Latest critical vulnerabilities
CVSS 9.0 and up.
- google chromeInteger overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...9.6 Critical
- google chromeIncorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote...9.6 Critical
- google chromeUse after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to...9.6 Critical
- dell system updateDell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a...9.6 Critical
- quasarframework quasarQuasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()10.0 Critical
- payloadcms payloadPayload authentication token field handling issue9.2 Critical
- payloadcms payloadPayload: Unauthorized update to collection documents9.8 Critical
- payloadcms payloadPayload: RCE in Payload Form Builder10.0 Critical
- spip crayons pluginSPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE9.3 Critical
- payloadcms payloadPayload: Field access control bypass on auth collections9.3 Critical
- payloadcms payloadPayload: SQL Injection in SQLite and Postgres9.8 Critical
- @payloadcms plugin-import-export, payloadcms payload +1 morePayload: Prototype pollution in Payload Import Export plugin9.3 Critical
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization...9.6 Critical
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded...9.8 Critical
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded...9.8 Critical
- dell container storage modules (csm), container storage modules +1 moreDell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper...9.9 Critical
- dell container storage modulesDell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for...10.0 Critical
- dell container storage modules, container storage modules (csm) +1 moreDell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing...10.0 Critical
- microsoft msquicMsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL9.1 Critical
- microsoft ufoMicrosoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`9.1 Critical
- kvcache-ai mooncakeMooncake through 0.3.13.post1 Missing Authentication in Store REST Service9.3 Critical
- progress software autonomous rest connector genai agentsOS command injection in Progress Software Autonomous REST Connector GenAI Agents9.6 Critical
- plankaPLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the File Handling component9.8 Critical
- smarty-php smartySmarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache9.2 Critical
- linuxRDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access9.8 Critical
- linuxclk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate9.8 Critical
- linuxdmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()9.8 Critical
- linuxRDMA/siw: Bound fragmented header copies by the remaining length9.8 Critical
- linuxALSA: pcm: set timer->private_data before registering the PCM timer9.8 Critical
- linuxwifi: brcmsmac: fix UAF in brcms_free_timer()9.8 Critical
- linuxwifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length9.8 Critical
- repute infosystems armember premiumWordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability9.3 Critical
- p-themes porto theme - functionalityWordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability9.3 Critical
- weblizar – wordpress themes & plugin newsletter subscription form – user subscriptions form, capture emailWordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability9.3 Critical
- data443 risk mitigation, inc. gdpr framework by data443WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability9.8 Critical
- brewlabs sendpress newslettersWordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability9.3 Critical
- serhii pasyuk gmedia photo galleryWordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability9.3 Critical
- amentotech doctreat coreWordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability10.0 Critical
- amentotech doctreatWordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability10.0 Critical
- radiustheme radius booking — booking calendar for appointments & servicesWordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability9.3 Critical
- elightup meta box aio, meta box aio +1 moreWordPress Meta Box AIO plugin <= 3.7.1 - Privilege Escalation vulnerability9.8 Critical
- amentotech workreap coreWordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability9.9 Critical
- amentotech taskbotWordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability9.9 Critical
- revmakx wp duplicateWordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability9.9 Critical
- amentotech taskbotWordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability9.8 Critical
- bookneticWordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerability9.3 Critical
- kognetiks chatbot for wordpressWordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability10.0 Critical
- Show moreLoading…