Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- High7.8gdown is a Google Drive public file/folder downloader.Check if you run itEPSS 0.77%Apr 18, 2026
- Medium6.4The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'put…Check if you run itEPSS 0.27%Apr 16, 2026
- High7.5The Payment Gateway for Redsys & WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and includi…Check if you run itEPSS 0.25%Apr 16, 2026
- Medium5.3The Basic Google Maps Placemarks plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.10.7.Check if you run itEPSS 0.35%Apr 16, 2026
- Medium6.5Out of bounds read in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file.Check if you run itEPSS 0.25%Apr 15, 2026
- High8.8Type Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.35%Apr 15, 2026
- Medium4.3Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file.Check if you run itEPSS 0.22%Apr 15, 2026
- High8.3Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to…Check if you run itEPSS 0.38%Apr 15, 2026
- High8.8Use after free in FileSystem in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Check if you run itEPSS 0.31%Apr 15, 2026
- High8.8Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds…Check if you run itEPSS 0.32%Apr 15, 2026
- High8.8Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.34%Apr 15, 2026
- High7.5Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to exec…Check if you run itEPSS 0.36%Apr 15, 2026
- High8.8Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%Apr 15, 2026
- High8.8Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.41%Apr 15, 2026
- High8.8Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%Apr 15, 2026
- High8.8Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to e…Check if you run itEPSS 0.41%Apr 15, 2026
- High8.3Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox esca…Check if you run itEPSS 0.30%Apr 15, 2026
- Low3.1Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origi…Check if you run itEPSS 0.22%Apr 15, 2026
- Low3.1Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-…Check if you run itEPSS 0.22%Apr 15, 2026
- High8.3Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentiall…Check if you run itEPSS 0.33%Apr 15, 2026
- High8.3Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc…Check if you run itEPSS 0.30%Apr 15, 2026
- High8.3Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca…Check if you run itEPSS 0.30%Apr 15, 2026
- High7.5Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitr…Check if you run itEPSS 0.36%Apr 15, 2026
- High8.8Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.45%Apr 15, 2026