# Vulnerabilities published in 2026


- [CVE-2026-13874](https://insights.sbomify.com/CVE-2026-13874/): Race condition in Chrome (medium 5.3)
- [CVE-2026-13873](https://insights.sbomify.com/CVE-2026-13873/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-13872](https://insights.sbomify.com/CVE-2026-13872/): Security feature bypass in Chrome (critical 9.1)
- [CVE-2026-13871](https://insights.sbomify.com/CVE-2026-13871/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13870](https://insights.sbomify.com/CVE-2026-13870/): Use after free in Chrome (high 8.8)
- [CVE-2026-1387](https://insights.sbomify.com/CVE-2026-1387/): Allocation of Resources Without Limits or Throttling in GitLab (medium 6.5)
- [CVE-2026-13869](https://insights.sbomify.com/CVE-2026-13869/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13868](https://insights.sbomify.com/CVE-2026-13868/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13867](https://insights.sbomify.com/CVE-2026-13867/): Other in Chrome (medium 4.3)
- [CVE-2026-13866](https://insights.sbomify.com/CVE-2026-13866/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13865](https://insights.sbomify.com/CVE-2026-13865/): Other in Chrome (medium 4.3)
- [CVE-2026-13864](https://insights.sbomify.com/CVE-2026-13864/): Privilege escalation in Chrome (high 8.1)
- [CVE-2026-13863](https://insights.sbomify.com/CVE-2026-13863/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-13862](https://insights.sbomify.com/CVE-2026-13862/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13861](https://insights.sbomify.com/CVE-2026-13861/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13860](https://insights.sbomify.com/CVE-2026-13860/): Other in Chrome (medium 4.2)
- [CVE-2026-1386](https://insights.sbomify.com/CVE-2026-1386/): Arbitrary Host File Overwrite via Symlink in Firecracker Jailer (medium 6.0)
- [CVE-2026-13859](https://insights.sbomify.com/CVE-2026-13859/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13858](https://insights.sbomify.com/CVE-2026-13858/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-13857](https://insights.sbomify.com/CVE-2026-13857/): Other in Chrome (medium 4.2)
- [CVE-2026-13856](https://insights.sbomify.com/CVE-2026-13856/): Privilege escalation in Chrome (high 7.5)
- [CVE-2026-13855](https://insights.sbomify.com/CVE-2026-13855/): Use after free in Chrome (high 7.5)
- [CVE-2026-13854](https://insights.sbomify.com/CVE-2026-13854/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13853](https://insights.sbomify.com/CVE-2026-13853/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13852](https://insights.sbomify.com/CVE-2026-13852/): Security feature bypass in Chrome (critical 9.1)
- [CVE-2026-13851](https://insights.sbomify.com/CVE-2026-13851/): Security feature bypass in Chrome (critical 9.1)
- [CVE-2026-13850](https://insights.sbomify.com/CVE-2026-13850/): Code injection in Chrome (high 8.8)
- [CVE-2026-13849](https://insights.sbomify.com/CVE-2026-13849/): Security feature bypass in Chrome (high 8.6)
- [CVE-2026-13848](https://insights.sbomify.com/CVE-2026-13848/): Use after free in Chrome (high 8.8)
- [CVE-2026-13847](https://insights.sbomify.com/CVE-2026-13847/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13846](https://insights.sbomify.com/CVE-2026-13846/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13845](https://insights.sbomify.com/CVE-2026-13845/): Use after free in Chrome (high 8.8)
- [CVE-2026-13844](https://insights.sbomify.com/CVE-2026-13844/): Use after free in Chrome (high 7.8)
- [CVE-2026-13843](https://insights.sbomify.com/CVE-2026-13843/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13842](https://insights.sbomify.com/CVE-2026-13842/): Other in Chrome (medium 4.3)
- [CVE-2026-13841](https://insights.sbomify.com/CVE-2026-13841/): Integer overflow in Chrome (high 8.3)
- [CVE-2026-13840](https://insights.sbomify.com/CVE-2026-13840/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13839](https://insights.sbomify.com/CVE-2026-13839/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13838](https://insights.sbomify.com/CVE-2026-13838/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13837](https://insights.sbomify.com/CVE-2026-13837/): Other in Chrome (medium 4.3)
- [CVE-2026-13836](https://insights.sbomify.com/CVE-2026-13836/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2026-13835](https://insights.sbomify.com/CVE-2026-13835/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-13834](https://insights.sbomify.com/CVE-2026-13834/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-13833](https://insights.sbomify.com/CVE-2026-13833/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13832](https://insights.sbomify.com/CVE-2026-13832/): Use after free in Chrome (high 8.3)
- [CVE-2026-13831](https://insights.sbomify.com/CVE-2026-13831/): Use after free in Chrome (high 7.5)
- [CVE-2026-13830](https://insights.sbomify.com/CVE-2026-13830/): Use after free in Chrome (high 8.8)
- [CVE-2026-13829](https://insights.sbomify.com/CVE-2026-13829/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-13828](https://insights.sbomify.com/CVE-2026-13828/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13827](https://insights.sbomify.com/CVE-2026-13827/): Use after free in Chrome (high 7.8)
