# Vulnerabilities published in 2026


- [CVE-2026-87513](https://insights.sbomify.com/CVE-2026-87513/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87512](https://insights.sbomify.com/CVE-2026-87512/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87511](https://insights.sbomify.com/CVE-2026-87511/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-87510](https://insights.sbomify.com/CVE-2026-87510/): Other in Chrome (high 8.3)
- [CVE-2026-8751](https://insights.sbomify.com/CVE-2026-8751/): h2oai h2o-3 JAR Model.java importBinaryModel deserialization (medium 6.9)
- [CVE-2026-87509](https://insights.sbomify.com/CVE-2026-87509/): Missing authorization in Chrome (high 8.1)
- [CVE-2026-87508](https://insights.sbomify.com/CVE-2026-87508/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87507](https://insights.sbomify.com/CVE-2026-87507/): Other in Chrome (medium 5.4)
- [CVE-2026-87506](https://insights.sbomify.com/CVE-2026-87506/): Privilege escalation in Chrome (high 8.3)
- [CVE-2026-87505](https://insights.sbomify.com/CVE-2026-87505/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-87504](https://insights.sbomify.com/CVE-2026-87504/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87503](https://insights.sbomify.com/CVE-2026-87503/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87502](https://insights.sbomify.com/CVE-2026-87502/): Other in Chrome (medium 4.2)
- [CVE-2026-87501](https://insights.sbomify.com/CVE-2026-87501/): Other in Chrome (medium 5.4)
- [CVE-2026-87500](https://insights.sbomify.com/CVE-2026-87500/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-8750](https://insights.sbomify.com/CVE-2026-8750/): h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure (medium 6.9)
- [CVE-2026-87499](https://insights.sbomify.com/CVE-2026-87499/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-87498](https://insights.sbomify.com/CVE-2026-87498/): Missing authorization in Chrome (low 3.1)
- [CVE-2026-87497](https://insights.sbomify.com/CVE-2026-87497/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-87496](https://insights.sbomify.com/CVE-2026-87496/): Other in Chrome (medium 5.4)
- [CVE-2026-87495](https://insights.sbomify.com/CVE-2026-87495/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-87494](https://insights.sbomify.com/CVE-2026-87494/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87493](https://insights.sbomify.com/CVE-2026-87493/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87492](https://insights.sbomify.com/CVE-2026-87492/): Missing authorization in Chrome (critical 9.6)
- [CVE-2026-87491](https://insights.sbomify.com/CVE-2026-87491/): Google Chromium V8 Out of Bounds Write (high 8.8, exploited in the wild)
- [CVE-2026-87490](https://insights.sbomify.com/CVE-2026-87490/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87489](https://insights.sbomify.com/CVE-2026-87489/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-87488](https://insights.sbomify.com/CVE-2026-87488/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87487](https://insights.sbomify.com/CVE-2026-87487/): Missing authorization in Chrome (high 8.3)
- [CVE-2026-87486](https://insights.sbomify.com/CVE-2026-87486/): Other in Chrome (medium 4.0)
- [CVE-2026-87485](https://insights.sbomify.com/CVE-2026-87485/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-87484](https://insights.sbomify.com/CVE-2026-87484/): Other in Chrome (medium 5.4)
- [CVE-2026-87483](https://insights.sbomify.com/CVE-2026-87483/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87482](https://insights.sbomify.com/CVE-2026-87482/): Information disclosure in Chrome (medium 5.9)
- [CVE-2026-87481](https://insights.sbomify.com/CVE-2026-87481/): Missing authorization in Chrome (high 8.3)
- [CVE-2026-87480](https://insights.sbomify.com/CVE-2026-87480/): Use after free in Chrome (high 8.3)
- [CVE-2026-87479](https://insights.sbomify.com/CVE-2026-87479/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-87478](https://insights.sbomify.com/CVE-2026-87478/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87477](https://insights.sbomify.com/CVE-2026-87477/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87476](https://insights.sbomify.com/CVE-2026-87476/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87475](https://insights.sbomify.com/CVE-2026-87475/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87474](https://insights.sbomify.com/CVE-2026-87474/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87473](https://insights.sbomify.com/CVE-2026-87473/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87472](https://insights.sbomify.com/CVE-2026-87472/): Other in Chrome (medium 4.2)
- [CVE-2026-87471](https://insights.sbomify.com/CVE-2026-87471/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-87470](https://insights.sbomify.com/CVE-2026-87470/): Other in Chrome (critical 9.6)
- [CVE-2026-8747](https://insights.sbomify.com/CVE-2026-8747/): Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization (medium 5.3)
- [CVE-2026-87469](https://insights.sbomify.com/CVE-2026-87469/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87468](https://insights.sbomify.com/CVE-2026-87468/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87467](https://insights.sbomify.com/CVE-2026-87467/): Race condition in Chrome (high 8.1)
- [CVE-2026-87466](https://insights.sbomify.com/CVE-2026-87466/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87465](https://insights.sbomify.com/CVE-2026-87465/): Missing authorization in Chrome (medium 4.2)
