Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High8.8Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…EPSS 0.3%Oct 6, 2026
- High8.8Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.4%Oct 6, 2026
- Critical9.6Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.5%Oct 6, 2026
- High7.0Out of Bound Write on WibuKey for WindowsEPSS 0.1%Oct 6, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeEPSS 0.2%Oct 6, 2026
- Medium6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0EPSS 0.3%Oct 5, 2026
- Medium5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0EPSS 0.1%Oct 5, 2026
- Medium6.9Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4EPSS 0.3%Oct 5, 2026
- Medium5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0EPSS 0.1%Oct 5, 2026
- High8.7Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8EPSS 0.4%Oct 5, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16EPSS 0.3%Oct 5, 2026
- Medium6.1A flaw was found in oauth-proxy.EPSS 0.2%Oct 1, 2026
- High8.6A flaw was found in libsoup.EPSS 0.4%Sep 29, 2026
- High8.6A flaw was found in libsoup.EPSS 0.4%Sep 29, 2026
- High8.6A flaw was found in libsoup.EPSS 0.4%Sep 29, 2026
- High8.6A flaw was found in libsoup.EPSS 0.3%Sep 29, 2026
- High8.6A flaw was found in libsoup.EPSS 0.3%Sep 29, 2026
- Medium5.5smb/server: fix tree connection leak in smb2_tree_connect()EPSS 0.1%Sep 25, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure.EPSS 0.1%Sep 25, 2026
- High8.8SQL Injection vulnerability in DIAEnergie.EPSS 0.3%Sep 24, 2026
- High8.7http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleEPSS 0.6%Sep 18, 2026
- High8.7braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards.EPSS 0.8%Sep 18, 2026
- High8.6Microsoft 365 Copilot Business Chat Information Disclosure VulnerabilityEPSS 0.5%Sep 17, 2026
- Medium6.1Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Sep 17, 2026