CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- google chromeUse after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote...8.3 High
- google chromeUninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...3.4 Low
- google chromeOut of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...4.7 Medium
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeOut of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who...8.3 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeUninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...4.3 Medium
- google chromeUse after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...9.6 Critical
- google chromeUse after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a...3.4 Low
- google chromeUninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a...4.7 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a...4.3 Medium
- google chromeUninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote...4.3 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a...4.7 Medium
- google chromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a...4.3 Medium
- google chromeUse after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...9.6 Critical
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote...9.6 Critical
- google chromeImproper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92...8.6 High
- anjvision yssd-rtmp-h5Active debug code in Anjvision YSSD-RTMP-H55.3 Medium
- finsys dockhandDockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint5.3 Medium
- google osv-scalibrPath Traversal in VMDK Extractor in OSV-SCALIBR6.9 Medium
- anjvision yssd-rtmp-h5Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H58.7 High
- anjvision yssd-rtmp-h5Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H58.7 High
- anjvision yssd-rtmp-h5Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H58.7 High
- anjvision yssd-rtmp-h5Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H59.3 Critical
- baicells nova 430h enodeb (model pbs3101sh)Uncaught exception in Baicells Nova 430H8.3 High
- hewlett packard enterprise (hpe) instant onAuthenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service2.7 Low
- hewlett packard enterprise (hpe) instant onAuthenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On3.0 Low
- hewlett packard enterprise (hpe) instant onAuthenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On3.3 Low
- hewlett packard enterprise (hpe) instant onAuthenticated Local Sensitive Information Disclosure in HPE Networking Instant On4.1 Medium
- hewlett packard enterprise (hpe) instant onUnauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On4.8 Medium
- hewlett packard enterprise (hpe) instant onAuthenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint4.9 Medium
- hewlett packard enterprise (hpe) instant onAuthenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON6.4 Medium
- hewlett packard enterprise (hpe) instant onAuthentication Bypass in the Captive Portal of HPE Networking Instant On6.5 Medium
- hewlett packard enterprise (hpe) instant onImproper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs6.5 Medium
- hewlett packard enterprise (hpe) instant onAuthenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint6.6 Medium
- hewlett packard enterprise (hpe) instant onAuthenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs7.2 High
- hewlett packard enterprise (hpe) instant onAuthenticated Command Injection Vulnerabilities in HPE Networking Instant ON7.2 High
- hewlett packard enterprise (hpe) instant onAuthentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint8.1 High
- hewlett packard enterprise (hpe) instant onAuthentication Bypass in a Management Protocol of HPE Networking Instant ON APs9.6 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol9.6 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS9.6 Critical
- hewlett packard enterprise (hpe) instant onUncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs9.8 Critical
- hewlett packard enterprise (hpe) instant onUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs9.8 Critical
- liberu software crmLiberu CRM 0.9.1 < 10.0.0 Broken Access Control via TeamPolicy::addTeamMember()8.7 High
fuse-overlayfsMageiaUpdated fuse-overlayfs package fixes security vulnerabilitiesNo score- Show moreLoading…