Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownSecurity update for gimpOpen the advisoryOct 13, 2026
- High7.5Dio: Cross-origin redirect leaks sensitive request headers inCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…Check if you run itEPSS 0.47%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldCheck if you run itEPSS 0.22%Oct 13, 2026
- UnknownCVE-2026-95117 affecting package ntp 4.2.8p17-3Open the advisoryOct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toCheck if you run itEPSS 0.16%Oct 13, 2026
- High8.3Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandboxCheck if you run itEPSS 0.32%Oct 13, 2026
- High8.8Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- Medium5.5Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program.Check if you run itEPSS 0.10%Oct 13, 2026
- Medium4.3Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted fCheck if you run itEPSS 0.19%Oct 13, 2026
- Critical9.6Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.Check if you run itEPSS 0.34%Oct 13, 2026
- Unknownlinux vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux-azure, linux-azure-fde, linux-azure-fips vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerOpen the advisoryOct 13, 2026
- Unknownlinux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-rasOpen the advisoryOct 13, 2026
- Unknownlinux-oracle vulnerabilitiesOpen the advisoryOct 13, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilitiesOpen the advisoryOct 13, 2026