# Vulnerabilities published in 2026


- [CVE-2026-106328](https://insights.sbomify.com/CVE-2026-106328/): Missing authorization in Chrome (medium 5.9)
- [CVE-2026-106327](https://insights.sbomify.com/CVE-2026-106327/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-106326](https://insights.sbomify.com/CVE-2026-106326/): Security feature bypass in Chrome (medium 4.4)
- [CVE-2026-106325](https://insights.sbomify.com/CVE-2026-106325/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-106324](https://insights.sbomify.com/CVE-2026-106324/): Security feature bypass in Chrome (medium 6.1)
- [CVE-2026-106323](https://insights.sbomify.com/CVE-2026-106323/): Missing authorization in Chrome (critical 9.6)
- [CVE-2026-106322](https://insights.sbomify.com/CVE-2026-106322/): Open redirect in Chrome (medium 6.1)
- [CVE-2026-106321](https://insights.sbomify.com/CVE-2026-106321/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-106320](https://insights.sbomify.com/CVE-2026-106320/): Use after free in Chrome (medium 4.2)
- [CVE-2026-10632](https://insights.sbomify.com/CVE-2026-10632/): Zimbra Collaboration Suite Classic Web Client Reflected Cross-Site Scripting via Document Editor Packages Parameter (high 8.7)
- [CVE-2026-106318](https://insights.sbomify.com/CVE-2026-106318/): Use after free in Chrome (high 8.8)
- [CVE-2026-106317](https://insights.sbomify.com/CVE-2026-106317/): Other in Chrome (medium 5.4)
- [CVE-2026-106316](https://insights.sbomify.com/CVE-2026-106316/): Other in Chrome (medium 5.4)
- [CVE-2026-106315](https://insights.sbomify.com/CVE-2026-106315/): Use after free in Chrome (high 8.8)
- [CVE-2026-106314](https://insights.sbomify.com/CVE-2026-106314/): Missing authorization in Chrome (high 8.8)
- [CVE-2026-106313](https://insights.sbomify.com/CVE-2026-106313/): Missing authorization in Chrome (medium 5.1)
- [CVE-2026-106312](https://insights.sbomify.com/CVE-2026-106312/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-106311](https://insights.sbomify.com/CVE-2026-106311/): Other in Chrome (medium 5.4)
- [CVE-2026-106310](https://insights.sbomify.com/CVE-2026-106310/): Use after free in Chrome (medium 6.5)
- [CVE-2026-10631](https://insights.sbomify.com/CVE-2026-10631/): Zimbra Collaboration Suite EWS Extension Authorization Bypass via Crafted Composite Folder/Item Identifier (medium 6.5)
- [CVE-2026-106309](https://insights.sbomify.com/CVE-2026-106309/): Missing authorization in Chrome (high 8.8)
- [CVE-2026-106308](https://insights.sbomify.com/CVE-2026-106308/): Information disclosure in Chrome (high 8.8)
- [CVE-2026-106307](https://insights.sbomify.com/CVE-2026-106307/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-106306](https://insights.sbomify.com/CVE-2026-106306/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-106305](https://insights.sbomify.com/CVE-2026-106305/): Other in Chrome (medium 5.4)
- [CVE-2026-106304](https://insights.sbomify.com/CVE-2026-106304/): Memory corruption in Chrome (medium 4.7)
- [CVE-2026-106303](https://insights.sbomify.com/CVE-2026-106303/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-106302](https://insights.sbomify.com/CVE-2026-106302/): Other in Chrome (medium 5.4)
- [CVE-2026-106301](https://insights.sbomify.com/CVE-2026-106301/): Security feature bypass in Chrome (high 8.1)
- [CVE-2026-106300](https://insights.sbomify.com/CVE-2026-106300/): Race condition in Chrome (medium 4.7)
- [CVE-2026-10630](https://insights.sbomify.com/CVE-2026-10630/): Missing authorization in WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses (medium 4.3)
- [CVE-2026-1063](https://insights.sbomify.com/CVE-2026-1063/): bastillion-io Bastillion Public Key Management System AuthKeysKtrl.java command injection (medium 5.1)
