Latest critical vulnerabilities
CVSS 9.0 and up.
- apache nutchApache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)9.1 Critical
- apache impalaApache Impala: SAML authentication bypass via forged bearer token9.8 Critical
- perforce akanaUnauthenticated Remote Code Execution in Akana API Platform10.0 Critical
- paytr payment and electronic money institution inc. virtual pos iframe api whmcs moduleClient IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module9.1 Critical
- google cloud agent development kit (adk) for pythonRemote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist10.0 Critical
- samsung android, samsung mobile devices +1 moreUse after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to...9.3 Critical
- samsung android, samsung mobile devices +1 moreHeap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026...9.2 Critical
- samsung android, samsung mobile devices +1 moreHeap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release...9.2 Critical
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote...9.8 Critical
- google chromeServer-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote...9.8 Critical
- google chromeUse after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeUse after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...9.6 Critical
- google chromeOut of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeType confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeUse after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeNumeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeImproper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a...9.6 Critical
- google chromeUse after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeInteger overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeMissing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a...9.8 Critical
- google chromeIncorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a...9.0 Critical
- google chromeIncorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a...9.6 Critical
- google chromeUse after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeUse after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeUse after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeImproper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a...9.6 Critical
- google chromeBuffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeOut of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeOut of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a...9.6 Critical
- google chromeUse after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeIncorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeBuffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeOut of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeUse after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...9.6 Critical
- No product listedAn arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0....9.8 Critical
- No product listedAn issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded...9.8 Critical
- No product listedAn issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically...9.8 Critical
- openidc cjoseOpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption9.1 Critical
- opnsense corentp: write path traversal9.0 Critical
- auth0 ad/ldap connectorStored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector9.0 Critical
- eclipse foundation dittoIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto...9.2 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)9.9 Critical
- Show moreLoading…