Critical-severity CVEs (page 11)

Page 11 of 100 — critical-severity CVEs, newest first, with CVSS scores and publication dates.

All critical-severity CVEs — newest first (page 11 of 100)
CVESeverityScorePublishedSummary
CVE-2026-88285Critical9.42026-09-10GeoVision GV-LPC2211 V1.13 exposes a network-accessible PTZ control service without authentication, allowing remote clients to retrieve PTZ information and iss…
CVE-2026-88278Critical9.82026-09-10GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, allowing a captured PasswordDigest token to be repla…
CVE-2026-59679Critical9.02026-09-10fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 r…
CVE-2026-44950Critical9.02026-09-10fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the…
CVE-2026-80352Critical9.82026-09-10Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration a…
CVE-2026-80351Critical9.82026-09-10Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K. An improper neutralization of direct…
CVE-2026-7188Critical9.82026-09-10Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control S…
CVE-2026-78361Critical9.12026-09-10The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request ha…
CVE-2026-77770Critical10.02026-09-10The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a validated transaction before deleting site o…
CVE-2026-84939Critical9.12026-09-10Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarke…
CVE-2026-67593Critical9.12026-09-10A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the Artemis broker before the connection authenticat…
CVE-2026-57967Critical9.82026-09-10An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previousl…
CVE-2026-49364Critical9.12026-09-10An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credentials during the initial cluster connection handsha…
CVE-2026-19583Critical9.92026-09-10Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command exec…
CVE-2026-18351Critical9.82026-09-10The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via t…
CVE-2026-87931Critical9.62026-09-10A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the co…
CVE-2026-71805Critical9.82026-09-09An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them…
CVE-2026-71801Critical9.82026-09-09An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file…
CVE-2026-36433Critical9.82026-09-09An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production…
CVE-2026-87911Critical9.62026-09-09An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an…
CVE-2026-54694Critical9.62026-09-09SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with th…
CVE-2026-87929Critical9.82026-09-09MaxSite CMS through 109.6 ships with a hardcoded session encryption key in application/config/config.php that is never changed during installation, allowing un…
CVE-2026-67401Critical9.92026-09-09A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
CVE-2026-22590Critical9.12026-09-09eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Versions prior to 2.6.12, 2.14…
CVE-2026-85103Critical9.82026-09-09A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Se…
CVE-2026-85102Critical9.82026-09-09Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute ar…
CVE-2026-80172Critical9.82026-09-09Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Au…
CVE-2026-85978Critical9.82026-09-09An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the…
CVE-2026-56207Critical9.82026-09-09Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as anoth…
CVE-2026-41871Critical9.82026-09-09Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API…
CVE-2026-41869Critical9.12026-09-09Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nut…
CVE-2026-16272Critical9.12026-09-09Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation o…
CVE-2026-21096Critical9.82026-09-09Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21095Critical9.82026-09-09Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-87654Critical9.62026-09-09Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr…
CVE-2026-87650Critical9.62026-09-09Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c…
CVE-2026-87646Critical9.62026-09-09Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf…
CVE-2026-87643Critical9.62026-09-09Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandb…
CVE-2026-87638Critical9.62026-09-09Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a…
CVE-2026-87637Critical9.62026-09-09Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cr…
CVE-2026-87634Critical9.62026-09-09Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via…
CVE-2026-87621Critical9.62026-09-09Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-87613Critical9.02026-09-09Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside th…
CVE-2026-87609Critical9.62026-09-09Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted…
CVE-2026-87607Critical9.62026-09-09Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
CVE-2026-87595Critical9.82026-09-09Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access r…
CVE-2026-87581Critical9.62026-09-09Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod…
CVE-2026-87558Critical9.62026-09-09Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf…
CVE-2026-87547Critical9.62026-09-09Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially exe…
CVE-2026-87544Critical9.82026-09-09Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged…
CVE-2026-87534Critical9.82026-09-09Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system…
CVE-2026-87529Critical9.62026-09-09Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox v…
CVE-2026-87528Critical9.62026-09-09Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbo…
CVE-2026-87527Critical9.62026-09-09Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML pag…
CVE-2026-87526Critical9.62026-09-09Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co…
CVE-2026-87520Critical9.62026-09-09Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a craf…
CVE-2026-87512Critical9.62026-09-09Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra…
CVE-2026-87504Critical9.62026-09-09Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sa…
CVE-2026-87500Critical9.62026-09-09Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the…
CVE-2026-87494Critical9.62026-09-09Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary co…
CVE-2026-87492Critical9.62026-09-09Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox…
CVE-2026-87488Critical9.62026-09-09Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra…
CVE-2026-87474Critical9.62026-09-09Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cr…
CVE-2026-87470Critical9.62026-09-09Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside…
CVE-2026-87464Critical9.62026-09-09Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page…
CVE-2026-87455Critical9.62026-09-09Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte…
CVE-2026-87448Critical9.62026-09-09Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML p…
CVE-2026-87438Critical9.62026-09-09Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via…
CVE-2026-53939Critical9.12026-09-09OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE usi…
CVE-2026-53581Critical9.02026-09-08OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4_20 of BE/opnsense/core, a path traversal v…
CVE-2026-85982Critical9.02026-09-08The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log c…
CVE-2026-84869Critical9.92026-09-08A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmat…
CVE-2026-75746Critical9.12026-09-08ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary…
CVE-2026-48273Critical9.92026-09-08ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrar…
CVE-2026-19232Critical9.92026-09-08Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current us…
CVE-2026-82004Critical10.02026-09-08Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that co…
CVE-2026-76201Critical9.32026-09-08Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable…
CVE-2026-76200Critical9.32026-09-08Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable…
CVE-2026-66302Critical9.82026-09-08External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-58822Critical9.82026-09-08In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no addition…
CVE-2026-49921Critical9.82026-09-08In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execu…
CVE-2026-28606Critical9.82026-09-08In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalatio…
CVE-2026-83941Critical9.92026-09-08Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
CVE-2026-81376Critical9.62026-09-08Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-78509Critical9.82026-09-08Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78445Critical9.82026-09-08Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-77493Critical9.82026-09-08Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2026-73025Critical9.82026-09-08Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-73010Critical9.82026-09-08Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-73009Critical9.82026-09-08Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-72983Critical9.82026-09-08Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
CVE-2026-72982Critical9.82026-09-08Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
CVE-2026-72979Critical9.82026-09-08Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-70296Critical9.82026-09-08Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69910Critical9.82026-09-08Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
CVE-2026-69854Critical9.02026-09-08Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69845Critical9.82026-09-08Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69829Critical9.82026-09-08Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
CVE-2026-69824Critical9.82026-09-08Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.
CVE-2026-69819Critical9.82026-09-08Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.