- [CVE-2026-13826](https://insights.sbomify.com/CVE-2026-13826/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13825](https://insights.sbomify.com/CVE-2026-13825/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-13824](https://insights.sbomify.com/CVE-2026-13824/): Privilege escalation in Chrome (high 7.5)
- [CVE-2026-13823](https://insights.sbomify.com/CVE-2026-13823/): Use after free in Chrome (high 8.3)
- [CVE-2026-13822](https://insights.sbomify.com/CVE-2026-13822/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13821](https://insights.sbomify.com/CVE-2026-13821/): Use after free in Chrome (high 8.8)
- [CVE-2026-13820](https://insights.sbomify.com/CVE-2026-13820/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-1382](https://insights.sbomify.com/CVE-2026-1382/): Cross-site scripting in fresh Podcaster (medium 6.4)
- [CVE-2026-13819](https://insights.sbomify.com/CVE-2026-13819/): Memory corruption in Chrome (high 8.1)
- [CVE-2026-13818](https://insights.sbomify.com/CVE-2026-13818/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13817](https://insights.sbomify.com/CVE-2026-13817/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-13816](https://insights.sbomify.com/CVE-2026-13816/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13815](https://insights.sbomify.com/CVE-2026-13815/): Use after free in Chrome (high 8.8)
- [CVE-2026-13814](https://insights.sbomify.com/CVE-2026-13814/): Use after free in Chrome (high 7.5)
- [CVE-2026-13813](https://insights.sbomify.com/CVE-2026-13813/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-13812](https://insights.sbomify.com/CVE-2026-13812/): Cross-site scripting in Chrome (medium 4.7)
- [CVE-2026-13811](https://insights.sbomify.com/CVE-2026-13811/): Use after free in Chrome (high 8.8)
- [CVE-2026-13810](https://insights.sbomify.com/CVE-2026-13810/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1381](https://insights.sbomify.com/CVE-2026-1381/): Cross-site scripting in Order Minimum/Maximum Amount Limits for WooCommerce (medium 4.4)
- [CVE-2026-13809](https://insights.sbomify.com/CVE-2026-13809/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-13808](https://insights.sbomify.com/CVE-2026-13808/): Information disclosure in Chrome (medium 4.6)
- [CVE-2026-13807](https://insights.sbomify.com/CVE-2026-13807/): Use after free in Chrome (high 7.5)
- [CVE-2026-13806](https://insights.sbomify.com/CVE-2026-13806/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-13805](https://insights.sbomify.com/CVE-2026-13805/): Use after free in Chrome (high 8.8)
- [CVE-2026-13804](https://insights.sbomify.com/CVE-2026-13804/): Use after free in Chrome (high 8.3)
- [CVE-2026-13803](https://insights.sbomify.com/CVE-2026-13803/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-13802](https://insights.sbomify.com/CVE-2026-13802/): Use after free in Chrome (high 7.5)
- [CVE-2026-13801](https://insights.sbomify.com/CVE-2026-13801/): Integer overflow in Chrome (high 8.3)
- [CVE-2026-13800](https://insights.sbomify.com/CVE-2026-13800/): Privilege escalation in Chrome (high 7.8)
- [CVE-2026-1380](https://insights.sbomify.com/CVE-2026-1380/): Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13799](https://insights.sbomify.com/CVE-2026-13799/): Use after free in Chrome (high 8.1)
- [CVE-2026-13798](https://insights.sbomify.com/CVE-2026-13798/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-13797](https://insights.sbomify.com/CVE-2026-13797/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-13796](https://insights.sbomify.com/CVE-2026-13796/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-13795](https://insights.sbomify.com/CVE-2026-13795/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13794](https://insights.sbomify.com/CVE-2026-13794/): Code injection in Chrome (high 7.5)
- [CVE-2026-13793](https://insights.sbomify.com/CVE-2026-13793/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-13792](https://insights.sbomify.com/CVE-2026-13792/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13791](https://insights.sbomify.com/CVE-2026-13791/): Code injection in Chrome (high 8.1)
- [CVE-2026-13790](https://insights.sbomify.com/CVE-2026-13790/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1379](https://insights.sbomify.com/CVE-2026-1379/): HTTP Headers <= 1.19.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting (medium 4.4)
- [CVE-2026-13789](https://insights.sbomify.com/CVE-2026-13789/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13788](https://insights.sbomify.com/CVE-2026-13788/): Use after free in Chrome (high 8.8)
- [CVE-2026-13787](https://insights.sbomify.com/CVE-2026-13787/): Use after free in Chrome (high 8.1)
- [CVE-2026-13786](https://insights.sbomify.com/CVE-2026-13786/): Use after free in Chrome (high 8.8)
- [CVE-2026-13785](https://insights.sbomify.com/CVE-2026-13785/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13784](https://insights.sbomify.com/CVE-2026-13784/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13783](https://insights.sbomify.com/CVE-2026-13783/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13782](https://insights.sbomify.com/CVE-2026-13782/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13781](https://insights.sbomify.com/CVE-2026-13781/): Security feature bypass in Chrome (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/873/