# Vulnerabilities published in 2026


- [CVE-2026-7904](https://insights.sbomify.com/CVE-2026-7904/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-79039](https://insights.sbomify.com/CVE-2026-79039/): Use after free in Chrome (high 8.1)
- [CVE-2026-79038](https://insights.sbomify.com/CVE-2026-79038/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-79035](https://insights.sbomify.com/CVE-2026-79035/): A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to (medium 6.1)
- [CVE-2026-79034](https://insights.sbomify.com/CVE-2026-79034/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-79033](https://insights.sbomify.com/CVE-2026-79033/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-79032](https://insights.sbomify.com/CVE-2026-79032/): Security feature bypass in Chrome (medium 6.8)
- [CVE-2026-79031](https://insights.sbomify.com/CVE-2026-79031/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-79030](https://insights.sbomify.com/CVE-2026-79030/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-7903](https://insights.sbomify.com/CVE-2026-7903/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-79028](https://insights.sbomify.com/CVE-2026-79028/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-79027](https://insights.sbomify.com/CVE-2026-79027/): Use after free in Chrome (high 8.1)
- [CVE-2026-79026](https://insights.sbomify.com/CVE-2026-79026/): Use after free in Chrome (critical 9.6)
- [CVE-2026-79025](https://insights.sbomify.com/CVE-2026-79025/): Security feature bypass in Chrome (medium 4.2)
- [CVE-2026-79024](https://insights.sbomify.com/CVE-2026-79024/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-79023](https://insights.sbomify.com/CVE-2026-79023/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-79022](https://insights.sbomify.com/CVE-2026-79022/): Other in Chrome (medium 4.3)
- [CVE-2026-79021](https://insights.sbomify.com/CVE-2026-79021/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-79020](https://insights.sbomify.com/CVE-2026-79020/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-7902](https://insights.sbomify.com/CVE-2026-7902/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-79019](https://insights.sbomify.com/CVE-2026-79019/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-79018](https://insights.sbomify.com/CVE-2026-79018/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-79017](https://insights.sbomify.com/CVE-2026-79017/): Race condition in Chrome (medium 6.5)
- [CVE-2026-79016](https://insights.sbomify.com/CVE-2026-79016/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-79015](https://insights.sbomify.com/CVE-2026-79015/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-79014](https://insights.sbomify.com/CVE-2026-79014/): Race condition in Chrome (medium 4.3)
- [CVE-2026-79013](https://insights.sbomify.com/CVE-2026-79013/): Information disclosure in Chrome (medium 5.9)
- [CVE-2026-79012](https://insights.sbomify.com/CVE-2026-79012/): Use after free in Chrome (critical 9.6)
- [CVE-2026-79011](https://insights.sbomify.com/CVE-2026-79011/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-79010](https://insights.sbomify.com/CVE-2026-79010/): Use after free in Chrome (medium 4.3)
- [CVE-2026-7901](https://insights.sbomify.com/CVE-2026-7901/): Use after free in Chrome (high 8.8)
- [CVE-2026-79009](https://insights.sbomify.com/CVE-2026-79009/): Other in Chrome (medium 4.3)
- [CVE-2026-79008](https://insights.sbomify.com/CVE-2026-79008/): Other in Chrome (high 8.3)
- [CVE-2026-79007](https://insights.sbomify.com/CVE-2026-79007/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-79006](https://insights.sbomify.com/CVE-2026-79006/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-79005](https://insights.sbomify.com/CVE-2026-79005/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-79004](https://insights.sbomify.com/CVE-2026-79004/): Memory corruption in Chrome (low 3.4)
- [CVE-2026-79003](https://insights.sbomify.com/CVE-2026-79003/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-79002](https://insights.sbomify.com/CVE-2026-79002/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-79001](https://insights.sbomify.com/CVE-2026-79001/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-79000](https://insights.sbomify.com/CVE-2026-79000/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-7900](https://insights.sbomify.com/CVE-2026-7900/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-78999](https://insights.sbomify.com/CVE-2026-78999/): Privilege escalation in Chrome (high 8.3)
- [CVE-2026-78997](https://insights.sbomify.com/CVE-2026-78997/): UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows (critical 9.3)
- [CVE-2026-78991](https://insights.sbomify.com/CVE-2026-78991/): Race condition in Chrome (medium 5.3)
- [CVE-2026-78990](https://insights.sbomify.com/CVE-2026-78990/): Use after free in Chrome (high 8.8)
- [CVE-2026-7899](https://insights.sbomify.com/CVE-2026-7899/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-78989](https://insights.sbomify.com/CVE-2026-78989/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-78987](https://insights.sbomify.com/CVE-2026-78987/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-78986](https://insights.sbomify.com/CVE-2026-78986/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-78985](https://insights.sbomify.com/CVE-2026-78985/): Other in Chrome (critical 9.6)
