High-severity CVEs (page 42)
Page 42 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-106271 | High | 8.1 | 2026-10-06 | Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isol… |
CVE-2026-106269 | High | 8.8 | 2026-10-06 | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-106268 | High | 8.8 | 2026-10-06 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106257 | High | 8.8 | 2026-10-06 | Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106256 | High | 8.8 | 2026-10-06 | Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive… |
CVE-2026-106255 | High | 8.8 | 2026-10-06 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-106252 | High | 8.8 | 2026-10-06 | Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
CVE-2026-106249 | High | 8.8 | 2026-10-06 | Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a craft… |
CVE-2026-106248 | High | 8.8 | 2026-10-06 | Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-106247 | High | 8.3 | 2026-10-06 | Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbi… |
CVE-2026-106240 | High | 8.8 | 2026-10-06 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106238 | High | 8.3 | 2026-10-06 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbit… |
CVE-2026-106235 | High | 8.8 | 2026-10-06 | Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-106233 | High | 8.3 | 2026-10-06 | Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code… |
CVE-2026-106228 | High | 8.3 | 2026-10-06 | Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execut… |
CVE-2026-106225 | High | 8.8 | 2026-10-06 | Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informati… |
CVE-2026-106221 | High | 8.3 | 2026-10-06 | Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin p… |
CVE-2026-106220 | High | 8.8 | 2026-10-06 | Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chrom… |
CVE-2026-106212 | High | 8.8 | 2026-10-06 | Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informa… |
CVE-2026-106207 | High | 8.8 | 2026-10-06 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106205 | High | 8.1 | 2026-10-06 | Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-106204 | High | 8.8 | 2026-10-06 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (C… |
CVE-2026-106203 | High | 8.8 | 2026-10-06 | Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive in… |
CVE-2026-106201 | High | 8.8 | 2026-10-06 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-106200 | High | 8.8 | 2026-10-06 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106199 | High | 8.2 | 2026-10-06 | Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to po… |
CVE-2026-106198 | High | 8.2 | 2026-10-06 | Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web or… |
CVE-2026-106196 | High | 7.6 | 2026-10-06 | Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged p… |
CVE-2026-106194 | High | 8.3 | 2026-10-06 | Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leverage… |
CVE-2026-106193 | High | 8.8 | 2026-10-06 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106191 | High | 8.3 | 2026-10-06 | Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execut… |
CVE-2026-106190 | High | 8.8 | 2026-10-06 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-106189 | High | 7.3 | 2026-10-06 | Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin pol… |
CVE-2026-106188 | High | 7.1 | 2026-10-06 | Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privilege… |
CVE-2026-106186 | High | 8.6 | 2026-10-06 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute ar… |
CVE-2026-106122 | High | 7.5 | 2026-10-06 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShorts… |
CVE-2026-106118 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Cr… |
CVE-2026-105488 | High | 7.1 | 2026-10-06 | Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission… |
CVE-2026-104073 | High | 7.6 | 2026-10-06 | NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" per… |
CVE-2026-106117 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expand… |
CVE-2026-106115 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompresso… |
CVE-2026-106113 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying Histog… |
CVE-2026-106112 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate a… |
CVE-2026-106110 | High | 7.5 | 2026-10-06 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit ima… |
CVE-2026-106103 | High | 7.1 | 2026-10-06 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile comman… |
CVE-2026-101207 | High | 8.8 | 2026-10-06 | Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS… |
CVE-2025-45871 | High | 8.1 | 2026-10-06 | LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate… |
CVE-2026-95140 | High | 7.5 | 2026-10-06 | kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints acc… |
CVE-2026-106218 | High | 8.8 | 2026-10-06 | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
CVE-2026-106100 | High | 7.1 | 2026-10-06 | Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 and canary versions before 4.0.0-canary… |
CVE-2026-105868 | High | 7.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload config… |
CVE-2026-105866 | High | 7.5 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated… |
CVE-2026-105865 | High | 8.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated us… |
CVE-2026-105862 | High | 8.7 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that a… |
CVE-2026-105861 | High | 8.2 | 2026-10-06 | Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrie… |
CVE-2026-105860 | High | 7.1 | 2026-10-06 | Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0… |
CVE-2026-105858 | High | 8.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request t… |
CVE-2026-105856 | High | 8.3 | 2026-10-06 | Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to… |
CVE-2026-105855 | High | 7.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to… |
CVE-2026-105854 | High | 7.5 | 2026-10-06 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malfor… |
CVE-2026-105852 | High | 7.5 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable… |
CVE-2026-105851 | High | 8.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the dupl… |
CVE-2026-105850 | High | 8.2 | 2026-10-06 | Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-c… |
CVE-2026-105849 | High | 8.3 | 2026-10-06 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users wi… |
CVE-2026-104850 | High | 7.5 | 2026-10-06 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2… |
CVE-2026-76105 | High | 7.7 | 2026-10-06 | Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with loca… |
CVE-2026-70411 | High | 7.1 | 2026-10-06 | Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-… |
CVE-2026-67270 | High | 8.2 | 2026-10-06 | Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unau… |
CVE-2026-61411 | High | 7.7 | 2026-10-06 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attack… |
CVE-2026-26287 | High | 7.1 | 2026-10-06 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 a… |
CVE-2026-105798 | High | 8.7 | 2026-10-06 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group_d… |
CVE-2026-105797 | High | 8.8 | 2026-10-06 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027… |
CVE-2026-105796 | High | 8.8 | 2026-10-06 | Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment termi… |
CVE-2026-105791 | High | 7.5 | 2026-10-06 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecuto… |
CVE-2026-104069 | High | 7.2 | 2026-10-06 | HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the… |
CVE-2026-85523 | High | 8.8 | 2026-10-06 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trad… |
CVE-2026-106040 | High | 8.2 | 2026-10-06 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk repl… |
CVE-2026-106038 | High | 8.2 | 2026-10-06 | Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via… |
CVE-2026-105920 | High | 7.3 | 2026-10-06 | A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown fu… |
CVE-2026-105841 | High | 7.5 | 2026-10-06 | lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by sup… |
CVE-2026-105840 | High | 7.5 | 2026-10-06 | lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files ou… |
CVE-2026-105839 | High | 7.8 | 2026-10-06 | libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track… |
CVE-2026-105837 | High | 7.8 | 2026-10-06 | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafte… |
CVE-2026-105788 | High | 8.8 | 2026-10-06 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/c… |
CVE-2026-82531 | High | 8.1 | 2026-10-06 | Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-compo… |
CVE-2026-105919 | High | 7.3 | 2026-10-06 | A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql… |
CVE-2026-105835 | High | 7.4 | 2026-10-06 | PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor a… |
CVE-2026-105918 | High | 7.3 | 2026-10-06 | A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql_error… |
CVE-2026-105985 | High | 8.8 | 2026-10-06 | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user… |
CVE-2026-84854 | High | 7.0 | 2026-10-06 | In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amou… |
CVE-2026-98369 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject(… |
CVE-2026-98368 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place outpu… |
CVE-2026-98367 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to cl… |
CVE-2026-98366 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_user_mr() reassigns… |
CVE-2026-98364 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation xfrm_bundle_create() and xfr… |
CVE-2026-98361 | High | 7.8 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d7c1cd3 ("RDMA/rxe… |
CVE-2026-98360 | High | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds rxe_get_mcg() publ… |
CVE-2026-98359 | High | 7.0 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intent… |
CVE-2026-98357 | High | 8.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert… |
CVE-2026-98349 | High | 7.1 | 2026-10-06 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response()… |