High-severity CVEs (page 6)
Page 6 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-113729 | High | 7.5 | 2026-10-20 | Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the c… |
CVE-2026-113728 | High | 7.5 | 2026-10-20 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-… |
CVE-2026-113727 | High | 7.4 | 2026-10-20 | OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a reque… |
CVE-2026-113726 | High | 7.8 | 2026-10-20 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment… |
CVE-2026-113704 | High | 7.3 | 2026-10-20 | A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sende… |
CVE-2026-113344 | High | 8.8 | 2026-10-20 | Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113343 | High | 8.8 | 2026-10-20 | Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113339 | High | 8.8 | 2026-10-20 | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-113338 | High | 8.8 | 2026-10-20 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-113337 | High | 8.8 | 2026-10-20 | Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML p… |
CVE-2026-113335 | High | 8.8 | 2026-10-20 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-113334 | High | 8.8 | 2026-10-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside… |
CVE-2026-113332 | High | 8.8 | 2026-10-20 | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113331 | High | 8.8 | 2026-10-20 | Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
CVE-2026-113330 | High | 8.8 | 2026-10-20 | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th… |
CVE-2026-113327 | High | 8.8 | 2026-10-20 | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113324 | High | 8.8 | 2026-10-20 | Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-113323 | High | 8.8 | 2026-10-20 | Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the s… |
CVE-2026-113321 | High | 8.8 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113320 | High | 8.8 | 2026-10-20 | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sa… |
CVE-2026-113319 | High | 8.8 | 2026-10-20 | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-113318 | High | 8.8 | 2026-10-20 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… |
CVE-2026-113317 | High | 8.8 | 2026-10-20 | Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… |
CVE-2026-113316 | High | 8.8 | 2026-10-20 | Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… |
CVE-2026-113315 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-113314 | High | 8.8 | 2026-10-20 | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113313 | High | 8.8 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
CVE-2026-113312 | High | 8.8 | 2026-10-20 | Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sand… |
CVE-2026-113311 | High | 8.8 | 2026-10-20 | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-113308 | High | 8.8 | 2026-10-20 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113307 | High | 8.8 | 2026-10-20 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-113306 | High | 8.8 | 2026-10-20 | Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… |
CVE-2026-113305 | High | 8.8 | 2026-10-20 | Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-113303 | High | 8.8 | 2026-10-20 | Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cr… |
CVE-2026-113302 | High | 8.8 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113301 | High | 8.8 | 2026-10-20 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… |
CVE-2026-113299 | High | 8.8 | 2026-10-20 | Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113298 | High | 8.8 | 2026-10-20 | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr… |
CVE-2026-113294 | High | 8.8 | 2026-10-20 | Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… |
CVE-2026-113293 | High | 8.8 | 2026-10-20 | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a craf… |
CVE-2026-113292 | High | 8.8 | 2026-10-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code insi… |
CVE-2026-113291 | High | 8.8 | 2026-10-20 | Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113290 | High | 8.8 | 2026-10-20 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-113289 | High | 8.8 | 2026-10-20 | Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… |
CVE-2026-113288 | High | 8.8 | 2026-10-20 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-113287 | High | 8.8 | 2026-10-20 | Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-113286 | High | 8.8 | 2026-10-20 | Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted H… |
CVE-2026-113285 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c… |
CVE-2026-113284 | High | 8.8 | 2026-10-20 | Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft… |
CVE-2026-113282 | High | 8.8 | 2026-10-20 | Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox vi… |
CVE-2026-113281 | High | 8.8 | 2026-10-20 | Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v… |
CVE-2026-113280 | High | 8.8 | 2026-10-20 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-113279 | High | 8.8 | 2026-10-20 | Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox v… |
CVE-2026-113278 | High | 8.8 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113276 | High | 8.8 | 2026-10-20 | Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the… |
CVE-2026-113275 | High | 8.8 | 2026-10-20 | Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-113274 | High | 8.8 | 2026-10-20 | Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113273 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-113272 | High | 8.8 | 2026-10-20 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113271 | High | 8.8 | 2026-10-20 | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HT… |
CVE-2026-113269 | High | 8.8 | 2026-10-20 | Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113268 | High | 8.8 | 2026-10-20 | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… |
CVE-2026-113267 | High | 8.8 | 2026-10-20 | Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-113266 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san… |
CVE-2026-113265 | High | 8.8 | 2026-10-20 | Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c… |
CVE-2026-113264 | High | 8.8 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sand… |
CVE-2026-113262 | High | 8.8 | 2026-10-20 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c… |
CVE-2026-113260 | High | 8.8 | 2026-10-20 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craf… |
CVE-2026-113259 | High | 8.8 | 2026-10-20 | Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113258 | High | 8.8 | 2026-10-20 | Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113257 | High | 8.8 | 2026-10-20 | Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-113256 | High | 8.8 | 2026-10-20 | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113255 | High | 8.8 | 2026-10-20 | Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… |
CVE-2026-113254 | High | 8.8 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a… |
CVE-2026-113253 | High | 8.8 | 2026-10-20 | Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113251 | High | 8.8 | 2026-10-20 | Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-113250 | High | 8.8 | 2026-10-20 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte… |
CVE-2026-113249 | High | 8.8 | 2026-10-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th… |
CVE-2026-113248 | High | 8.8 | 2026-10-20 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113247 | High | 8.8 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113245 | High | 8.8 | 2026-10-20 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113244 | High | 8.8 | 2026-10-20 | Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… |
CVE-2026-113243 | High | 8.8 | 2026-10-20 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft… |
CVE-2026-113242 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a c… |
CVE-2026-113241 | High | 8.8 | 2026-10-20 | Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the s… |
CVE-2026-113240 | High | 8.8 | 2026-10-20 | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c… |
CVE-2026-113239 | High | 8.8 | 2026-10-20 | Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a… |
CVE-2026-113238 | High | 8.8 | 2026-10-20 | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th… |
CVE-2026-113236 | High | 8.8 | 2026-10-20 | Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a cra… |
CVE-2026-113234 | High | 8.8 | 2026-10-20 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-113233 | High | 8.8 | 2026-10-20 | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the san… |
CVE-2026-113232 | High | 8.8 | 2026-10-20 | Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cr… |
CVE-2026-113231 | High | 8.8 | 2026-10-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sand… |
CVE-2026-113230 | High | 8.8 | 2026-10-20 | Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… |
CVE-2026-113229 | High | 8.8 | 2026-10-20 | Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page… |
CVE-2026-113228 | High | 8.8 | 2026-10-20 | Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-113227 | High | 8.8 | 2026-10-20 | Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag… |
CVE-2026-113226 | High | 8.8 | 2026-10-20 | Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa… |
CVE-2026-113221 | High | 8.8 | 2026-10-20 | Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… |
CVE-2026-113220 | High | 8.8 | 2026-10-20 | Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside th… |