# Vulnerabilities published in 2026


- [CVE-2026-17869](https://insights.sbomify.com/CVE-2026-17869/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-17868](https://insights.sbomify.com/CVE-2026-17868/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-17867](https://insights.sbomify.com/CVE-2026-17867/): Security feature bypass in Chrome (high 7.1)
- [CVE-2026-17866](https://insights.sbomify.com/CVE-2026-17866/): Memory corruption in Chrome (medium 5.8)
- [CVE-2026-17865](https://insights.sbomify.com/CVE-2026-17865/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17864](https://insights.sbomify.com/CVE-2026-17864/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-17863](https://insights.sbomify.com/CVE-2026-17863/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-17862](https://insights.sbomify.com/CVE-2026-17862/): Use after free in Chrome (high 7.8)
- [CVE-2026-17861](https://insights.sbomify.com/CVE-2026-17861/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-17860](https://insights.sbomify.com/CVE-2026-17860/): Other in Chrome (low 3.3)
- [CVE-2026-1786](https://insights.sbomify.com/CVE-2026-1786/): Twitter posts to Blog <= 1.11.25 - Missing Authorization to Unauthenticated Plugin Settings Update (medium 6.5)
- [CVE-2026-17859](https://insights.sbomify.com/CVE-2026-17859/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17858](https://insights.sbomify.com/CVE-2026-17858/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17857](https://insights.sbomify.com/CVE-2026-17857/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17856](https://insights.sbomify.com/CVE-2026-17856/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17855](https://insights.sbomify.com/CVE-2026-17855/): Race condition in Chrome (critical 9.6)
- [CVE-2026-17854](https://insights.sbomify.com/CVE-2026-17854/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17853](https://insights.sbomify.com/CVE-2026-17853/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-17852](https://insights.sbomify.com/CVE-2026-17852/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17851](https://insights.sbomify.com/CVE-2026-17851/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17850](https://insights.sbomify.com/CVE-2026-17850/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1785](https://insights.sbomify.com/CVE-2026-1785/): Code Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions (medium 4.3)
- [CVE-2026-17849](https://insights.sbomify.com/CVE-2026-17849/): Other in Chrome (medium 4.3)
- [CVE-2026-17848](https://insights.sbomify.com/CVE-2026-17848/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-17847](https://insights.sbomify.com/CVE-2026-17847/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17846](https://insights.sbomify.com/CVE-2026-17846/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17845](https://insights.sbomify.com/CVE-2026-17845/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-17844](https://insights.sbomify.com/CVE-2026-17844/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17843](https://insights.sbomify.com/CVE-2026-17843/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17842](https://insights.sbomify.com/CVE-2026-17842/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17841](https://insights.sbomify.com/CVE-2026-17841/): Race condition in Chrome (medium 6.5)
- [CVE-2026-17840](https://insights.sbomify.com/CVE-2026-17840/): Other in Chrome (medium 6.5)
- [CVE-2026-1784](https://insights.sbomify.com/CVE-2026-1784/): Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection (high 8.8)
- [CVE-2026-17839](https://insights.sbomify.com/CVE-2026-17839/): Other in Chrome (medium 6.5)
- [CVE-2026-17838](https://insights.sbomify.com/CVE-2026-17838/): Other in Chrome (medium 6.5)
- [CVE-2026-17837](https://insights.sbomify.com/CVE-2026-17837/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17836](https://insights.sbomify.com/CVE-2026-17836/): Use after free in Chrome (high 8.8)
- [CVE-2026-17835](https://insights.sbomify.com/CVE-2026-17835/): Other in Chrome (medium 6.5)
- [CVE-2026-17834](https://insights.sbomify.com/CVE-2026-17834/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17833](https://insights.sbomify.com/CVE-2026-17833/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17832](https://insights.sbomify.com/CVE-2026-17832/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17831](https://insights.sbomify.com/CVE-2026-17831/): Other in Chrome (medium 6.5)
- [CVE-2026-17830](https://insights.sbomify.com/CVE-2026-17830/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17829](https://insights.sbomify.com/CVE-2026-17829/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17828](https://insights.sbomify.com/CVE-2026-17828/): Other in Chrome (medium 6.5)
- [CVE-2026-17827](https://insights.sbomify.com/CVE-2026-17827/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-17826](https://insights.sbomify.com/CVE-2026-17826/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-17825](https://insights.sbomify.com/CVE-2026-17825/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17824](https://insights.sbomify.com/CVE-2026-17824/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17823](https://insights.sbomify.com/CVE-2026-17823/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17822](https://insights.sbomify.com/CVE-2026-17822/): Race condition in Chrome (medium 6.5)
