High-severity CVEs (page 41)
Page 41 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-106550 | High | 7.5 | 2026-10-06 | Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution protections in con… |
CVE-2026-106492 | High | 7.6 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper pres… |
CVE-2026-106488 | High | 8.1 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by… |
CVE-2026-106486 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @ba… |
CVE-2026-106459 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affect… |
CVE-2026-106455 | High | 7.7 | 2026-10-06 | Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is affected by… |
CVE-2026-106062 | High | 7.8 | 2026-10-06 | A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, an… |
CVE-2026-101258 | High | 7.8 | 2026-10-06 | A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell c… |
CVE-2026-96580 | High | 7.5 | 2026-10-06 | Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating a run, before the fork pull request app… |
CVE-2026-96404 | High | 8.1 | 2026-10-06 | When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has been reset to `false`, submitting the… |
CVE-2026-96399 | High | 7.5 | 2026-10-06 | A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue re… |
CVE-2026-89430 | High | 8.1 | 2026-10-06 | Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed t… |
CVE-2026-79960 | High | 7.1 | 2026-10-06 | When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks in the push hook pipeline evaluated th… |
CVE-2026-79811 | High | 7.2 | 2026-10-06 | A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL… |
CVE-2026-79810 | High | 7.2 | 2026-10-06 | Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attac… |
CVE-2026-79809 | High | 7.3 | 2026-10-06 | An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an… |
CVE-2026-79808 | High | 7.8 | 2026-10-06 | A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to exe… |
CVE-2026-79807 | High | 7.8 | 2026-10-06 | A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to e… |
CVE-2026-79806 | High | 7.8 | 2026-10-06 | A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user… |
CVE-2026-79803 | High | 8.8 | 2026-10-06 | A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escala… |
CVE-2026-79802 | High | 8.8 | 2026-10-06 | A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to sup… |
CVE-2026-79800 | High | 8.8 | 2026-10-06 | An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privi… |
CVE-2026-79799 | High | 8.8 | 2026-10-06 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site… |
CVE-2026-79797 | High | 8.8 | 2026-10-06 | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality… |
CVE-2026-76748 | High | 8.8 | 2026-10-06 | A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileg… |
CVE-2026-70357 | High | 7.5 | 2026-10-06 | Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves th… |
CVE-2026-104636 | High | 7.5 | 2026-10-06 | Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git operations… |
CVE-2026-104632 | High | 8.8 | 2026-10-06 | Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required… |
CVE-2026-104626 | High | 8.8 | 2026-10-06 | A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval… |
CVE-2026-103670 | High | 7.5 | 2026-10-06 | When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed… |
CVE-2026-103504 | High | 8.1 | 2026-10-06 | Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access, and the requested level… |
CVE-2026-103009 | High | 7.1 | 2026-10-06 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search req… |
CVE-2026-103007 | High | 7.2 | 2026-10-06 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced… |
CVE-2026-102406 | High | 8.8 | 2026-10-06 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user o… |
CVE-2026-102167 | High | 7.5 | 2026-10-06 | On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker… |
CVE-2026-102165 | High | 7.5 | 2026-10-06 | On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service t… |
CVE-2026-102163 | High | 8.8 | 2026-10-06 | On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can… |
CVE-2026-102162 | High | 8.8 | 2026-10-06 | On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway servi… |
CVE-2026-102161 | High | 8.8 | 2026-10-06 | An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers)… |
CVE-2026-102160 | High | 7.2 | 2026-10-06 | An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup… |
CVE-2026-102155 | High | 8.5 | 2026-10-06 | An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, lead… |
CVE-2026-101158 | High | 8.4 | 2026-10-06 | A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site… |
CVE-2026-101157 | High | 8.7 | 2026-10-06 | A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes… |
CVE-2026-101156 | High | 8.4 | 2026-10-06 | A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The c… |
CVE-2026-101154 | High | 7.2 | 2026-10-06 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially craft… |
CVE-2026-101153 | High | 8.0 | 2026-10-06 | On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient hi… |
CVE-2026-101152 | High | 8.0 | 2026-10-06 | Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, caus… |
