# Vulnerabilities published in 2026


- [CVE-2026-17777](https://insights.sbomify.com/CVE-2026-17777/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17776](https://insights.sbomify.com/CVE-2026-17776/): Security feature bypass in Chrome (medium 5.8)
- [CVE-2026-17775](https://insights.sbomify.com/CVE-2026-17775/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17774](https://insights.sbomify.com/CVE-2026-17774/): Memory corruption in Chrome (high 7.5)
- [CVE-2026-17773](https://insights.sbomify.com/CVE-2026-17773/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17772](https://insights.sbomify.com/CVE-2026-17772/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-17771](https://insights.sbomify.com/CVE-2026-17771/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17770](https://insights.sbomify.com/CVE-2026-17770/): Memory corruption in Chrome (medium 5.8)
- [CVE-2026-1777](https://insights.sbomify.com/CVE-2026-1777/): Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk (high 8.5)
- [CVE-2026-17769](https://insights.sbomify.com/CVE-2026-17769/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17768](https://insights.sbomify.com/CVE-2026-17768/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17767](https://insights.sbomify.com/CVE-2026-17767/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17766](https://insights.sbomify.com/CVE-2026-17766/): Information disclosure in Chrome (low 3.3)
- [CVE-2026-17765](https://insights.sbomify.com/CVE-2026-17765/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17764](https://insights.sbomify.com/CVE-2026-17764/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17763](https://insights.sbomify.com/CVE-2026-17763/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17762](https://insights.sbomify.com/CVE-2026-17762/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17761](https://insights.sbomify.com/CVE-2026-17761/): Cross-site scripting in Chrome (medium 5.4)
- [CVE-2026-17760](https://insights.sbomify.com/CVE-2026-17760/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1776](https://insights.sbomify.com/CVE-2026-1776/): Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read (medium 6.0)
- [CVE-2026-17759](https://insights.sbomify.com/CVE-2026-17759/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17758](https://insights.sbomify.com/CVE-2026-17758/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17757](https://insights.sbomify.com/CVE-2026-17757/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17756](https://insights.sbomify.com/CVE-2026-17756/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17755](https://insights.sbomify.com/CVE-2026-17755/): Other in Chrome (medium 4.3)
- [CVE-2026-17754](https://insights.sbomify.com/CVE-2026-17754/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17753](https://insights.sbomify.com/CVE-2026-17753/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17752](https://insights.sbomify.com/CVE-2026-17752/): Use after free in Chrome (high 8.8)
- [CVE-2026-17751](https://insights.sbomify.com/CVE-2026-17751/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-17750](https://insights.sbomify.com/CVE-2026-17750/): Use after free in Chrome (high 7.1)
- [CVE-2026-1775](https://insights.sbomify.com/CVE-2026-1775/): Missing Authentication for Critical Function in Labkotec LID-3300IP (high 8.8)
- [CVE-2026-17749](https://insights.sbomify.com/CVE-2026-17749/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17748](https://insights.sbomify.com/CVE-2026-17748/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17747](https://insights.sbomify.com/CVE-2026-17747/): Other in Chrome (medium 4.2)
- [CVE-2026-17746](https://insights.sbomify.com/CVE-2026-17746/): Use after free in Chrome (medium 5.8)
- [CVE-2026-17745](https://insights.sbomify.com/CVE-2026-17745/): Memory corruption in Chrome (medium 5.8)
- [CVE-2026-17744](https://insights.sbomify.com/CVE-2026-17744/): Privilege escalation in Chrome (high 7.1)
- [CVE-2026-17743](https://insights.sbomify.com/CVE-2026-17743/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17742](https://insights.sbomify.com/CVE-2026-17742/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17741](https://insights.sbomify.com/CVE-2026-17741/): Security feature bypass in Chrome (high 7.1)
- [CVE-2026-17740](https://insights.sbomify.com/CVE-2026-17740/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1774](https://insights.sbomify.com/CVE-2026-1774/): CASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability. (critical 9.8)
- [CVE-2026-17739](https://insights.sbomify.com/CVE-2026-17739/): Cross-site scripting in Chrome (medium 4.2)
- [CVE-2026-17738](https://insights.sbomify.com/CVE-2026-17738/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17737](https://insights.sbomify.com/CVE-2026-17737/): Use after free in Chrome (medium 5.0)
- [CVE-2026-17736](https://insights.sbomify.com/CVE-2026-17736/): Security feature bypass in Chrome (medium 5.8)
- [CVE-2026-17735](https://insights.sbomify.com/CVE-2026-17735/): Security feature bypass in Chrome (high 8.7)
- [CVE-2026-17734](https://insights.sbomify.com/CVE-2026-17734/): Cross-site scripting in Chrome (medium 5.4)