- [CVE-2026-87464](https://insights.sbomify.com/CVE-2026-87464/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87463](https://insights.sbomify.com/CVE-2026-87463/): Security feature bypass in Chrome (medium 4.8)
- [CVE-2026-87462](https://insights.sbomify.com/CVE-2026-87462/): Other in Chrome (medium 5.4)
- [CVE-2026-87461](https://insights.sbomify.com/CVE-2026-87461/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-87460](https://insights.sbomify.com/CVE-2026-87460/): Use after free in Chrome (high 8.8)
- [CVE-2026-8746](https://insights.sbomify.com/CVE-2026-8746/): Open5GS NRF nghttp2-server.c discover_handler use after free (medium 5.3)
- [CVE-2026-87459](https://insights.sbomify.com/CVE-2026-87459/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87458](https://insights.sbomify.com/CVE-2026-87458/): Other in Chrome (medium 5.4)
- [CVE-2026-87457](https://insights.sbomify.com/CVE-2026-87457/): Race condition in Chrome (high 8.1)
- [CVE-2026-87456](https://insights.sbomify.com/CVE-2026-87456/): Information disclosure in Chrome (low 3.4)
- [CVE-2026-87455](https://insights.sbomify.com/CVE-2026-87455/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87454](https://insights.sbomify.com/CVE-2026-87454/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87453](https://insights.sbomify.com/CVE-2026-87453/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-87452](https://insights.sbomify.com/CVE-2026-87452/): Missing authorization in Chrome (low 3.1)
- [CVE-2026-87451](https://insights.sbomify.com/CVE-2026-87451/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-87450](https://insights.sbomify.com/CVE-2026-87450/): Missing authorization in Chrome (high 7.5)
- [CVE-2026-8745](https://insights.sbomify.com/CVE-2026-8745/): Open5GS AUSF nausf-handler.c ogs_timer_add denial of service (medium 5.3)
- [CVE-2026-87449](https://insights.sbomify.com/CVE-2026-87449/): Cross-site request forgery in Chrome (medium 4.3)
- [CVE-2026-87448](https://insights.sbomify.com/CVE-2026-87448/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87447](https://insights.sbomify.com/CVE-2026-87447/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87446](https://insights.sbomify.com/CVE-2026-87446/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87445](https://insights.sbomify.com/CVE-2026-87445/): Other in Chrome (medium 5.4)
- [CVE-2026-87444](https://insights.sbomify.com/CVE-2026-87444/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-87443](https://insights.sbomify.com/CVE-2026-87443/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87442](https://insights.sbomify.com/CVE-2026-87442/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-87441](https://insights.sbomify.com/CVE-2026-87441/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87440](https://insights.sbomify.com/CVE-2026-87440/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-8744](https://insights.sbomify.com/CVE-2026-8744/): Open5GS NRF context.c ogs_sbi_nf_service_add denial of service (medium 5.3)
- [CVE-2026-87439](https://insights.sbomify.com/CVE-2026-87439/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-87438](https://insights.sbomify.com/CVE-2026-87438/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-87437](https://insights.sbomify.com/CVE-2026-87437/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87436](https://insights.sbomify.com/CVE-2026-87436/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87435](https://insights.sbomify.com/CVE-2026-87435/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-87434](https://insights.sbomify.com/CVE-2026-87434/): Missing authorization in Chrome (low 3.1)
- [CVE-2026-87433](https://insights.sbomify.com/CVE-2026-87433/): Race condition in Chrome (high 8.8)
- [CVE-2026-87432](https://insights.sbomify.com/CVE-2026-87432/): Security feature bypass in Chrome (medium 4.2)
- [CVE-2026-87431](https://insights.sbomify.com/CVE-2026-87431/): Missing authorization in Chrome (high 7.5)
- [CVE-2026-87430](https://insights.sbomify.com/CVE-2026-87430/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-8743](https://insights.sbomify.com/CVE-2026-8743/): Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization (medium 5.3)
- [CVE-2026-87429](https://insights.sbomify.com/CVE-2026-87429/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87428](https://insights.sbomify.com/CVE-2026-87428/): Information disclosure in Brocade Active Support Connectivity Gateway (high 8.4)
- [CVE-2026-87426](https://insights.sbomify.com/CVE-2026-87426/): Information disclosure in Brocade Active Support Connectivity Gateway (medium 5.3)
- [CVE-2026-87425](https://insights.sbomify.com/CVE-2026-87425/): Security feature bypass in Brocade Active Support Connectivity Gateway (high 7.6)
- [CVE-2026-87424](https://insights.sbomify.com/CVE-2026-87424/): Hardcoded credentials in Brocade Active Support Connectivity Gateway (high 8.6)
- [CVE-2026-87423](https://insights.sbomify.com/CVE-2026-87423/): Privilege escalation in Oracle Solaris (medium 4.5)
- [CVE-2026-87422](https://insights.sbomify.com/CVE-2026-87422/): Missing authorization in Oracle Solaris (low 2.5)
- [CVE-2026-87421](https://insights.sbomify.com/CVE-2026-87421/): Missing authorization in Oracle Solaris (high 7.1)
- [CVE-2026-87420](https://insights.sbomify.com/CVE-2026-87420/): Missing authorization in Oracle Service Bus (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/289/