CVE-2026-74968

Site isolation issue in the Graphics: WebRender component. This vulner...

CVE-2026-73502

kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 unt...

CVE-2026-74945

Information disclosure in the Graphics: Text component. This vulnerabi...

CVE-2026-17106

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, U...

CVE-2026-53525

GHSA-vhv8-g2r9-cwcc: Non-Constant-Time Password Hash Comparison in Relay Authentication...

CVE-2026-74942

Privilege escalation in the Remote Settings Client component. This vul...

CVE-2026-75838

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability...

CVE-2026-1199

Zabbix API and Frontend login lockout mechanism has a flaw where sever...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63632

Open Neural Network Exchange ONNX is an open standard for machine le...

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fi...

CVE-2026-74952

Privilege escalation in the Application Update component. This vulnera...

CVE-2026-75625

Kraken agents fail to verify peer-to-peer downloaded blobs against the...

CVE-2026-74947

Privilege escalation due to invalid pointer in the Graphics component...

CVE-2026-74934

Site isolation issue in the Graphics: CanvasWebGL component. This vuln...

CVE-2026-74958

Information disclosure in the WebRTC component. This vulnerability was...

CVE-2026-74953

Privilege escalation in the Networking: Cookies component. This vulner...

CVE-2026-74961

Side-channel in the Web Audio component. This vulnerability was fixed...

CVE-2026-74984

Race condition in the JavaScript Engine component. This vulnerability...

CVE-2026-74937

Use-after-free in the JavaScript: GC component. This vulnerability was...

CVE-2026-74966

Information disclosure in the Form Autofill component. This vulnerabil...

CVE-2026-74982

Denial-of-service in the Widget component. This vulnerability was fixe...

CVE-2026-74987

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...

CVE-2026-74988

Internally found bugs present in Thunderbird ESR 153.0 and Thunderbird...

CVE-2026-74948

Information disclosure in the Graphics component. This vulnerability w...

CVE-2026-74941

Privilege escalation in the Graphics: CanvasWebGL component. This vuln...

CVE-2026-74956

Same-origin policy bypass in the DOM: Service Workers component. This...

CVE-2026-74957

Mitigation bypass in the Safe Browsing component. This vulnerability w...

CVE-2026-74936

Use-after-free in the JavaScript: WebAssembly component. This vulnerab...

CVE-2026-74977

Integer overflow in the Graphics component. This vulnerability was fix...

CVE-2026-74950

Privilege escalation in the Downloads API component. This vulnerabilit...

CVE-2026-74990

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...

CVE-2026-74985

Privilege escalation in the Enterprise Policies component. This vulner...

CVE-2026-74972

Information disclosure in the DOM: Push Subscriptions component. This...

CVE-2026-23929

Prototype pollution vulnerability in searchParamsToObject is leading...

CVE-2026-23933

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions...

CVE-2026-74951

Clickjacking issue in Firefox for Android. This vulnerability was fixe...

CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-23934

An authenticated user is able to cause disproportionate CPU load on th...

CVE-2026-23935

A Zabbix administrator is able to read out of bounds memory by utilizi...

CVE-2026-74949

Privilege escalation due to use-after-free in the Graphics: Canvas2D c...

CVE-2026-18724

Unknown description...

CVE-2026-18725

Unknown description...

CVE-2026-63347

Unknown description...

CVE-2026-11817

This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who is an Org Admin of a single organization can call GET...

CVE-2026-63409

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp, causing the missing value after the final option key to be read beyond the vect...

CVE-2026-65832

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...

CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...