[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110161 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted… | |
| CVE-2026-110162 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110163 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110164 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via… | |
| CVE-2026-110165 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside… | |
| CVE-2026-110166 | 13 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110167 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110168 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110169 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110152 | 13 Oct 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code… | |
| CVE-2026-110153 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110154 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox… | |
| CVE-2026-110155 | 13 Oct 2026 | CVSS 8.8 | Google ChromeBuffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-110156 | 13 Oct 2026 | CVSS 8.3 | Google ChromeIncorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the… | |
| CVE-2026-110157 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110158 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-110159 | 13 Oct 2026 | CVSS 9.6 | Google ChromeIncorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via… | |
| CVE-2026-110160 | 13 Oct 2026 | CVSS 4.2 | Google ChromeMissing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and… | |
| CVE-2026-110143 | 13 Oct 2026 | CVSS 4.3 | Google ChromeUse of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory… | |
| CVE-2026-110144 | 13 Oct 2026 | CVSS 8.6 | Google ChromeIncorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code… | |
| CVE-2026-110145 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute… | |
| CVE-2026-110146 | 13 Oct 2026 | CVSS 6.5 | Google ChromeInformation leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive… | |
| CVE-2026-110147 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110148 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110149 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-110150 | 13 Oct 2026 | CVSS 5.5 | Google ChromePrivilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a… | |
| CVE-2026-110151 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110136 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-110137 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110138 | 13 Oct 2026 | CVSS 8.3 | Google ChromeUse after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-110139 | 13 Oct 2026 | CVSS 8.8 | Google ChromeUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110140 | 13 Oct 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-110141 | 13 Oct 2026 | CVSS 3.1 | Google ChromeObservable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page… | |
| CVE-2026-110142 | 13 Oct 2026 | CVSS 9.6 | Google ChromeUse after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a… | |
| CVE-2026-105902 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An… | |
| CVE-2026-106627 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An… | |
| CVE-2026-103820 | 13 Oct 2026 | CVSS 5.5 | Adobe Content Credentials Rust SDKCAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could… | |
| CVE-2026-104345 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-103297 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature… | |
| CVE-2026-103294 | 13 Oct 2026 | CVSS 5.9 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-103296 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature… | |
| CVE-2026-102501 | 13 Oct 2026 | CVSS 5.3 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-102502 | 13 Oct 2026 | CVSS 5.3 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature… | |
| CVE-2026-100136 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An… | |
| CVE-2026-100137 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An… | |
| CVE-2026-100138 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An… | |
| CVE-2026-100139 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An… | |
| CVE-2026-100119 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100120 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100121 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-100122 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-100123 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-100124 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100125 | 13 Oct 2026 | CVSS 5.9 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100135 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100114 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100115 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100116 | 13 Oct 2026 | CVSS 5.9 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-100117 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-100118 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker… | |
| CVE-2026-100113 | 13 Oct 2026 | CVSS 7.5 | Adobe Content Credentials Rust SDKCAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could… | |
| CVE-2026-97312 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-96956 | 13 Oct 2026 | CVSS 8.0 | Microsoft SQL Server 2017 (GDR)Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-96521 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-96522 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-96523 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-95639 | 13 Oct 2026 | CVSS 8.6 | Adobe PhotoshopPhotoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-95640 | 13 Oct 2026 | CVSS 5.5 | Adobe PhotoshopPhotoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | |
| CVE-2026-95641 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-95695 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect… | |
| CVE-2026-95696 | 13 Oct 2026 | CVSS 7.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught… | |
| CVE-2026-94512 | 13 Oct 2026 | CVSS 8.8 | Microsoft SQL Server 2017 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-94520 | 13 Oct 2026 | CVSS 4.9 | Microsoft SQL Server 2017 (GDR)Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. | |
| CVE-2026-95635 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An… | |
| CVE-2026-95636 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-95637 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-95638 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-90530 | 13 Oct 2026 | CVSS 9.3 | Adobe ColdFusion 2025ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to… | |
| CVE-2026-93895 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls… | |
| CVE-2026-93905 | 13 Oct 2026 | CVSS 8.2 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status… | |
| CVE-2026-93909 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0… | |
| CVE-2026-88085 | 13 Oct 2026 | CVSS 6.4 | Microsoft SQL Server 2017 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88086 | 13 Oct 2026 | CVSS 5.3 | Microsoft SQL Server 2019 (GDR)Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. | |
| CVE-2026-88088 | 13 Oct 2026 | CVSS 7.0 | Microsoft SQL Server 2019 (GDR)Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88089 | 13 Oct 2026 | CVSS 6.7 | Microsoft SQL Server 2017 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | |
| CVE-2026-88081 | 13 Oct 2026 | CVSS 7.7 | Microsoft SQL Server 2017 (GDR)Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-88082 | 13 Oct 2026 | CVSS 7.0 | Microsoft SQL Server 2019 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-88083 | 13 Oct 2026 | CVSS 7.5 | Microsoft SQL Server 2022 (CU 26)Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. | |
| CVE-2026-88084 | 13 Oct 2026 | CVSS 5.3 | Microsoft SQL Server 2019 (GDR)Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. | |
| CVE-2026-85919 | 13 Oct 2026 | CVSS 7.0 | Microsoft SQL Server 2019 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-85886 | 13 Oct 2026 | CVSS 8.5 | Microsoft SQL Server 2017 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-85888 | 13 Oct 2026 | CVSS 7.7 | Microsoft SQL Server 2017 (GDR)Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. | |
| CVE-2026-85876 | 13 Oct 2026 | CVSS 7.0 | Microsoft SQL Server 2019 (GDR)Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | |
| CVE-2026-85473 | 13 Oct 2026 | CVSS 5.3 | Auth0 java-jwtThe auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The… | |
| CVE-2026-83945 | 13 Oct 2026 | CVSS 6.6 | Microsoft SQL Server 2022 (GDR)Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | |
| CVE-2026-83965 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D SamplerSubstance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-83966 | 13 Oct 2026 | CVSS 7.8 | Adobe Substance 3D SamplerSubstance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… | |
| CVE-2026-83661 | 13 Oct 2026 | CVSS 7.8 | Adobe PhotoshopPhotoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the… | |
| CVE-2026-77816 | 13 Oct 2026 | CVSS 6.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could… | |
| CVE-2026-78628 | 13 Oct 2026 | CVSS 6.0 | Okta Credential Provider for WindowsThe Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The… |
Page 60 of 168