# Vulnerabilities published in 2026


- [CVE-2026-5914](https://insights.sbomify.com/CVE-2026-5914/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-59139](https://insights.sbomify.com/CVE-2026-59139/): Memory corruption in Data::ReqRep::Shared (critical 9.1)
- [CVE-2026-59138](https://insights.sbomify.com/CVE-2026-59138/): Microsoft Remote Registry Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-59137](https://insights.sbomify.com/CVE-2026-59137/): Windows Event Logging Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-59136](https://insights.sbomify.com/CVE-2026-59136/): Microsoft COM for Windows Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-59135](https://insights.sbomify.com/CVE-2026-59135/): Microsoft Windows Search Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-59134](https://insights.sbomify.com/CVE-2026-59134/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-59133](https://insights.sbomify.com/CVE-2026-59133/): Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-59132](https://insights.sbomify.com/CVE-2026-59132/): Windows TCP/IP Denial of Service Vulnerability (high 7.5)
- [CVE-2026-59131](https://insights.sbomify.com/CVE-2026-59131/): AMD Zen Information Disclosure Vulnerability (medium 5.6)
- [CVE-2026-59130](https://insights.sbomify.com/CVE-2026-59130/): AMD Zen Information Disclosure Vulnerability (medium 5.6)
- [CVE-2026-5913](https://insights.sbomify.com/CVE-2026-5913/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-59128](https://insights.sbomify.com/CVE-2026-59128/): Windows Encrypting File System (EFS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-59127](https://insights.sbomify.com/CVE-2026-59127/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-59126](https://insights.sbomify.com/CVE-2026-59126/): Windows Event Logging Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-59125](https://insights.sbomify.com/CVE-2026-59125/): Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability (high 7.0)
- [CVE-2026-59124](https://insights.sbomify.com/CVE-2026-59124/): Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-59122](https://insights.sbomify.com/CVE-2026-59122/): Windows Telephony Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-5912](https://insights.sbomify.com/CVE-2026-5912/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-59119](https://insights.sbomify.com/CVE-2026-59119/): PowerShell Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2026-59118](https://insights.sbomify.com/CVE-2026-59118/): Copilot Cowork Elevation of Privilege Vulnerability (critical 9.3)
- [CVE-2026-59117](https://insights.sbomify.com/CVE-2026-59117/): Windows Terminal Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-59116](https://insights.sbomify.com/CVE-2026-59116/): Windows Remote Desktop Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2026-59115](https://insights.sbomify.com/CVE-2026-59115/): Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-59113](https://insights.sbomify.com/CVE-2026-59113/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-59112](https://insights.sbomify.com/CVE-2026-59112/): Signature validation vulnerability affecting DigiDoc applications (medium 4.4)
- [CVE-2026-59111](https://insights.sbomify.com/CVE-2026-59111/): Command Injection vulnerability in eObčanka-Identifikace (critical 9.3)
- [CVE-2026-5911](https://insights.sbomify.com/CVE-2026-5911/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-59109](https://insights.sbomify.com/CVE-2026-59109/): Zalktis: SQL injection via partner-controlled fields in imported e-invoices (high 8.7)
- [CVE-2026-59107](https://insights.sbomify.com/CVE-2026-59107/): Shared SSH Authentication Key in vSolution Matrix File Sharing (critical 9.2)
- [CVE-2026-59106](https://insights.sbomify.com/CVE-2026-59106/): Unauthenticated RCE Vulnerability in WolfProt interface implementation (critical 9.3)
