CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.3 High
- google chromeInsufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778...5.0 Medium
- google chromeUse after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...7.5 High
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...8.3 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeInsufficient validation of untrusted input in GPU in Google Chrome on Android prior to 148.0.7778...8.3 High
- google chromeUse after free in DOM in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeUse after free in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had...8.3 High
- google chromeUse after free in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had...8.3 High
- google chromeInappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed...8.3 High
- google chromeUse after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...9.0 Critical
- google chromeUse after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeOut of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed...8.3 High
- google chromeUse after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeUse after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker...9.6 Critical
- google chromeInsufficient validation of untrusted input in UI in Google Chrome on Mac prior to 148.0.7778.216...8.3 High
- google chromeUse after free in Browser in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote...8.8 High
- google chromeUse after free in Base in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...6.5 Medium
- google chromeUse after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker...9.0 Critical
- google chromeInsufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216...8.3 High
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeUse after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...9.6 Critical
- google chromeOut of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeOut of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote...9.6 Critical
- openstack neutronOpenStack Neutron has an Incorrect Authorization issue5.3 Medium
- significant-gravitas autogptAutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute5.4 Medium
- mauriceboe trekTime-based user enumeration in TREK authentication endpoint5.3 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: Legacy mobile device tokens bypass multi-user workspace scoping after mode migration2.0 Low
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill7.5 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory2.0 Low
- lakeside software systrack agentLakeside SysTrack Agent LsiAgent.exe Out-of-Bounds Read via UDP8.7 High
- usagi-org ai-goofish-monitorai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/8.2 High
- kovah linkaceLinkAce: IDOR in Update Policies Allows Any Authenticated User to Overwrite Other Users' Links, Lists, Tags, and Notes7.1 High
- kovah linkaceLinkAce - Stored XSS via Unsanitized SSO User's Name Rendered in Admin Audit Log Allows Session Hijacking8.5 High
- kovah linkaceLinkAce: Setup database password newline injection enables pre-auth RCE on uninitialized instances8.1 High
- frangoteam fuxaFUXA provides guest and invalid-token access to protected read APIs in secure mode5.5 Medium
- scadabrScadaBR Unauthenticated Reflected Cross-Site Scripting6.1 Medium
- scadabrScadaBR Authenticated Remote Code Execution9.9 Critical
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...5.3 Medium
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: Core). Supported versions that are...5.3 Medium
- oracle rest data servicesVulnerability in Oracle REST Data Services (component: General). Supported versions that are...5.3 Medium
- Show moreLoading…