CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- google chromeUse after free in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote...8.1 High
- google chromeUI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.1 High
- google chromeUninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...3.1 Low
- google chromeRace condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeIncorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeInteger overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeUse after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...8.3 High
- google chromeUse after free in Bluetooth in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.8 High
- google chromeUse after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...8.1 High
- google chromeUse after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeIncorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote...8.3 High
- google chromeUse after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...8.8 High
- google chromeType confusion in Accessibility in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...8.3 High
- google chromeMemory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...8.8 High
- google chromeUse after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...9.6 Critical
- google chromeUse of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeImproper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote...8.3 High
- google chromeUse after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...9.6 Critical
- okta privileged access clientImproper Validation of SSH Target in Okta Privileged Access Client5.3 Medium
- unknown wp fastest cacheWP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning7.5 High
- sonicwall netextenderThe NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender...7.0 High
- sonicwall netextenderA Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows...8.8 High
- academysoftwarefoundation openexrOpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow7.1 High
- academysoftwarefoundation openexrOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images5.5 Medium
- academysoftwarefoundation openexrOpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union7.1 High
- collective icalendaricalendar: Algorithmic Complexity in Equality7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA null pointer dereference was addressed with improved input validation. This issue is fixed in...5.5 Medium
- apple macos, ios and ipados +1 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...5.5 Medium
- apple ios and ipados, iphone os +1 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5...3.3 Low
- apple ipados, macos, safari +2 more +4 moreA Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts...8.8 High
- chainlitChainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls6.3 Medium
- chainlitChainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access7.2 High
- chainlitChainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution9.8 Critical
- academysoftwarefoundation openexrOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision7.1 High
- amazon strands-agents-toolsConsent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools9.2 Critical
- academysoftwarefoundation openexrOpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)6.7 Medium
- ruvnet sublinear-time-solversublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state7.1 High
- academysoftwarefoundation openexrOpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure4.3 Medium
- govcert-lu eml parsereml_parser: DoS via deeply nested parens in Received headers7.5 High
- govcert-lu eml parsereml_parser: Parser DoS via deeply nested parentheses in e-mail headers5.3 Medium
- continew-org continew-adminContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints7.1 High
- airbytehq airbyte-platformAirbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId8.7 High
- Show moreLoading…