CVEs published in November 2026
8,007 vulnerabilities, 689 critical, 12 exploited.
- docker buildxBake filesystem path entitlements approval can be skipped in some multi-target builds5.6 Medium
- humhub community editionHumHub 1.19.0 - Stored cross-site scripting in friendship confirmation7.2 High
- docker buildxBake filesystem path entitlements approval can be skipped for path using basename prefix1.8 Low
- tp-link systems inc. archer ax3000 v2Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component7.3 High
- docker sandboxesDocker Sandboxes host Git executes repository-controlled programs7.1 High
- netapp storagegrid (formerly storagegrid webscale)CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)6.9 Medium
- No product listedUmami 2FA Policy route.ts single-factor authentication5.3 Medium
- netapp storagegrid (formerly storagegrid webscale)CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)9.1 Critical
- projectsandprograms school-management-systemsumiie24 School-Management-System Public Search Feature parent_Login.php sql injection6.9 Medium
- google chromeIncorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote...5.4 Medium
- google chromeOut of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a...9.6 Critical
- aws amazon-redshift-jdbc-driverRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters9.2 Critical
- etrel d.o.o. inchEtrel INCH AC Charging Station Hard-coded Default Credentials9.3 Critical
- red hat openshift gitopsGithub.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration8.8 High
- irfanviewIrfanView TIFF Wang Annotation heap-based overflow2.3 Low
- dell wyse management suiteDell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of...3.3 Low
- dell wyse management suiteDell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of...6.8 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of...9.0 Critical
- dell wyse management suiteDell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of...8.8 High
- easysoft zentao pmsEasySoft ZenTao PMS User model.php checkGroupChange privileges management5.3 Medium
- google chromeIncorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeImproper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote...5.4 Medium
- google chromeIncorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a local attacker...5.1 Medium
- google chromeMissing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeUse after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local...7.8 High
- google chromeRace condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.3 High
- google chromeImproper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote...4.3 Medium
- google chromeOut of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...5.7 Medium
- google chromeUncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeUse after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...9.6 Critical
- google chromeMissing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...6.5 Medium
- google chromeIncorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- google chromeUI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38...5.4 Medium
- google chromeImproper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeUI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a...5.4 Medium
- google chromeIncorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...4.3 Medium
- google chromeImproper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeConfused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeUI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote...5.9 Medium
- google chromeRace condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote...8.8 High
- google chromeMissing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to...8.8 High
- google chromeIncomplete cleanup in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...8.8 High
- google chromeIncorrect authorization in History in Google Chrome prior to 157.0.8103.38 allowed a remote...4.3 Medium
- google chromeObservable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker...5.3 Medium
- google chromeUI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote...5.4 Medium
- google chromeIncorrect authorization in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote...4.3 Medium
- google chromeMissing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote...6.5 Medium
- Show moreLoading…