CVE-2026-101027 | High | 7.7 | 2026-10-06 | When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-net… |
CVE-2026-96890 | High | 8.8 | 2026-10-06 | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to i… |
CVE-2026-86362 | High | 8.2 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially… |
CVE-2026-86361 | High | 8.2 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with… |
CVE-2026-83550 | High | 7.1 | 2026-10-06 | A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remo… |
CVE-2026-82162 | High | 7.4 | 2026-10-06 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remo… |
CVE-2026-71168 | High | 7.3 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low… |
CVE-2026-63697 | High | 7.6 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could p… |
CVE-2026-56906 | High | 7.0 | 2026-10-06 | In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-106443 | High | 8.8 | 2026-10-06 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img… |
CVE-2026-106442 | High | 7.8 | 2026-10-06 | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for C… |
CVE-2026-106441 | High | 7.8 | 2026-10-06 | Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config… |
CVE-2026-106440 | High | 7.8 | 2026-10-06 | Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configu… |
CVE-2026-106426 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a craft… |
CVE-2026-106423 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106421 | High | 8.8 | 2026-10-06 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-106412 | High | 8.3 | 2026-10-06 | Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged socia… |
CVE-2026-106411 | High | 8.8 | 2026-10-06 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106409 | High | 8.3 | 2026-10-06 | Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer p… |
CVE-2026-106403 | High | 8.1 | 2026-10-06 | Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass s… |
CVE-2026-106393 | High | 8.3 | 2026-10-06 | Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… |
CVE-2026-106387 | High | 8.8 | 2026-10-06 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive i… |
CVE-2026-106383 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106378 | High | 8.3 | 2026-10-06 | Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute… |
CVE-2026-106377 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code ou… |
CVE-2026-106374 | High | 8.8 | 2026-10-06 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106373 | High | 8.8 | 2026-10-06 | Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a craf… |
CVE-2026-106371 | High | 8.8 | 2026-10-06 | Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive informatio… |
CVE-2026-106367 | High | 8.4 | 2026-10-06 | Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially exe… |
CVE-2026-106363 | High | 8.3 | 2026-10-06 | Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged so… |
CVE-2026-106357 | High | 8.8 | 2026-10-06 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106352 | High | 8.8 | 2026-10-06 | Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive infor… |
CVE-2026-106350 | High | 8.8 | 2026-10-06 | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (… |
CVE-2026-106349 | High | 8.8 | 2026-10-06 | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106347 | High | 8.8 | 2026-10-06 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106346 | High | 8.8 | 2026-10-06 | Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbo… |
CVE-2026-106342 | High | 8.8 | 2026-10-06 | Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromi… |
CVE-2026-106341 | High | 8.8 | 2026-10-06 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-106335 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106334 | High | 8.8 | 2026-10-06 | Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information vi… |
CVE-2026-106318 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106315 | High | 8.8 | 2026-10-06 | Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-106314 | High | 8.8 | 2026-10-06 | Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page… |
CVE-2026-106309 | High | 8.8 | 2026-10-06 | Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted… |
CVE-2026-106308 | High | 8.8 | 2026-10-06 | Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obt… |
CVE-2026-106301 | High | 8.1 | 2026-10-06 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system… |
CVE-2026-106293 | High | 8.3 | 2026-10-06 | Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbit… |
CVE-2026-106292 | High | 8.3 | 2026-10-06 | Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbi… |
CVE-2026-106291 | High | 8.8 | 2026-10-06 | Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-106283 | High | 8.8 | 2026-10-06 | Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary co… |
CVE-2026-106279 | High | 7.4 | 2026-10-06 | Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process… |
CVE-2026-106278 | High | 8.8 | 2026-10-06 | Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the s… |
CVE-2026-106274 | High | 8.8 | 2026-10-06 | Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain s… |