CVEs published in November 2026
8,018 vulnerabilities, 689 critical, 12 exploited.
- google chromeType confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute...8.8 High
- google chromeUse after free in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeBuffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeUse after free in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeImproper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a...8.8 High
- google chromeUse after free in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeBuffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute...8.8 High
- google chromeUninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote...7.4 High
- google chromeUse after free in PictureInPicture in Google Chrome prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeType confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeBuffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeType confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeUninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...7.4 High
- google chromeOut of bounds read in Internals in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.3 High
- google chromeUninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...7.4 High
- google chromeOut of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote...7.4 High
- google chromeMissing authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeOut of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote...8.3 High
- google chromeImproper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote...8.3 High
- google chromeMemory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeBuffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeUse after free in Geometry in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeUse after free in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- google chromeIncorrect authorization in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a...8.8 High
- google chromeUse after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeMemory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote...9.6 Critical
- google chromeBuffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- devolutions serverInsertion of sensitive information into sent data in the identity provider user synchronization...6.5 Medium
- @effect platform, effect-ts effect +1 moreEffect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()6.3 Medium
- perforce puppet enterpriseReport Deserialization Code Execution9.4 Critical
- devolutions serverImproper release of expired privileged access checkouts in the PAM scheduled check-in task in...8.8 High
- perforce puppet enterpriseCertificate Name Authorization Bypass9.0 Critical
- devolutions serverCleartext transmission of sensitive information in the email configuration test in Devolutions...6.5 Medium
- devolutions serverServer-side request forgery in the Active Directory credential validation in Devolutions Server...8.1 High
- devolutions serverCleartext storage of sensitive information in the user account data in Devolutions Server 2026.3...7.5 High
- dell os recovery toolDell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path...7.8 High
- dell os recovery toolDell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key...2.4 Low
- No product listedHeadless CMS Plugin REST API post get_required_post_data information disclosure6.9 Medium
- devolutions serverServer-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0...8.1 High
- stanfordnlp stanzaStanza: RCE via pickle deserialization in the lemmatizer7.8 High
- hathach tinyusbTinyUSB < 0.21.0 Integer Underflow via HID Report Descriptor Parser5.2 Medium
- mongodb atlas sqlMongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes2.1 Low
- mongodb atlas sql odbc driverMongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write6.0 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection6.9 Medium
- hathach tinyusbTinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()7.0 High
- Show moreLoading…