageMagick | ImageMagick | CWE-190 | ImageMagick - Division by Zero in Binomial Kernel Processing |
| CVE-2026-13316 | 4.4 | 4.4 | Red Hat | Red Hat Satellite 6 | CWE-918 | Foreman: ssrf to cloud metada service through unvalidated test_url parameters… |
| CVE-2026-8944 | 4.3 | 4.2 | engagementanalytics | Plugin for Google Analytics by IO technologies | CWE-352 | Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Fo… |
| CVE-2026-12086 | 5.5 | 4.0 | IBM | UCD - IBM UrbanCode Deploy | CWE-532 | IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion … |
| CVE-2026-8864 | 7.3 | 3.7 | HP Inc. | HP Fan Control App | CWE-428 | HP Fan Control App – Potential Escalation of Privilege |
| CVE-2026-14063 | 5.7 | 3.6 | Chrome | CWE-125 | Out of bounds read in Chromecast in Google Chrome prior to 150.0.7871.47 allo… | |
| CVE-2026-13778 | 7.8 | 3.6 | Chrome | CWE-416 | Use after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allow… | |
| CVE-2026-13929 | 5.5 | 3.6 | Chrome | CWE-20 | Insufficient policy enforcement in DevTools in Google Chrome on Android prior… | |
| CVE-2026-13808 | 4.6 | 3.5 | Chrome | CWE-20 | Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior … | |
| CVE-2025-7406 | 7.8 | 3.3 | Nokia | MantaRay NM | CWE-269 | A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM |
| CVE-2026-14018 | 7.8 | 3.3 | Chrome | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 … | |
| CVE-2026-13863 | 7.8 | 2.8 | Chrome | CWE-20 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on … | |
| CVE-2026-13927 | 7.8 | 2.8 | Chrome | CWE-20 | Insufficient validation of untrusted input in UI in Google Chrome on Android … | |
| CVE-2026-14060 | 7.8 | 2.8 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on … | |
| CVE-2026-13800 | 7.8 | 2.4 | Chrome | CWE-284 | Inappropriate implementation in Updater in Google Chrome on Windows prior to … | |
| CVE-2026-14124 | 7.8 | 2.4 | Chrome | CWE-269 | Inappropriate implementation in CredentialProvider in Google Chrome on Window… | |
| CVE-2026-14160 | 5.9 | 2.2 | Samsung Open Source | Escargot | CWE-367 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Op… |
| CVE-2026-13942 | 3.3 | 2.2 | Chrome | CWE-20 | Inappropriate implementation in Video Capture in Google Chrome on ChromeOS pr… | |
| CVE-2026-12610 | 6.4 | 2.1 | Red Hat | Red Hat Enterprise Linux 10 | CWE-825 | Sssd: use-after-free crash in sssd' 'sssd_pam' process |
| CVE-2026-13914 | 5.5 | 1.9 | Chrome | CWE-284 | Inappropriate implementation in Passwords in Google Chrome on Mac prior to 15… | |
| CVE-2026-13955 | 3.3 | 1.7 | Chrome | CWE-20 | Insufficient validation of untrusted input in CustomTabs in Google Chrome on … | |
| CVE-2026-53692 | 5.9 | 1.5 | Redeight | Redeight CMS | CWE-328 | Weak hashing algorithm in Redeight CMS |
| CVE-2026-13827 | 7.8 | 1.3 | Chrome | CWE-416 | Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allo… | |
| CVE-2026-13844 | 7.8 | 1.3 | Chrome | CWE-416 | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 … | |
| CVE-2026-14094 | 7.8 | 1.3 | Chrome | CWE-416 | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.4… | |
| CVE-2026-13849 | 8.6 | 1.1 | Chrome | CWE-20 | Insufficient validation of untrusted input in Chromoting in Google Chrome on … | |
| CVE-2026-13905 | 4.2 | 0.8 | Chrome | CWE-362 | Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed… |
