CVE-2026-74976

JIT miscompilation in the JavaScript Engine: JIT component. This vulne...

CVE-2026-74969

Use-after-free in the Layout: Text and Fonts component. This vulnerabi...

CVE-2026-74944

Use-after-free in the DOM: Core & HTML component. This vulnerability w...

CVE-2026-75874

Sandbox escape in the Remote Settings Client component. This vulnerabi...

CVE-2026-75904

libmodplug through 0.8.9.1 contains an out-of-bounds read in patsmplo...

CVE-2026-15806

The HTTPPasswordMgr class in the urllib.request module, along with its...

CVE-2026-68939

Pyenv provides simple Python version management. Prior to 2.8.0, isve...

CVE-2026-74980

Clickjacking issue in the Downloads component in Firefox for Android...

CVE-2026-56684

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8...

CVE-2026-59781

When Zabbix Agent was installed on Windows into a custom installation...

CVE-2026-74989

Internally found bugs present in Thunderbird 153. Some of these bugs s...

CVE-2026-74955

Privilege escalation in the Request Handling component. This vulnerabi...

CVE-2026-74974

Same-origin policy bypass in the Graphics: ImageLib component. This vu...

CVE-2026-74960

Site isolation issue in the WebExtensions component. This vulnerabilit...

CVE-2026-74943

Use-after-free in the Graphics: ImageLib component. This vulnerability...

CVE-2026-74965

Privilege escalation in the Shell Integration component. This vulnerab...

CVE-2026-23937

The Zabbix API host.get action can be exploited by authenticated users...

CVE-2026-23922

The email media OAuth field Client secret cannot be read after savin...

CVE-2026-63639

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8...

CVE-2026-23930

An unauthenticated user is able to cause disproportionate CPU load on...

CVE-2026-53524

GHSA-v2v4-45wm-5cr3: Decompression Bomb in Relay WebSocket DoS...

CVE-2026-17084

The "stringprep" module didnt process characters from RFC 3454 tables...

CVE-2026-74954

Information disclosure due to side-channel in the Storage: Cache API c...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-74942

Privilege escalation in the Remote Settings Client component. This vul...

CVE-2026-73502

kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 unt...

CVE-2026-74973

Race condition, use-after-free in the Graphics component. This vulnera...

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused...

CVE-2026-23931

The frontend validatate.api.exists action can be exploited by authenti...

CVE-2026-74975

Spoofing issue in the Downloads component in Firefox for Android. This...

CVE-2026-74981

Site isolation issue in the Audio/Video: Web Codecs component. This vu...

CVE-2026-74970

Site isolation issue in the Graphics component. This vulnerability was...

CVE-2026-74935

Privilege escalation in the DOM: Networking component. This vulnerabil...

CVE-2026-74971

Information disclosure in the DOM: UI Events & Focus Handling componen...

CVE-2026-74979

Mitigation bypass in the Add-ons Manager component. This vulnerability...

CVE-2026-17106

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, U...

CVE-2026-53525

GHSA-vhv8-g2r9-cwcc: Non-Constant-Time Password Hash Comparison in Relay Authentication...

CVE-2026-75926

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permis...

CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior...

CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, St...

CVE-2026-23938

An authenticated administrator is able to crash Zabbix server or proxy...

CVE-2026-74959

Mitigation bypass in the Storage: Cache API component. This vulnerabil...

CVE-2026-74939

Privilege escalation in the DOM: Navigation component. This vulnerabil...

CVE-2026-74940

Use-after-free in the Graphics: Text component. This vulnerability was...

CVE-2026-74964

Integer overflow in the Graphics component. This vulnerability was fix...

CVE-2026-74962

Site isolation issue in the Networking: Cookies component. This vulner...

CVE-2026-74963

Same-origin policy bypass in the Networking: Cookies component. This v...

CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerab...

CVE-2026-74946

Privilege escalation due to incorrect boundary conditions in the Graph...