- [CVE-2026-106299](https://insights.sbomify.com/CVE-2026-106299/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-106298](https://insights.sbomify.com/CVE-2026-106298/): Use after free in Chrome (critical 9.6)
- [CVE-2026-106297](https://insights.sbomify.com/CVE-2026-106297/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-106296](https://insights.sbomify.com/CVE-2026-106296/): Privilege escalation in Chrome (medium 5.4)
- [CVE-2026-106295](https://insights.sbomify.com/CVE-2026-106295/): Missing authorization in Chrome (medium 4.2)
- [CVE-2026-106294](https://insights.sbomify.com/CVE-2026-106294/): Security feature bypass in Chrome (critical 9.1)
- [CVE-2026-106293](https://insights.sbomify.com/CVE-2026-106293/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-106292](https://insights.sbomify.com/CVE-2026-106292/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-106291](https://insights.sbomify.com/CVE-2026-106291/): Use after free in Chrome (high 8.8)
- [CVE-2026-106290](https://insights.sbomify.com/CVE-2026-106290/): Information disclosure in Chrome (medium 4.7)
- [CVE-2026-10629](https://insights.sbomify.com/CVE-2026-10629/): CVE-2026-10629 (high 7.4)
- [CVE-2026-106289](https://insights.sbomify.com/CVE-2026-106289/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-106288](https://insights.sbomify.com/CVE-2026-106288/): Missing authorization in Chrome (medium 5.4)
- [CVE-2026-106287](https://insights.sbomify.com/CVE-2026-106287/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-106286](https://insights.sbomify.com/CVE-2026-106286/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-106285](https://insights.sbomify.com/CVE-2026-106285/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-106284](https://insights.sbomify.com/CVE-2026-106284/): Memory corruption in Chrome (medium 4.7)
- [CVE-2026-106283](https://insights.sbomify.com/CVE-2026-106283/): Use after free in Chrome (high 8.8)
- [CVE-2026-106282](https://insights.sbomify.com/CVE-2026-106282/): Other in Chrome (medium 5.4)
- [CVE-2026-106281](https://insights.sbomify.com/CVE-2026-106281/): Use after free in Chrome (critical 9.6)
- [CVE-2026-106280](https://insights.sbomify.com/CVE-2026-106280/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-10628](https://insights.sbomify.com/CVE-2026-10628/): Missing authorization in Points and Rewards for WooCommerce (medium 4.3)
- [CVE-2026-106279](https://insights.sbomify.com/CVE-2026-106279/): Other in Chrome (high 7.4)
- [CVE-2026-106278](https://insights.sbomify.com/CVE-2026-106278/): Use after free in Chrome (high 8.8)
- [CVE-2026-106277](https://insights.sbomify.com/CVE-2026-106277/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-106276](https://insights.sbomify.com/CVE-2026-106276/): Other in Chrome (medium 5.4)
- [CVE-2026-106275](https://insights.sbomify.com/CVE-2026-106275/): Information disclosure in Chrome (medium 4.7)
- [CVE-2026-106274](https://insights.sbomify.com/CVE-2026-106274/): Information disclosure in Chrome (high 8.8)
- [CVE-2026-106273](https://insights.sbomify.com/CVE-2026-106273/): Information disclosure in Chrome (medium 4.7)
- [CVE-2026-106272](https://insights.sbomify.com/CVE-2026-106272/): Other in Chrome (medium 5.4)
- [CVE-2026-106271](https://insights.sbomify.com/CVE-2026-106271/): Missing authorization in Chrome (high 8.1)
- [CVE-2026-106270](https://insights.sbomify.com/CVE-2026-106270/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-10627](https://insights.sbomify.com/CVE-2026-10627/): Missing authorization in Events Manager – Calendar, Bookings, Tickets, and more! (medium 5.3)
- [CVE-2026-106269](https://insights.sbomify.com/CVE-2026-106269/): Use after free in Chrome (high 8.8)
