Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() perf_pmu_sched_task() returns early when cp…Open the advisoryOct 18, 2026
- High7.5CGA-xrpx-6cv8-8f42Open the advisoryOct 16, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.7In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.Check if you run itEPSS 0.52%Oct 15, 2026
- High8.7In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for…Check if you run itEPSS 0.51%Oct 15, 2026
- High8.7Symfony is a PHP framework for web and console applications and a set of reusable PHP components.Check if you run itEPSS 0.37%Oct 15, 2026
- UnknownCGA-xxc6-5p9r-v8h7Open the advisoryOct 15, 2026
- UnknownCGA-xwg8-ccv8-m6h8Open the advisoryOct 15, 2026
- UnknownCGA-wrhm-3h96-7hv8Open the advisoryOct 15, 2026
- UnknownCGA-v823-7248-h9xrOpen the advisoryOct 15, 2026
- UnknownCGA-vxvp-5v8q-4gqwOpen the advisoryOct 15, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.69%Oct 14, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 13, 2026
- High8.8Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 13, 2026
- High8.7A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7).Check if you run itEPSS 0.50%Oct 13, 2026
- High8.8Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.34%Oct 6, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.33%Oct 6, 2026
- UnknownCVE-2026-87625 affecting package nodejs 24.21.0-1Open the advisorySep 9, 2026
- UnknownCVE-2026-87612 affecting package nodejs 24.21.0-1Open the advisorySep 9, 2026
- UnknownCVE-2026-87601 affecting package nodejs 24.21.0-1Open the advisorySep 9, 2026
- UnknownCVE-2026-87536 affecting package nodejs 24.21.0-1Open the advisorySep 9, 2026
- UnknownCVE-2026-87489 affecting package nodejs 24.21.0-1Open the advisorySep 9, 2026
178 records · page 1 of 8
PreviousNext