# Vulnerabilities published in 2026


- [CVE-2026-13965](https://insights.sbomify.com/CVE-2026-13965/): Use after free in Chrome (high 8.8)
- [CVE-2026-13964](https://insights.sbomify.com/CVE-2026-13964/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13963](https://insights.sbomify.com/CVE-2026-13963/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-13962](https://insights.sbomify.com/CVE-2026-13962/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13961](https://insights.sbomify.com/CVE-2026-13961/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13960](https://insights.sbomify.com/CVE-2026-13960/): Other in Chrome (medium 4.3)
- [CVE-2026-1396](https://insights.sbomify.com/CVE-2026-1396/): Cross-site scripting in Magic Conversation For Gravity Forms (medium 6.4)
- [CVE-2026-13959](https://insights.sbomify.com/CVE-2026-13959/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-13958](https://insights.sbomify.com/CVE-2026-13958/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13957](https://insights.sbomify.com/CVE-2026-13957/): Cross-site scripting in Chrome (medium 4.2)
- [CVE-2026-13956](https://insights.sbomify.com/CVE-2026-13956/): Other in Chrome (medium 4.2)
- [CVE-2026-13955](https://insights.sbomify.com/CVE-2026-13955/): Other in Chrome (low 3.3)
- [CVE-2026-13954](https://insights.sbomify.com/CVE-2026-13954/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13953](https://insights.sbomify.com/CVE-2026-13953/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13952](https://insights.sbomify.com/CVE-2026-13952/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-13951](https://insights.sbomify.com/CVE-2026-13951/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-13950](https://insights.sbomify.com/CVE-2026-13950/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-1395](https://insights.sbomify.com/CVE-2026-1395/): Gutentools <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes (medium 6.4)
- [CVE-2026-13949](https://insights.sbomify.com/CVE-2026-13949/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13948](https://insights.sbomify.com/CVE-2026-13948/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-13947](https://insights.sbomify.com/CVE-2026-13947/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13946](https://insights.sbomify.com/CVE-2026-13946/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-13945](https://insights.sbomify.com/CVE-2026-13945/): Security feature bypass in Chrome (low 3.1)
- [CVE-2026-13944](https://insights.sbomify.com/CVE-2026-13944/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-13943](https://insights.sbomify.com/CVE-2026-13943/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13942](https://insights.sbomify.com/CVE-2026-13942/): Other in Chrome (low 3.3)
- [CVE-2026-13941](https://insights.sbomify.com/CVE-2026-13941/): Other in Chrome (medium 4.3)
- [CVE-2026-13940](https://insights.sbomify.com/CVE-2026-13940/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1394](https://insights.sbomify.com/CVE-2026-1394/): WP Quick Contact Us <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13939](https://insights.sbomify.com/CVE-2026-13939/): Other in Chrome (low 3.1)
- [CVE-2026-13938](https://insights.sbomify.com/CVE-2026-13938/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-13937](https://insights.sbomify.com/CVE-2026-13937/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13936](https://insights.sbomify.com/CVE-2026-13936/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13935](https://insights.sbomify.com/CVE-2026-13935/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13934](https://insights.sbomify.com/CVE-2026-13934/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13933](https://insights.sbomify.com/CVE-2026-13933/): Security feature bypass in Chrome (medium 5.3)
- [CVE-2026-13932](https://insights.sbomify.com/CVE-2026-13932/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13931](https://insights.sbomify.com/CVE-2026-13931/): Other in Chrome (medium 6.5)
- [CVE-2026-13930](https://insights.sbomify.com/CVE-2026-13930/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1393](https://insights.sbomify.com/CVE-2026-1393/): Add Google Social Profiles to Knowledge Graph Box <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13929](https://insights.sbomify.com/CVE-2026-13929/): Security feature bypass in Chrome (medium 5.5)
- [CVE-2026-13928](https://insights.sbomify.com/CVE-2026-13928/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-13927](https://insights.sbomify.com/CVE-2026-13927/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-13926](https://insights.sbomify.com/CVE-2026-13926/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13925](https://insights.sbomify.com/CVE-2026-13925/): Other in Chrome (high 7.5)
- [CVE-2026-13924](https://insights.sbomify.com/CVE-2026-13924/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13923](https://insights.sbomify.com/CVE-2026-13923/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13922](https://insights.sbomify.com/CVE-2026-13922/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13921](https://insights.sbomify.com/CVE-2026-13921/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13920](https://insights.sbomify.com/CVE-2026-13920/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-1392](https://insights.sbomify.com/CVE-2026-1392/): SR WP Minify HTML <= 2.1 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13919](https://insights.sbomify.com/CVE-2026-13919/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13918](https://insights.sbomify.com/CVE-2026-13918/): Use after free in Chrome (high 8.8)
