2026 CVEs (page 349)

Page 349 of 449 — CVEs published in 2026, newest first, with CVSS severity and publication dates.

All CVEs published in 2026 — newest first (page 349 of 449)
CVESeverityScorePublishedSummary
CVE-2026-23406High7.82026-04-01In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluate…
CVE-2026-23405Medium5.52026-04-01In the Linux kernel, the following vulnerability has been resolved: apparmor: fix: limit the number of levels of policy namespaces Currently the number of po…
CVE-2026-23404Medium5.52026-04-01In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal c…
CVE-2026-23403Medium5.52026-04-01In the Linux kernel, the following vulnerability has been resolved: apparmor: fix memory leak in verify_header The function sets `*ns = NULL` on every call…
CVE-2026-23402Medium5.52026-04-01In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's…
CVE-2026-23401Medium5.52026-04-01In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When install…
CVE-2026-5259Medium6.32026-04-01A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java…
CVE-2026-28265Medium4.42026-04-01PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerabili…
CVE-2026-27101Medium4.72026-04-01Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restr…
CVE-2026-5258High7.32026-04-01A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function _get_file of the file iopaint/file_manager/file_manager.py of the component File M…
CVE-2026-4748High7.52026-04-01A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) in…
CVE-2026-5257High7.32026-04-01A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the comp…
CVE-2026-5256High7.32026-04-01A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Ha…
CVE-2026-5255Medium4.32026-04-01A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter…
CVE-2026-2696Medium5.32026-04-01The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random…
CVE-2026-5292High8.82026-04-01Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML p…
CVE-2026-5291Medium6.52026-04-01Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from proce…
CVE-2026-5290Critical9.62026-04-01Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perfor…
CVE-2026-5289Critical9.62026-04-01Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform…
CVE-2026-5288Critical9.62026-04-01Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2026-5287High8.82026-04-01Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Ch…
CVE-2026-5286High8.82026-04-01Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security…
CVE-2026-5285High8.82026-04-01Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page…
CVE-2026-5284High7.52026-04-01Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code vi…
CVE-2026-5283Medium6.52026-04-01Inappropriate implementation in ANGLE in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Ch…
CVE-2026-5282High8.12026-04-01Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML p…
CVE-2026-5281High8.82026-04-01Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code vi…
CVE-2026-5280High8.82026-04-01Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pa…
CVE-2026-5279High8.82026-04-01Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page…
CVE-2026-5278High8.82026-04-01Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Ch…
CVE-2026-5277High7.52026-04-01Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an…
CVE-2026-5276Medium6.52026-04-01Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from p…
CVE-2026-5275High8.82026-04-01Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chr…
CVE-2026-5274High8.82026-04-01Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromiu…
CVE-2026-5273Medium6.32026-04-01Use after free in CSS in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (C…
CVE-2026-5272High8.82026-04-01Heap buffer overflow in GPU in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium sec…
CVE-2026-5254Low3.52026-04-01A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. Affected by this issue is some unknown functionality of the file /ui/app/compone…
CVE-2026-5253Low3.52026-04-01A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Hea…
CVE-2026-5252Low3.52026-04-01A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/message.js of the component Message Cre…
CVE-2026-5251Medium6.32026-04-01A vulnerability was identified in z-9527 admin 1.0/2.0. This impacts an unknown function of the file /server/routes/user.js of the component User Update Endpoi…
CVE-2026-5249Low3.52026-04-01A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\view\user\record.html of the component R…
CVE-2026-4947High7.12026-04-01Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process. Under certain conditions, this issue…
CVE-2026-4374Critical9.12026-04-01Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Cloud Discovery Service, Recording Service, Routing Service, Q…
CVE-2026-3831Medium4.32026-04-01The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check o…
CVE-2026-3780High7.32026-04-01The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable…
CVE-2026-3779High7.82026-04-01The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted docu…
CVE-2026-3778Medium6.22026-04-01The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that ref…
CVE-2026-3777Medium5.52026-04-01The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state…
CVE-2026-3776Medium5.52026-04-01The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annota…