- [CVE-2026-17733](https://insights.sbomify.com/CVE-2026-17733/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17732](https://insights.sbomify.com/CVE-2026-17732/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-17731](https://insights.sbomify.com/CVE-2026-17731/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17730](https://insights.sbomify.com/CVE-2026-17730/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1773](https://insights.sbomify.com/CVE-2026-1773/): Denial of service in RTU500 series CMU firmware (high 8.7)
- [CVE-2026-17729](https://insights.sbomify.com/CVE-2026-17729/): Use after free in Chrome (high 8.8)
- [CVE-2026-17728](https://insights.sbomify.com/CVE-2026-17728/): Cross-site scripting in Chrome (medium 5.4)
- [CVE-2026-17727](https://insights.sbomify.com/CVE-2026-17727/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17726](https://insights.sbomify.com/CVE-2026-17726/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-17725](https://insights.sbomify.com/CVE-2026-17725/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-17724](https://insights.sbomify.com/CVE-2026-17724/): Race condition in Chrome (medium 4.2)
- [CVE-2026-17723](https://insights.sbomify.com/CVE-2026-17723/): Use after free in Chrome (high 8.3)
- [CVE-2026-17722](https://insights.sbomify.com/CVE-2026-17722/): Use after free in Chrome (high 8.3)
- [CVE-2026-17721](https://insights.sbomify.com/CVE-2026-17721/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17720](https://insights.sbomify.com/CVE-2026-17720/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-1772](https://insights.sbomify.com/CVE-2026-1772/): Missing authorization in RTU500 series CMU firmware (medium 5.3)
- [CVE-2026-17719](https://insights.sbomify.com/CVE-2026-17719/): Use after free in Chrome (high 8.8)
- [CVE-2026-17718](https://insights.sbomify.com/CVE-2026-17718/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17717](https://insights.sbomify.com/CVE-2026-17717/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-17716](https://insights.sbomify.com/CVE-2026-17716/): Use after free in Chrome (high 8.4)
- [CVE-2026-17715](https://insights.sbomify.com/CVE-2026-17715/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-17714](https://insights.sbomify.com/CVE-2026-17714/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17713](https://insights.sbomify.com/CVE-2026-17713/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17712](https://insights.sbomify.com/CVE-2026-17712/): Race condition in Chrome (high 8.8)
- [CVE-2026-17711](https://insights.sbomify.com/CVE-2026-17711/): Race condition in Chrome (critical 9.6)
- [CVE-2026-17710](https://insights.sbomify.com/CVE-2026-17710/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-1771](https://insights.sbomify.com/CVE-2026-1771/): MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint (high 7.2)
- [CVE-2026-17709](https://insights.sbomify.com/CVE-2026-17709/): Race condition in Chrome (critical 9.6)
- [CVE-2026-17708](https://insights.sbomify.com/CVE-2026-17708/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17707](https://insights.sbomify.com/CVE-2026-17707/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-17706](https://insights.sbomify.com/CVE-2026-17706/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17705](https://insights.sbomify.com/CVE-2026-17705/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-17704](https://insights.sbomify.com/CVE-2026-17704/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17703](https://insights.sbomify.com/CVE-2026-17703/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-17702](https://insights.sbomify.com/CVE-2026-17702/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-17701](https://insights.sbomify.com/CVE-2026-17701/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17700](https://insights.sbomify.com/CVE-2026-17700/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-1770](https://insights.sbomify.com/CVE-2026-1770/): Improper Control of Dynamically-Managed Code Resources in Crafter Studio (medium 4.5)
- [CVE-2026-17699](https://insights.sbomify.com/CVE-2026-17699/): Use after free in Chrome (high 8.6)
- [CVE-2026-17698](https://insights.sbomify.com/CVE-2026-17698/): Information disclosure in Chrome (high 7.5)
- [CVE-2026-17697](https://insights.sbomify.com/CVE-2026-17697/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17696](https://insights.sbomify.com/CVE-2026-17696/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17695](https://insights.sbomify.com/CVE-2026-17695/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-17694](https://insights.sbomify.com/CVE-2026-17694/): Use after free in Chrome (high 8.8)
- [CVE-2026-17693](https://insights.sbomify.com/CVE-2026-17693/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-17692](https://insights.sbomify.com/CVE-2026-17692/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17691](https://insights.sbomify.com/CVE-2026-17691/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-17690](https://insights.sbomify.com/CVE-2026-17690/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1769](https://insights.sbomify.com/CVE-2026-1769/): Stored XSS on Xerox CentreWare Web 7.0.6 (medium 5.3)
- [CVE-2026-17689](https://insights.sbomify.com/CVE-2026-17689/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-17688](https://insights.sbomify.com/CVE-2026-17688/): Use after free in Chrome (critical 9.6)
- [CVE-2026-17687](https://insights.sbomify.com/CVE-2026-17687/): Memory corruption in Chrome (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/839/