Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in Video in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.35%Apr 15, 2026
- High8.8Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 15, 2026
- High8.8Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory accesCheck if you run itEPSS 0.27%Apr 15, 2026
- High8.8Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.35%Apr 15, 2026
- High8.8Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.29%Apr 15, 2026
- High8.8Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.35%Apr 15, 2026
- Medium4.3Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pCheck if you run itEPSS 0.49%Apr 15, 2026
- High8.3Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a crafted HTML pagCheck if you run itEPSS 0.21%Apr 15, 2026
- Critical9.6Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.56%Apr 15, 2026
- Medium6.1A flaw was found in GIMP.Check if you run itEPSS 0.34%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.20%Apr 15, 2026
- High7.1A flaw was found in GIMP.Check if you run itEPSS 0.17%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.22%Apr 15, 2026
- High7.8A flaw was found in GIMP.Check if you run itEPSS 0.39%Apr 15, 2026
- Low3.3A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records.Check if you run itEPSS 0.21%Apr 15, 2026
- Critical9.2CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorizeCheck if you run itEPSS 0.55%Apr 15, 2026
- High7.4OpenProject is an open-source project management application.Check if you run itEPSS 0.31%Apr 15, 2026
- High8.6Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.28%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.16%Apr 15, 2026
- Medium4.1Weblate is a web based localization tool.Check if you run itEPSS 0.29%Apr 15, 2026
- High8.8Weblate is a web based localization tool.Check if you run itEPSS 0.41%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Check if you run itEPSS 0.16%Apr 15, 2026
- High7.7Weblate is a web based localization tool.Check if you run itEPSS 0.48%Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Check if you run itEPSS 0.53%Apr 15, 2026
Sort