- [CVE-2026-17821](https://insights.sbomify.com/CVE-2026-17821/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17820](https://insights.sbomify.com/CVE-2026-17820/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-1782](https://insights.sbomify.com/CVE-2026-1782/): MetForm Pro <= 3.9.7 - Unauthenticated Payment Amount Manipulation via 'mf-calculation' (medium 5.3)
- [CVE-2026-17819](https://insights.sbomify.com/CVE-2026-17819/): Other in Chrome (medium 6.5)
- [CVE-2026-17818](https://insights.sbomify.com/CVE-2026-17818/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-17817](https://insights.sbomify.com/CVE-2026-17817/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17816](https://insights.sbomify.com/CVE-2026-17816/): Privilege escalation in Chrome (high 7.5)
- [CVE-2026-17815](https://insights.sbomify.com/CVE-2026-17815/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17814](https://insights.sbomify.com/CVE-2026-17814/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17813](https://insights.sbomify.com/CVE-2026-17813/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17812](https://insights.sbomify.com/CVE-2026-17812/): Other in Chrome (medium 5.4)
- [CVE-2026-17811](https://insights.sbomify.com/CVE-2026-17811/): Use after free in Chrome (high 7.1)
- [CVE-2026-17810](https://insights.sbomify.com/CVE-2026-17810/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1781](https://insights.sbomify.com/CVE-2026-1781/): MC4WP: Mailchimp for WordPress <= 4.11.1 - Missing Authorization to Unauthenticated Arbitrary Subscription Deletion (medium 6.5)
- [CVE-2026-17809](https://insights.sbomify.com/CVE-2026-17809/): Security feature bypass in Chrome (medium 5.8)
- [CVE-2026-17808](https://insights.sbomify.com/CVE-2026-17808/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17807](https://insights.sbomify.com/CVE-2026-17807/): Use after free in Chrome (high 8.8)
- [CVE-2026-17806](https://insights.sbomify.com/CVE-2026-17806/): Security feature bypass in Chrome (medium 5.8)
- [CVE-2026-17805](https://insights.sbomify.com/CVE-2026-17805/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17804](https://insights.sbomify.com/CVE-2026-17804/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17803](https://insights.sbomify.com/CVE-2026-17803/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17802](https://insights.sbomify.com/CVE-2026-17802/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17801](https://insights.sbomify.com/CVE-2026-17801/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17800](https://insights.sbomify.com/CVE-2026-17800/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1780](https://insights.sbomify.com/CVE-2026-1780/): [CR]Paid Link Manager <= 0.5 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2026-17799](https://insights.sbomify.com/CVE-2026-17799/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-17798](https://insights.sbomify.com/CVE-2026-17798/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17797](https://insights.sbomify.com/CVE-2026-17797/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-17796](https://insights.sbomify.com/CVE-2026-17796/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17795](https://insights.sbomify.com/CVE-2026-17795/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17794](https://insights.sbomify.com/CVE-2026-17794/): Other in Chrome (medium 4.3)
- [CVE-2026-17793](https://insights.sbomify.com/CVE-2026-17793/): Other in Chrome (medium 6.5)
- [CVE-2026-17792](https://insights.sbomify.com/CVE-2026-17792/): Other in Chrome (medium 6.5)
- [CVE-2026-17791](https://insights.sbomify.com/CVE-2026-17791/): Other in Chrome (medium 6.5)
- [CVE-2026-17790](https://insights.sbomify.com/CVE-2026-17790/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1779](https://insights.sbomify.com/CVE-2026-1779/): User Registration & Membership <= 5.1.2 - Authentication Bypass (high 8.1)
- [CVE-2026-17789](https://insights.sbomify.com/CVE-2026-17789/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17788](https://insights.sbomify.com/CVE-2026-17788/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17787](https://insights.sbomify.com/CVE-2026-17787/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17786](https://insights.sbomify.com/CVE-2026-17786/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-17785](https://insights.sbomify.com/CVE-2026-17785/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17784](https://insights.sbomify.com/CVE-2026-17784/): Use after free in Chrome (high 8.8)
- [CVE-2026-17783](https://insights.sbomify.com/CVE-2026-17783/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17782](https://insights.sbomify.com/CVE-2026-17782/): Other in Chrome (medium 4.3)
- [CVE-2026-17781](https://insights.sbomify.com/CVE-2026-17781/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17780](https://insights.sbomify.com/CVE-2026-17780/): Security feature bypass in Chrome (medium 6.3)
- [CVE-2026-1778](https://insights.sbomify.com/CVE-2026-1778/): TLS disabled by default in select aws/sagemaker-python-sdk configurations (high 8.2)
- [CVE-2026-17779](https://insights.sbomify.com/CVE-2026-17779/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-17778](https://insights.sbomify.com/CVE-2026-17778/): Use after free in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/838/