- [CVE-2026-59102](https://insights.sbomify.com/CVE-2026-59102/): Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering (low 2.1)
- [CVE-2026-59101](https://insights.sbomify.com/CVE-2026-59101/): AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader (medium 6.9)
- [CVE-2026-59100](https://insights.sbomify.com/CVE-2026-59100/): LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations (low 2.3)
- [CVE-2026-5910](https://insights.sbomify.com/CVE-2026-5910/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-59099](https://insights.sbomify.com/CVE-2026-59099/): Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure (critical 9.3)
- [CVE-2026-59098](https://insights.sbomify.com/CVE-2026-59098/): LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search (high 7.1)
- [CVE-2026-59097](https://insights.sbomify.com/CVE-2026-59097/): Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets (medium 6.9)
- [CVE-2026-59096](https://insights.sbomify.com/CVE-2026-59096/): Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host (high 8.2)
- [CVE-2026-59095](https://insights.sbomify.com/CVE-2026-59095/): LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl (high 8.3)
- [CVE-2026-59094](https://insights.sbomify.com/CVE-2026-59094/): Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store (high 8.7)
- [CVE-2026-59093](https://insights.sbomify.com/CVE-2026-59093/): Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment (high 8.7)
- [CVE-2026-59092](https://insights.sbomify.com/CVE-2026-59092/): JuiceFS - Authentication Bypass via pprof and metrics Endpoints (high 7.0)
- [CVE-2026-59091](https://insights.sbomify.com/CVE-2026-59091/): Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file (high 7.3)
- [CVE-2026-59090](https://insights.sbomify.com/CVE-2026-59090/): Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow (high 8.4)
- [CVE-2026-5909](https://insights.sbomify.com/CVE-2026-5909/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-59089](https://insights.sbomify.com/CVE-2026-59089/): Gimp: gimp: denial of service via integer overflow in playstation tim loader (medium 5.5)
- [CVE-2026-59088](https://insights.sbomify.com/CVE-2026-59088/): Gimp: gimp: denial of service via signed integer overflow in fli file processing (medium 5.5)
- [CVE-2026-59087](https://insights.sbomify.com/CVE-2026-59087/): Memory corruption in Red Hat Enterprise Linux 6 (high 7.8)
- [CVE-2026-59086](https://insights.sbomify.com/CVE-2026-59086/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-59085](https://insights.sbomify.com/CVE-2026-59085/): Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module (critical 9.1)
- [CVE-2026-59084](https://insights.sbomify.com/CVE-2026-59084/): Apache Tomcat: EncryptInterceptor requirements not clearly documented (critical 9.1)
- [CVE-2026-59083](https://insights.sbomify.com/CVE-2026-59083/): Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass (critical 9.1)
- [CVE-2026-5908](https://insights.sbomify.com/CVE-2026-5908/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-5907](https://insights.sbomify.com/CVE-2026-5907/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-5906](https://insights.sbomify.com/CVE-2026-5906/): Other in Chrome (medium 4.3)
- [CVE-2026-5905](https://insights.sbomify.com/CVE-2026-5905/): Other in Chrome (medium 6.5)
- [CVE-2026-5903](https://insights.sbomify.com/CVE-2026-5903/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-5902](https://insights.sbomify.com/CVE-2026-5902/): Race condition in Chrome (critical 9.8)
- [CVE-2026-5901](https://insights.sbomify.com/CVE-2026-5901/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-5900](https://insights.sbomify.com/CVE-2026-5900/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-5899](https://insights.sbomify.com/CVE-2026-5899/): Security feature bypass in Chrome (medium 6.1)
- [CVE-2026-5898](https://insights.sbomify.com/CVE-2026-5898/): Other in Chrome (medium 4.3)
