Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to…Check if you run itEPSS 0.27%May 29, 2026
- Medium4.3The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7.Check if you run itEPSS 0.28%May 29, 2026
- Medium4.4The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19.Check if you run itEPSS 0.24%May 29, 2026
- High7.3Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized rea…Check if you run itEPSS 0.09%May 29, 2026
- High7.3An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute…Check if you run itEPSS 0.14%May 29, 2026
- Medium5.1Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafte…Check if you run itEPSS 0.12%May 29, 2026
- Medium5.1Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit…Check if you run itEPSS 0.12%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.39%May 29, 2026
- High7.2linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 29, 2026
- High8.8Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.25%May 28, 2026
- High8.3Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e…Check if you run itEPSS 0.18%May 28, 2026
- High8.3Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.18%May 28, 2026
- Medium6.5Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory…Check if you run itEPSS 0.19%May 28, 2026
- High8.8Use after free in WebXR in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.18%May 28, 2026
- High8.3Use after free in Views in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox es…Check if you run itEPSS 0.16%May 28, 2026
- High8.8Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.23%May 28, 2026
- Low3.1Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cr…Check if you run itEPSS 0.14%May 28, 2026
- High7.5Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to po…Check if you run itEPSS 0.17%May 28, 2026
- Medium6.3Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same origin policy via a crafted video file.Check if you run itEPSS 0.11%May 28, 2026
- High8.3Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.17%May 28, 2026
- High7.8Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via…Check if you run itEPSS 0.10%May 28, 2026
- Medium4.2Insufficient validation of untrusted input in OptimizationGuide in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer pro…Check if you run itEPSS 0.14%May 28, 2026
- Medium5.3Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer pro…Check if you run itEPSS 0.18%May 28, 2026
- High8.8Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.23%May 28, 2026
Sort