Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.37%Apr 15, 2026
- High8.8Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.34%Apr 15, 2026
- High8.8Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.34%Apr 15, 2026
- Medium4.3Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML pCheck if you run itEPSS 0.47%Apr 15, 2026
- High8.3Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox escape via a cra…Check if you run itEPSS 0.20%Apr 15, 2026
- Critical9.6Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.Check if you run itEPSS 0.56%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.33%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.20%Apr 15, 2026
- High7.1A flaw was found in GIMP.Check if you run itEPSS 0.17%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.21%Apr 15, 2026
- High7.8A flaw was found in GIMP.Check if you run itEPSS 0.38%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.43%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.30%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.22%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.51%Apr 15, 2026
- Low3.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.36%Apr 15, 2026
- Low3.3A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium5.3The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the…Check if you run itEPSS 0.41%Apr 15, 2026
- Critical9.1Pyroscope is an open-source continuous profiling database.Check if you run itEPSS 0.41%Apr 15, 2026
- Medium6.1Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Check if you run itEPSS 0.20%Apr 15, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.40%Apr 15, 2026
- Medium6.1Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001Check if you run itEPSS 0.22%Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Check if you run itEPSS 0.15%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.14%Apr 15, 2026
- Critical9.2CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gai…Check if you run itEPSS 0.53%Apr 15, 2026
Sort