Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 920 of 1013.
- CVE-2026-11282 Security feature bypass in Chrome
- CVE-2026-11281 Integer overflow in Chrome
- CVE-2026-11280 Other in Chrome
- CVE-2026-1128 WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
- CVE-2026-11279 Memory corruption in Chrome
- CVE-2026-112787 OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports
- CVE-2026-112786 OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
- CVE-2026-112785 OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints
- CVE-2026-112784 OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php
- CVE-2026-112783 OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints
- CVE-2026-112782 Grav before 1.7.53.5 and 2.2.2 Image Pixel Limit Bypass Denial of Service
- CVE-2026-112781 Grav 2.0.0 before 2.2.2 Information Disclosure via Form config-*@ Directives
- CVE-2026-112780 Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@
- CVE-2026-11278 Security feature bypass in Chrome
- CVE-2026-112779 Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass
- CVE-2026-112778 Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations
- CVE-2026-112777 Craft CMS before 4.18.8 and 5.11.0 Twig create() Blocklist Bypass Leading to RCE
- CVE-2026-112776 Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations
- CVE-2026-112775 Craft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password
- CVE-2026-112774 Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout
- CVE-2026-112773 Craft CMS 5.0.0 before 5.11.0 RCE via Twig Sandbox Behavior Injection
- CVE-2026-112772 Craft CMS 5.0.0 before 5.11.0 RCE via Asset::getMimeType Transform Injection
- CVE-2026-112771 Craft CMS before 4.18.8 and 5.11.0 Twig Sandbox Allowlist Bypass via Array Filters
- CVE-2026-112770 Craft CMS before 4.18.8 and 5.11.0 Authenticated RCE via Twig group Filter Array-Callable
- CVE-2026-11277 Security feature bypass in Chrome
- CVE-2026-112769 Parse Server before 8.6.98 and 9.x before 9.10.3-alpha.1 Session Class-Level Permission Bypass
- CVE-2026-112768 Parse Server before 8.6.99 and 9.x before 9.10.3-alpha.2 Information Disclosure via User Update
- CVE-2026-11276 Security feature bypass in Chrome
- CVE-2026-11275 Security feature bypass in Chrome
- CVE-2026-11274 Security feature bypass in Chrome
- CVE-2026-11273 Cross-site scripting in Chrome
- CVE-2026-11272 Privilege escalation in Chrome
- CVE-2026-112712 @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch
- CVE-2026-112710 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- CVE-2026-11271 Information disclosure in Chrome
- CVE-2026-112709 Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
- CVE-2026-112708 Race condition in macOS
- CVE-2026-112707 Information disclosure in iOS and iPadOS
- CVE-2026-112706 Missing authorization in iOS and iPadOS
- CVE-2026-112705 Memory corruption in iOS and iPadOS
- CVE-2026-112704 Security feature bypass in macOS
- CVE-2026-112701 Missing authorization in iOS and iPadOS
- CVE-2026-11270 Information disclosure in Chrome
- CVE-2026-1127 Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
- CVE-2026-112699 Memory corruption in Safari
- CVE-2026-112698 Memory corruption in iOS and iPadOS
- CVE-2026-112697 Use after free in Safari
- CVE-2026-112696 Memory corruption in iOS and iPadOS
- CVE-2026-112695 Use after free in Safari
- CVE-2026-112693 Use after free in Safari
- CVE-2026-112692 Missing authorization in iOS and iPadOS
- CVE-2026-112691 Memory corruption in iOS and iPadOS
- CVE-2026-112690 Security feature bypass in iOS and iPadOS
- CVE-2026-11269 Code injection in Chrome
- CVE-2026-112689 Memory corruption in iOS and iPadOS
- CVE-2026-112688 Memory corruption in iOS and iPadOS
- CVE-2026-112687 Memory corruption in iOS and iPadOS
- CVE-2026-112686 Race condition in Safari
- CVE-2026-112685 Missing authorization in iOS and iPadOS
- CVE-2026-112684 Denial of service in Safari
- CVE-2026-112683 Memory corruption in iOS and iPadOS
- CVE-2026-112682 Denial of service in iOS and iPadOS
- CVE-2026-112681 Information disclosure in iOS and iPadOS
- CVE-2026-112680 Memory corruption in Safari
- CVE-2026-11268 Information disclosure in Chrome
- CVE-2026-112679 Use after free in iOS and iPadOS
- CVE-2026-112678 Missing authorization in iOS and iPadOS
- CVE-2026-112677 Privilege escalation in macOS
- CVE-2026-112676 Missing authorization in iOS and iPadOS
- CVE-2026-112675 Missing authorization in macOS
- CVE-2026-112673 Memory corruption in Safari
- CVE-2026-112672 Security feature bypass in macOS
- CVE-2026-112671 Denial of service in iOS and iPadOS
- CVE-2026-112670 Memory corruption in macOS
- CVE-2026-11267 Security feature bypass in Chrome
- CVE-2026-112669 Race condition in Safari
- CVE-2026-112668 Privilege escalation in macOS
- CVE-2026-112666 Use after free in Safari
- CVE-2026-112665 Information disclosure in iOS and iPadOS
- CVE-2026-112660 Security feature bypass in iOS and iPadOS
- CVE-2026-11266 Security feature bypass in Chrome
- CVE-2026-112659 Memory corruption in Safari
- CVE-2026-112658 Information disclosure in iOS and iPadOS
- CVE-2026-112656 Memory corruption in iOS and iPadOS
- CVE-2026-112655 Use after free in Safari
- CVE-2026-112654 Use after free in Safari
- CVE-2026-112653 Use after free in Safari
- CVE-2026-112652 Security feature bypass in iOS and iPadOS
- CVE-2026-112651 Use after free in Safari
- CVE-2026-11265 Information disclosure in Chrome
- CVE-2026-112647 Security feature bypass in macOS
- CVE-2026-112646 Memory corruption in iOS and iPadOS
- CVE-2026-112642 Memory corruption in iOS and iPadOS
- CVE-2026-112640 Use after free in Safari
- CVE-2026-11264 Security feature bypass in Chrome
- CVE-2026-112639 Use after free in Safari
- CVE-2026-112638 Memory corruption in iOS and iPadOS
- CVE-2026-112637 Use after free in Safari
- CVE-2026-112634 Memory corruption in iOS and iPadOS
- CVE-2026-112633 Memory corruption in iOS and iPadOS