Latest critical vulnerabilities
CVSS 9.0 and up.
- google chromeOut of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeBuffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeImproper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeBuffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeUse after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote...9.6 Critical
- google chromeOut of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...9.6 Critical
- google chromeUse of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote...9.6 Critical
- chainlitChainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution9.8 Critical
- amazon strands-agents-toolsConsent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools9.2 Critical
- alluxioAlluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature9.3 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)10.0 Critical
- kaltura html5 video player, html5 libraryCVE-2026-199129.8 Critical
- cbcoutinho nextcloud-mcp-serverNextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )9.1 Critical
- qwed-ai qwed-mcpQWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input9.8 Critical
- mervinpraison praisonaiBrowser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)9.1 Critical
- nltkNLTK before 3.10.3 JVM Argument Injection via Per-Call Options9.3 Critical
- trtek technological products computer software hardware industry and trade limited company software repository managementFile Upload in TRTEK Software's Software Repository Management9.8 Critical
- miniorange.com saml sp single sign on – login with adfs extension for joomla, saml sso basic for joomla extension for joomla, saml sso enterprise for joomla extension for joomla +4 more +6 moreJoomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Si…10.0 Critical
- watchguard agentWatchGuard Agent improper authentication allows unauthenticated remote code execution9.3 Critical
- watchguard agentWatchGuard Agent path traversal allows unauthenticated remote code execution9.4 Critical
- nltkNLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization9.3 Critical
- apache hiveApache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths9.8 Critical
- apache hiveApache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url9.1 Critical
- typo3 extension "powermail"Server-Side Template Injection in extension "powermail" (powermail)9.5 Critical
- typo3 extension "html5 video player vs. powermail"Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)9.3 Critical
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreUnauthenticated Remote Code Execution via Shell Injection in Web Management Interface9.3 Critical
- zephyrproject zephyrStack buffer overflow in OCPP GetConfiguration key parsing9.8 Critical
- nltkNLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization9.4 Critical
- gitpython-developers gitpythonGitPython before 3.1.59 Remote Code Execution via Config Injection9.3 Critical
- getgrav gravGrav CMS before 2.0.16 Origin Validation Bypass via Referer9.3 Critical
- getgrav grav-plugin-loginGrav Login Plugin before 3.9.1 Email Enumeration via Registration9.3 Critical
- getgrav gravGrav Login Plugin before 1.0.16 Privilege Escalation via Unlock9.3 Critical
- vrana adminerAdminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection9.3 Critical
- opensslUntrusted Sender DN Used as Format String in CMP Response Validation9.8 Critical
- No product listedAn issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter...9.8 Critical
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability9.8 Critical
- nexcess the events calendarWordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability9.8 Critical
- wedevs wp project managerWordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability9.8 Critical
- a cpt acpt (pro) - custom post types plugin for wordpress, acpt (pro) - custom post types plugin for wordpress +1 moreWordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability9.8 Critical
- Show moreLoading…