Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Google Chromium V8 Out of Bounds Write VulnerabilityPatch nowKEVEPSS 3.14%Sep 8, 2026
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 48.88%Sep 3, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues (…Check if you run itEPSS 0.21%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously.Check if you run itEPSS 0.14%Aug 10, 2026
- High8.2OmniFaces is a utility library for Faces.Check if you run itEPSS 0.31%Jul 24, 2026
- UnknownCGA-rw59-v8cv-vgh9Open the advisoryJul 9, 2026
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 2.44%Jun 8, 2026
- High8.8Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.42%May 28, 2026
- High8.8Integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%May 28, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.44%May 28, 2026
- High8.8Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%May 28, 2026
- High7.5Type Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code insid…Check if you run itEPSS 0.15%May 28, 2026
- High7.1Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that ind…Check if you run itEPSS 0.42%May 18, 2026
- Medium6.5Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.Check if you run itEPSS 0.32%May 14, 2026
- High8.8Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.42%May 14, 2026
- Medium5.8vm2 is an open source vm/sandbox for Node.js.Check if you run itEPSS 0.34%May 13, 2026
- High7.7After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subse…Check if you run itEPSS 0.47%May 13, 2026
- Medium5.3Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation pe…Check if you run itEPSS 0.45%May 13, 2026
- Medium6.1A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared.Check if you run itEPSS 0.22%May 13, 2026
- Medium4.8When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have al…Check if you run itEPSS 0.34%May 13, 2026
- High7.1An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear.Check if you run itEPSS 0.45%May 13, 2026
- High8.7An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write…Check if you run itEPSS 0.66%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create se…Check if you run itEPSS 0.16%May 8, 2026
- Critical9.1Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 2.09%May 6, 2026
- Medium4.3Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory vi…Check if you run itEPSS 0.26%May 6, 2026