Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 962 of 1013.
- CVE-2026-106419 Use after free in Chrome
- CVE-2026-106418 Missing authorization in Chrome
- CVE-2026-106417 Integer overflow in Chrome
- CVE-2026-106416 Code injection in Chrome
- CVE-2026-106415 Information disclosure in Chrome
- CVE-2026-106414 Other in Chrome
- CVE-2026-106413 Race condition in Chrome
- CVE-2026-106412 Race condition in Chrome
- CVE-2026-106411 Use after free in Chrome
- CVE-2026-106410 Missing authorization in Chrome
- CVE-2026-10641 Out-of-bounds write in Bluetooth HFP Hands-Free CIND indicator parsing (cind_handle_values)
- CVE-2026-106409 Other in Chrome
- CVE-2026-106408 Security feature bypass in Chrome
- CVE-2026-106407 Security feature bypass in Chrome
- CVE-2026-106406 Missing authorization in Chrome
- CVE-2026-106405 Race condition in Chrome
- CVE-2026-106404 Security feature bypass in Chrome
- CVE-2026-106403 Security feature bypass in Chrome
- CVE-2026-106402 Security feature bypass in Chrome
- CVE-2026-106401 Memory corruption in Chrome
- CVE-2026-106400 Other in Chrome
- CVE-2026-10640 Use-after-free reading `net_pkt` `iface` after send in IPv6 Neighbor Discovery (`ipv6_nbr.c`)
- CVE-2026-1064 bastillion-io Bastillion System Management SystemKtrl.java command injection
- CVE-2026-106399 Memory corruption in Chrome
- CVE-2026-106398 Missing authorization in Chrome
- CVE-2026-106397 Security feature bypass in Chrome
- CVE-2026-106396 Security feature bypass in Chrome
- CVE-2026-106395 Information disclosure in Chrome
- CVE-2026-106394 Information disclosure in Chrome
- CVE-2026-106393 Use after free in Chrome
- CVE-2026-106392 Information disclosure in Chrome
- CVE-2026-106391 Missing authorization in Chrome
- CVE-2026-106390 Information disclosure in Chrome
- CVE-2026-10639 Use-after-free reading `net_pkt_iface()` of a sent ICMPv4 echo-reply packet in `icmpv4_handle_echo_request()`
- CVE-2026-106389 Security feature bypass in Chrome
- CVE-2026-106388 Missing authorization in Chrome
- CVE-2026-106387 Missing authorization in Chrome
- CVE-2026-106386 Information disclosure in Chrome
- CVE-2026-106385 Race condition in Chrome
- CVE-2026-106384 Missing authorization in Chrome
- CVE-2026-106383 Use after free in Chrome
- CVE-2026-106382 Use after free in Chrome
- CVE-2026-106381 Security feature bypass in Chrome
- CVE-2026-106380 Other in Chrome
- CVE-2026-10638 Use-after-free in Zephyr ICMPv6 RX path when updating statistics after sending an echo reply or error
- CVE-2026-106379 Information disclosure in Chrome
- CVE-2026-106378 Privilege escalation in Chrome
- CVE-2026-106377 Race condition in Chrome
- CVE-2026-106376 Information disclosure in Chrome
- CVE-2026-106375 Other in Chrome
- CVE-2026-106374 Memory corruption in Chrome
- CVE-2026-106373 Use after free in Chrome
- CVE-2026-106372 Missing authorization in Chrome
- CVE-2026-106371 Missing authorization in Chrome
- CVE-2026-106370 Information disclosure in Chrome
- CVE-2026-10637 Use-after-free of `net_pkt` in IPv6 MLD send path triggerable by a link-local MLD Query
- CVE-2026-106369 Missing authorization in Chrome
- CVE-2026-106368 Other in Chrome
- CVE-2026-106367 Missing authorization in Chrome
- CVE-2026-106366 Security feature bypass in Chrome
- CVE-2026-106365 Missing authorization in Chrome
- CVE-2026-106364 Missing authorization in Chrome
- CVE-2026-106363 Missing authorization in Chrome
- CVE-2026-106362 Missing authorization in Chrome
- CVE-2026-106361 Security feature bypass in Chrome
- CVE-2026-106360 Information disclosure in Chrome
- CVE-2026-10636 Use-after-free in Zephyr IPv4 IGMP send path (`igmp_send`)
- CVE-2026-106359 Security feature bypass in Chrome
- CVE-2026-106358 Use after free in Chrome
- CVE-2026-106357 Use after free in Chrome
- CVE-2026-106356 Other in Chrome
- CVE-2026-106355 Missing authorization in Chrome
- CVE-2026-106354 Information disclosure in Chrome
- CVE-2026-106353 Security feature bypass in Chrome
- CVE-2026-106352 Missing authorization in Chrome
- CVE-2026-106351 Information disclosure in Chrome
- CVE-2026-106350 Missing authorization in Chrome
- CVE-2026-10635 Dangling memory-domain pointer (use-after-free) in Xtensa MMU page-table code on memory-domain de-init
- CVE-2026-106349 Use after free in Chrome
- CVE-2026-106348 Information disclosure in Chrome
- CVE-2026-106347 Use after free in Chrome
- CVE-2026-106346 Other in Chrome
- CVE-2026-106345 Use after free in Chrome
- CVE-2026-106344 Missing authorization in Chrome
- CVE-2026-106343 Other in Chrome
- CVE-2026-106342 Information disclosure in Chrome
- CVE-2026-106341 Memory corruption in Chrome
- CVE-2026-106340 Missing authorization in Chrome
- CVE-2026-10634 Use-after-free in Zephyr native TCP `net_tcp_foreach()` due to dropping `tcp_lock` during the callback
- CVE-2026-106339 Use after free in Chrome
- CVE-2026-106338 Other in Chrome
- CVE-2026-106337 Other in Chrome
- CVE-2026-106336 Information disclosure in Chrome
- CVE-2026-106335 Use after free in Chrome
- CVE-2026-106334 Information disclosure in Chrome
- CVE-2026-106333 Security feature bypass in Chrome
- CVE-2026-106332 Integer overflow in Chrome
- CVE-2026-106331 Security feature bypass in Chrome
- CVE-2026-106330 Information disclosure in Chrome
- CVE-2026-106329 Missing authorization in Chrome