- [CVE-2026-106268](https://insights.sbomify.com/CVE-2026-106268/): Use after free in Chrome (high 8.8)
- [CVE-2026-106267](https://insights.sbomify.com/CVE-2026-106267/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-106266](https://insights.sbomify.com/CVE-2026-106266/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-106265](https://insights.sbomify.com/CVE-2026-106265/): Other in Chrome (medium 5.4)
- [CVE-2026-106264](https://insights.sbomify.com/CVE-2026-106264/): Missing authorization in Chrome (medium 5.4)
- [CVE-2026-106263](https://insights.sbomify.com/CVE-2026-106263/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-106262](https://insights.sbomify.com/CVE-2026-106262/): Other in Chrome (medium 4.2)
- [CVE-2026-106261](https://insights.sbomify.com/CVE-2026-106261/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-106260](https://insights.sbomify.com/CVE-2026-106260/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-106259](https://insights.sbomify.com/CVE-2026-106259/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-106258](https://insights.sbomify.com/CVE-2026-106258/): Information disclosure in Chrome (medium 4.7)
- [CVE-2026-106257](https://insights.sbomify.com/CVE-2026-106257/): Use after free in Chrome (high 8.8)
- [CVE-2026-106256](https://insights.sbomify.com/CVE-2026-106256/): Information disclosure in Chrome (high 8.8)
- [CVE-2026-106255](https://insights.sbomify.com/CVE-2026-106255/): Race condition in Chrome (high 8.8)
- [CVE-2026-106254](https://insights.sbomify.com/CVE-2026-106254/): Information disclosure in Chrome (medium 5.1)
- [CVE-2026-106253](https://insights.sbomify.com/CVE-2026-106253/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-106252](https://insights.sbomify.com/CVE-2026-106252/): Other in Chrome (high 8.8)
- [CVE-2026-106251](https://insights.sbomify.com/CVE-2026-106251/): Other in Chrome (medium 5.4)
- [CVE-2026-106250](https://insights.sbomify.com/CVE-2026-106250/): Missing authorization in Chrome (medium 5.4)
- [CVE-2026-106249](https://insights.sbomify.com/CVE-2026-106249/): Missing authorization in Chrome (high 8.8)
- [CVE-2026-106248](https://insights.sbomify.com/CVE-2026-106248/): Use after free in Chrome (high 8.8)
- [CVE-2026-106247](https://insights.sbomify.com/CVE-2026-106247/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-106246](https://insights.sbomify.com/CVE-2026-106246/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-106245](https://insights.sbomify.com/CVE-2026-106245/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-106244](https://insights.sbomify.com/CVE-2026-106244/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-106243](https://insights.sbomify.com/CVE-2026-106243/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-106242](https://insights.sbomify.com/CVE-2026-106242/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-106241](https://insights.sbomify.com/CVE-2026-106241/): Missing authorization in Chrome (critical 9.6)
- [CVE-2026-106240](https://insights.sbomify.com/CVE-2026-106240/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-10624](https://insights.sbomify.com/CVE-2026-10624/): SourceCodester Human Resource Management Employee View detailview.php resource injection (medium 5.3)
- [CVE-2026-106239](https://insights.sbomify.com/CVE-2026-106239/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-106238](https://insights.sbomify.com/CVE-2026-106238/): Race condition in Chrome (high 8.3)
- [CVE-2026-106237](https://insights.sbomify.com/CVE-2026-106237/): Information disclosure in Chrome (critical 9.6)
- [CVE-2026-106236](https://insights.sbomify.com/CVE-2026-106236/): Other in Chrome (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/963/