- [CVE-2026-78984](https://insights.sbomify.com/CVE-2026-78984/): Information disclosure in Chrome (low 3.4)
- [CVE-2026-78983](https://insights.sbomify.com/CVE-2026-78983/): Use after free in Chrome (high 8.3)
- [CVE-2026-78981](https://insights.sbomify.com/CVE-2026-78981/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-78980](https://insights.sbomify.com/CVE-2026-78980/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-7898](https://insights.sbomify.com/CVE-2026-7898/): Use after free in Chrome (high 8.8)
- [CVE-2026-78979](https://insights.sbomify.com/CVE-2026-78979/): Race condition in Chrome (medium 4.3)
- [CVE-2026-78978](https://insights.sbomify.com/CVE-2026-78978/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-78977](https://insights.sbomify.com/CVE-2026-78977/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-78976](https://insights.sbomify.com/CVE-2026-78976/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78975](https://insights.sbomify.com/CVE-2026-78975/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-78974](https://insights.sbomify.com/CVE-2026-78974/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-78971](https://insights.sbomify.com/CVE-2026-78971/): In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any com (medium 4.6)
- [CVE-2026-78970](https://insights.sbomify.com/CVE-2026-78970/): JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. (medium 6.5)
- [CVE-2026-7897](https://insights.sbomify.com/CVE-2026-7897/): Use after free in Chrome (high 7.5)
- [CVE-2026-78969](https://insights.sbomify.com/CVE-2026-78969/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-78968](https://insights.sbomify.com/CVE-2026-78968/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-78967](https://insights.sbomify.com/CVE-2026-78967/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-78966](https://insights.sbomify.com/CVE-2026-78966/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78965](https://insights.sbomify.com/CVE-2026-78965/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-78964](https://insights.sbomify.com/CVE-2026-78964/): Use after free in Chrome (critical 9.6)
- [CVE-2026-78963](https://insights.sbomify.com/CVE-2026-78963/): Other in Chrome (high 8.8)
- [CVE-2026-78962](https://insights.sbomify.com/CVE-2026-78962/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-78961](https://insights.sbomify.com/CVE-2026-78961/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78960](https://insights.sbomify.com/CVE-2026-78960/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-7896](https://insights.sbomify.com/CVE-2026-7896/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-78959](https://insights.sbomify.com/CVE-2026-78959/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-78958](https://insights.sbomify.com/CVE-2026-78958/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-78957](https://insights.sbomify.com/CVE-2026-78957/): Information disclosure in Chrome (medium 5.5)
- [CVE-2026-78956](https://insights.sbomify.com/CVE-2026-78956/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-78955](https://insights.sbomify.com/CVE-2026-78955/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-78954](https://insights.sbomify.com/CVE-2026-78954/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78953](https://insights.sbomify.com/CVE-2026-78953/): Missing authorization in Chrome (low 3.1)
- [CVE-2026-78952](https://insights.sbomify.com/CVE-2026-78952/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-78951](https://insights.sbomify.com/CVE-2026-78951/): Use after free in Chrome (critical 9.6)
- [CVE-2026-78950](https://insights.sbomify.com/CVE-2026-78950/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-78949](https://insights.sbomify.com/CVE-2026-78949/): Information disclosure in Chrome (low 2.9)
- [CVE-2026-78948](https://insights.sbomify.com/CVE-2026-78948/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-78947](https://insights.sbomify.com/CVE-2026-78947/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-78946](https://insights.sbomify.com/CVE-2026-78946/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78945](https://insights.sbomify.com/CVE-2026-78945/): Use after free in Chrome (critical 9.6)
- [CVE-2026-78944](https://insights.sbomify.com/CVE-2026-78944/): Use after free in Chrome (high 8.8)
- [CVE-2026-78943](https://insights.sbomify.com/CVE-2026-78943/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-78942](https://insights.sbomify.com/CVE-2026-78942/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78941](https://insights.sbomify.com/CVE-2026-78941/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-78940](https://insights.sbomify.com/CVE-2026-78940/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-78939](https://insights.sbomify.com/CVE-2026-78939/): Use after free in Chrome (critical 9.6)
- [CVE-2026-78938](https://insights.sbomify.com/CVE-2026-78938/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-78937](https://insights.sbomify.com/CVE-2026-78937/): Use after free in Chrome (critical 9.6)
- [CVE-2026-78936](https://insights.sbomify.com/CVE-2026-78936/): Information disclosure in Chrome (low 2.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/359/