- [CVE-2026-13917](https://insights.sbomify.com/CVE-2026-13917/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13916](https://insights.sbomify.com/CVE-2026-13916/): Other in Chrome (medium 4.3)
- [CVE-2026-13915](https://insights.sbomify.com/CVE-2026-13915/): Use after free in Chrome (high 8.8)
- [CVE-2026-13914](https://insights.sbomify.com/CVE-2026-13914/): Information disclosure in Chrome (medium 5.5)
- [CVE-2026-13913](https://insights.sbomify.com/CVE-2026-13913/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13912](https://insights.sbomify.com/CVE-2026-13912/): Other in Chrome (medium 4.3)
- [CVE-2026-13911](https://insights.sbomify.com/CVE-2026-13911/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13910](https://insights.sbomify.com/CVE-2026-13910/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1391](https://insights.sbomify.com/CVE-2026-1391/): Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] (medium 5.3)
- [CVE-2026-13909](https://insights.sbomify.com/CVE-2026-13909/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13908](https://insights.sbomify.com/CVE-2026-13908/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13907](https://insights.sbomify.com/CVE-2026-13907/): Other in Chrome (medium 4.2)
- [CVE-2026-13906](https://insights.sbomify.com/CVE-2026-13906/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-13905](https://insights.sbomify.com/CVE-2026-13905/): Race condition in Chrome (medium 4.2)
- [CVE-2026-13904](https://insights.sbomify.com/CVE-2026-13904/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13903](https://insights.sbomify.com/CVE-2026-13903/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-13902](https://insights.sbomify.com/CVE-2026-13902/): Other in Chrome (medium 4.3)
- [CVE-2026-13901](https://insights.sbomify.com/CVE-2026-13901/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13900](https://insights.sbomify.com/CVE-2026-13900/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1390](https://insights.sbomify.com/CVE-2026-1390/): Redirect countdown <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13899](https://insights.sbomify.com/CVE-2026-13899/): Use after free in Chrome (high 8.8)
- [CVE-2026-13898](https://insights.sbomify.com/CVE-2026-13898/): Use after free in Chrome (high 8.8)
- [CVE-2026-13897](https://insights.sbomify.com/CVE-2026-13897/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-13896](https://insights.sbomify.com/CVE-2026-13896/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13895](https://insights.sbomify.com/CVE-2026-13895/): Other in Chrome (medium 4.2)
- [CVE-2026-13894](https://insights.sbomify.com/CVE-2026-13894/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13893](https://insights.sbomify.com/CVE-2026-13893/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13892](https://insights.sbomify.com/CVE-2026-13892/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13891](https://insights.sbomify.com/CVE-2026-13891/): Privilege escalation in Chrome (high 7.5)
- [CVE-2026-13890](https://insights.sbomify.com/CVE-2026-13890/): Memory corruption in Chrome (medium 5.3)
- [CVE-2026-1389](https://insights.sbomify.com/CVE-2026-1389/): Missing authorization in Document Embedder – Embed PDFs, Word, Excel, and Other Files (medium 4.3)
- [CVE-2026-13889](https://insights.sbomify.com/CVE-2026-13889/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13888](https://insights.sbomify.com/CVE-2026-13888/): Use after free in Chrome (high 8.8)
- [CVE-2026-13887](https://insights.sbomify.com/CVE-2026-13887/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13886](https://insights.sbomify.com/CVE-2026-13886/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13885](https://insights.sbomify.com/CVE-2026-13885/): Use after free in Chrome (high 8.8)
- [CVE-2026-13884](https://insights.sbomify.com/CVE-2026-13884/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-13883](https://insights.sbomify.com/CVE-2026-13883/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-13882](https://insights.sbomify.com/CVE-2026-13882/): Race condition in Chrome (critical 9.6)
- [CVE-2026-13881](https://insights.sbomify.com/CVE-2026-13881/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13880](https://insights.sbomify.com/CVE-2026-13880/): Use after free in Chrome (critical 9.6)
- [CVE-2026-1388](https://insights.sbomify.com/CVE-2026-1388/): Inefficient Regular Expression Complexity in GitLab (high 7.5)
- [CVE-2026-13879](https://insights.sbomify.com/CVE-2026-13879/): Use after free in Chrome (medium 6.5)
- [CVE-2026-13878](https://insights.sbomify.com/CVE-2026-13878/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13877](https://insights.sbomify.com/CVE-2026-13877/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-13876](https://insights.sbomify.com/CVE-2026-13876/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13875](https://insights.sbomify.com/CVE-2026-13875/): Information disclosure in Chrome (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/872/