Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 940 of 1013.
- CVE-2026-109896 WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Broken Access Control vulnerability
- CVE-2026-109895 WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
- CVE-2026-109893 WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109892 WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerability
- CVE-2026-109891 WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability
- CVE-2026-109890 WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerability
- CVE-2026-10989 Memory corruption in Chrome
- CVE-2026-10988 Use after free in Chrome
- CVE-2026-10987 Integer overflow in Chrome
- CVE-2026-109869 undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
- CVE-2026-10986 Integer overflow in Chrome
- CVE-2026-109855 undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
- CVE-2026-109854 M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding
- CVE-2026-10985 Memory corruption in Chrome
- CVE-2026-109848 Missing authorization in GROWI
- CVE-2026-109844 Gitea watched repositories API disclosure after access revocation
- CVE-2026-109841 undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
- CVE-2026-10984 Other in Chrome
- CVE-2026-109839 IBM Db2 Genius Hub Missing Cryptographic Step
- CVE-2026-109838 IBM Db2 Genius Hub Improper verification of cryptographic signature
- CVE-2026-109833 Memory corruption in Red Hat Enterprise Linux 10
- CVE-2026-109832 Gnome-remote-desktop: busy-wait dos in vnc tls i/o handlers (gnutls_e_again / gnutls_e_interrupted)
- CVE-2026-109831 Memory corruption in UnRTF
- CVE-2026-10983 Security feature bypass in Chrome
- CVE-2026-109829 undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
- CVE-2026-109828 libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
- CVE-2026-109827 GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
- CVE-2026-109823 Host filesystem path disclosure via DNS rebinding
- CVE-2026-109822 Information disclosure in NWR100
- CVE-2026-10982 Use after free in Chrome
- CVE-2026-109813 Shared Hard-coded Root CA Private Key
- CVE-2026-109812 Missing Authorization on Secret Endpoints
- CVE-2026-10981 Information disclosure in Chrome
- CVE-2026-10980 Security feature bypass in Chrome
- CVE-2026-1098 CM CSS Columns <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute
- CVE-2026-10979 Memory corruption in Chrome
- CVE-2026-109786 Other in fail2ban
- CVE-2026-109783 Mitigation bypass in the File Handling component
- CVE-2026-109782 Mitigation bypass in the File Handling component
- CVE-2026-109781 Denial-of-service in the Printing: Output component
- CVE-2026-109780 Mitigation bypass in the DOM: Core & HTML component
- CVE-2026-10978 Use after free in Chrome
- CVE-2026-109779 Race condition in the Networking: DNS component
- CVE-2026-109778 Privilege escalation in the WebExtensions component
- CVE-2026-109777 Information disclosure in the Storage: IndexedDB component
- CVE-2026-109776 Race condition in the XPCOM component
- CVE-2026-109775 Denial-of-service in the WebRTC component
- CVE-2026-109774 Invalid pointer, undefined behavior in the DOM: Notifications component
- CVE-2026-109773 Denial-of-service in the Sync component
- CVE-2026-109772 Same-origin policy bypass in the DevTools component
- CVE-2026-109771 Information disclosure in the WebRTC: Networking component
- CVE-2026-109770 Spoofing issue in the DOM: Web Serial component
- CVE-2026-10977 Information disclosure in Chrome
- CVE-2026-109769 Information disclosure in the Networking: Cache component
- CVE-2026-109768 Denial-of-service in the Site Reports component
- CVE-2026-109767 Information disclosure in the Networking component
- CVE-2026-109766 Mitigation bypass in the Enterprise Policies component
- CVE-2026-109765 Race condition, use-after-free in the Graphics: Text component
- CVE-2026-109764 Mitigation bypass in the Enterprise Policies component
- CVE-2026-109763 Mitigation bypass in the File Handling component
- CVE-2026-109762 Incorrect boundary conditions in the SVG component
- CVE-2026-109761 Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109760 Mitigation bypass in the Networking: HTTP component
- CVE-2026-10976 Information disclosure in Chrome
- CVE-2026-109759 Site isolation issue in the Networking component
- CVE-2026-109758 Hardcoded credentials in Helix Authentication Service
- CVE-2026-109757 Sandbox escape due to race condition in the Networking component
- CVE-2026-109756 Privilege escalation in the DOM: Navigation component
- CVE-2026-109755 Sandbox escape in the DOM: Content Processes component
- CVE-2026-109754 Incorrect boundary conditions in the DOM: Editor component
- CVE-2026-109753 Incorrect boundary conditions in the Layout component
- CVE-2026-109752 Use-after-free in the DOM: Workers component
- CVE-2026-109751 Information disclosure in the Networking component
- CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component
- CVE-2026-10975 Use after free in Chrome
- CVE-2026-109749 Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109748 Use-after-free in the JavaScript: WebAssembly component
- CVE-2026-109747 Other issue in the Address Bar component
- CVE-2026-109746 Mitigation bypass in the DOM: Security component
- CVE-2026-109745 Sandbox escape due to uninitialized memory in the DOM: Web Serial component
- CVE-2026-109744 Other issue in the DOM: File component
- CVE-2026-109743 Privilege escalation in the Panning and Zooming component
- CVE-2026-109742 Information disclosure in the PDF Viewer component
- CVE-2026-109741 Use-after-free in the Storage: Bucket File System component
- CVE-2026-109740 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
- CVE-2026-10974 Security feature bypass in Chrome
- CVE-2026-109739 Privilege escalation in the WebExtensions component
- CVE-2026-109738 Use-after-free in the Audio/Video: Playback component
- CVE-2026-109737 Mitigation bypass in the Enterprise Policies component
- CVE-2026-109736 Frame poisoning in the Layout component
- CVE-2026-109735 Use-after-free in the DOM: Animation component
- CVE-2026-109734 Mitigation bypass in the DOM: Security component
- CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-109732 Use-after-free in the DOM: Streams component
- CVE-2026-109731 Incorrect boundary conditions in the Graphics: Canvas2D component
- CVE-2026-109730 Integer overflow in the Graphics component
- CVE-2026-10973 Information disclosure in Chrome
- CVE-2026-109729 Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-109728 Use-after-free in the DOM: Animation component