- [CVE-2026-5897](https://insights.sbomify.com/CVE-2026-5897/): Other in Chrome (medium 4.3)
- [CVE-2026-5896](https://insights.sbomify.com/CVE-2026-5896/): Security feature bypass in Chrome (medium 6.1)
- [CVE-2026-5895](https://insights.sbomify.com/CVE-2026-5895/): Other in Chrome (medium 5.4)
- [CVE-2026-58941](https://insights.sbomify.com/CVE-2026-58941/): Memory corruption in Android (high 7.8)
- [CVE-2026-5894](https://insights.sbomify.com/CVE-2026-5894/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-5893](https://insights.sbomify.com/CVE-2026-5893/): Race condition in Chrome (medium 6.8)
- [CVE-2026-5892](https://insights.sbomify.com/CVE-2026-5892/): Security feature bypass in Chrome (medium 6.6)
- [CVE-2026-5891](https://insights.sbomify.com/CVE-2026-5891/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-5890](https://insights.sbomify.com/CVE-2026-5890/): Race condition in Chrome (high 7.5)
- [CVE-2026-5889](https://insights.sbomify.com/CVE-2026-5889/): Weak cryptography in Chrome (medium 4.3)
- [CVE-2026-58880](https://insights.sbomify.com/CVE-2026-58880/): Race condition in Android (high 7.0)
- [CVE-2026-5888](https://insights.sbomify.com/CVE-2026-5888/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-58874](https://insights.sbomify.com/CVE-2026-58874/): Missing authorization in Android (high 7.8)
- [CVE-2026-5887](https://insights.sbomify.com/CVE-2026-5887/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-58865](https://insights.sbomify.com/CVE-2026-58865/): Denial of service in Android (high 7.5)
- [CVE-2026-5886](https://insights.sbomify.com/CVE-2026-5886/): Memory corruption in Chrome (medium 5.3)
- [CVE-2026-58859](https://insights.sbomify.com/CVE-2026-58859/): Denial of service in Android (high 7.8)
- [CVE-2026-58856](https://insights.sbomify.com/CVE-2026-58856/): Memory corruption in Android (low 3.3)
- [CVE-2026-58854](https://insights.sbomify.com/CVE-2026-58854/): Memory corruption in Android (high 7.8)
- [CVE-2026-5885](https://insights.sbomify.com/CVE-2026-5885/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-58848](https://insights.sbomify.com/CVE-2026-58848/): Race condition in Android (high 7.0)
- [CVE-2026-58846](https://insights.sbomify.com/CVE-2026-58846/): Use after free in Android (high 7.8)
- [CVE-2026-58841](https://insights.sbomify.com/CVE-2026-58841/): Privilege escalation in Android (high 7.8)
- [CVE-2026-5884](https://insights.sbomify.com/CVE-2026-5884/): Code injection in Chrome (high 8.8)
- [CVE-2026-58839](https://insights.sbomify.com/CVE-2026-58839/): Memory corruption in Android (high 7.8)
- [CVE-2026-58835](https://insights.sbomify.com/CVE-2026-58835/): Memory corruption in Android (high 8.8)
- [CVE-2026-58834](https://insights.sbomify.com/CVE-2026-58834/): Denial of service in Android (medium 5.5)
- [CVE-2026-5883](https://insights.sbomify.com/CVE-2026-5883/): Use after free in Chrome (high 8.8)
- [CVE-2026-58823](https://insights.sbomify.com/CVE-2026-58823/): Memory corruption in Android (high 7.8)
- [CVE-2026-58822](https://insights.sbomify.com/CVE-2026-58822/): Memory corruption in Android (critical 9.8)
- [CVE-2026-58820](https://insights.sbomify.com/CVE-2026-58820/): Integer overflow in Android (high 7.8)
- [CVE-2026-5882](https://insights.sbomify.com/CVE-2026-5882/): Other in Chrome (medium 4.3)
- [CVE-2026-58815](https://insights.sbomify.com/CVE-2026-58815/): Memory corruption in Android (high 7.8)
- [CVE-2026-5881](https://insights.sbomify.com/CVE-2026-5881/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-5880](https://insights.sbomify.com/CVE-2026-5880/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-5879](https://insights.sbomify.com/CVE-2026-5879/): Other in Chrome (high 8.8)
- [CVE-2026-5878](https://insights.sbomify.com/CVE-2026-5878/): Other in Chrome (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/515/