CVE-2026-3775High7.82026-04-01The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privil…
CVE-2026-3774Medium4.72026-04-01The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (O…
CVE-2026-5248Medium6.32026-04-01A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app\home\controller\Login.php of the compo…
CVE-2026-35057Medium6.42026-04-01XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions, primarily affecting legacy profile post…
CVE-2026-35056High7.22026-04-01XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users. An attacker with admin panel access can…
CVE-2026-35055Medium6.12026-04-01XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts. An attacker can inject malicious scripts…
CVE-2026-35054Medium6.42026-04-01XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering. An attacker can inject malicious scripts through BB code…
CVE-2026-2394Medium6.52026-04-01Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before…
CVE-2026-5240Medium4.32026-04-01A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /admin_state.php. The manip…
CVE-2026-5238High7.32026-04-01A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /view_employee.p…
CVE-2026-4668Medium6.52026-04-01The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the `sort` parameter in the payments listing…
CVE-2026-5237High7.32026-03-31A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /mana…
CVE-2026-5236Medium5.32026-03-31A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the compone…
CVE-2026-5235Medium5.32026-03-31A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the compo…
CVE-2026-34556Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a heap-buffer-overflow (HBO) in…
CVE-2026-34555Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) i…
CVE-2026-34554Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a heap-buffer-overflow (HBO) in CIccAppl…
CVE-2026-34553Medium4.02026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a defect in LUT dump/iteration…
CVE-2026-34552Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) issu…
CVE-2026-34551Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a null-pointer dereference (NPD) in CIcc…
CVE-2026-34550Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) cond…
CVE-2026-34549Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) cond…
CVE-2026-34548Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior (UB) cond…
CVE-2026-34547Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, an Undefined Behavior (UB) condition in…
CVE-2026-34546Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefin…
CVE-2026-2480Medium6.42026-03-31The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'max_width' attribute of the `su_box`…
CVE-2026-5215Medium4.32026-03-31A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR…
CVE-2026-5214High8.82026-03-31A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326…
CVE-2026-34605Medium6.12026-03-31SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function introduced in version 3.6.0 to fix XSS i…
CVE-2026-34585High8.62026-03-31SiYuan is a personal knowledge management system. Prior to version 3.6.2, a vulnerability allows crafted block attribute values to bypass server-side attribute…
CVE-2026-34542Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stac…
CVE-2026-34541Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefi…
CVE-2026-34540Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap…
CVE-2026-34539Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile and TIFF input can…
CVE-2026-34537Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefi…
CVE-2026-34536Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a stac…
CVE-2026-34535Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segm…
CVE-2026-34534Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap…
CVE-2026-34533Medium6.22026-03-31iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefi…
CVE-2026-34453High7.52026-03-31SiYuan is a personal knowledge management system. Prior to version 3.6.2, the publish service exposes bookmarked blocks from password-protected documents to un…
CVE-2026-34452Medium5.32026-03-31The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem…
CVE-2026-34451Medium5.42026-03-31Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81…
CVE-2026-34450Medium4.42026-03-31The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory…
CVE-2026-34449Critical9.62026-03-31SiYuan is a personal knowledge management system. Prior to version 3.6.2, a malicious website can achieve Remote Code Execution (RCE) on any desktop running Si…
CVE-2026-34448Critical9.02026-03-31SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigge…
CVE-2026-34443Medium5.32026-03-31FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, checkIpByMask() in app/Misc/Helper.php checks whet…
CVE-2026-34442Medium5.42026-03-31FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout version (htt…
CVE-2026-34441Medium4.82026-03-31cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling…
CVE-2026-34406High8.82026-03-31APTRS (Automated Penetration Testing Reporting System) is a Python and Django-based automated reporting tool designed for penetration testers and security orga…
CVE-2026-34405Medium6.12026-03-31Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older version…
CVE-2026-34404High7.52026-03-31Nuxt OG Image generates OG Images with Vue templates in Nuxt. Prior to version 6.2.5, the image‑generation component by the URI: /_og/d/ (and, in older version…