| CVE-2026-45586 | Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Publicly disclosed |
| CVE-2026-50656 | Microsoft Defender Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | Publicly disclosed |
| CVE-2026-49160 | HTTP.sys Denial of Service Vulnerability | High | 7.5 | Denial of Service | Publicly disclosed |
| CVE-2026-47291 | HTTP.sys Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-26142 | Nuance PowerScribe Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-44815 | DHCP Client Service Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-45657 | Windows Kernel Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-45602 | Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability | Critical | 9.1 | Tampering | |
| CVE-2026-47643 | Azure Stack Edge Remote Code Execution Vulnerability | Critical | 9.8 | Remote Code Execution | |
| CVE-2026-50507 | Windows BitLocker Security Feature Bypass Vulnerability | Medium | 6.8 | Security Feature Bypass | Publicly disclosed |
| CVE-2026-42985 | Remote Desktop Client Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | |
| CVE-2026-42905 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42980 | NT OS Kernel Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42986 | Microsoft Graphics Component Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42989 | Winlogon Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44803 | Windows Graphics Component Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-44812 | Windows Graphics Component Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45658 | Windows BitLocker Security Feature Bypass Vulnerability | High | 7.8 | Security Feature Bypass | |
| CVE-2026-45481 | Microsoft SharePoint Server Spoofing Vulnerability | High | 7.3 | Spoofing | |
| CVE-2026-47634 | Microsoft SharePoint Server Spoofing Vulnerability | High | 7.3 | Spoofing | |
| CVE-2026-50508 | Windows NTLM Spoofing Vulnerability | Medium | 6.5 | Spoofing | |
| CVE-2025-10263 | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | Critical | 9.3 | Elevation of Privilege | |
| CVE-2026-40371 | Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability | High | 8.8 | Elevation of Privilege | |
| CVE-2026-45484 | Microsoft SharePoint Elevation of Privilege Vulnerability | High | 8.8 | Elevation of Privilege | |
| CVE-2026-47289 | Remote Desktop Client Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | |
| CVE-2026-41098 | Azure Stack Edge Spoofing Vulnerability | High | 8.4 | Spoofing | |
| CVE-2026-44810 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | High | 8.4 | Elevation of Privilege | |
| CVE-2026-45456 | Microsoft Outlook and Word Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45458 | Microsoft Outlook and Word Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45461 | Microsoft Office Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45463 | Microsoft Office Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45472 | Microsoft Office Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45474 | Microsoft Office Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45482 | Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability | High | 8.4 | Security Feature Bypass | |
| CVE-2026-45607 | Windows Hyper-V Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-45641 | Windows Hyper-V Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-47635 | Microsoft Outlook and Word Remote Code Execution Vulnerability | High | 8.4 | Remote Code Execution | |
| CVE-2026-50521 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | High | 8.3 | Edge - Chromium | |
| CVE-2026-45476 | Microsoft Azure Network Adapter Elevation of Privilege Vulnerability | High | 8.2 | Elevation of Privilege | |
| CVE-2026-47652 | Windows Hyper-V Remote Code Execution Vulnerability | High | 8.2 | Remote Code Execution | |
| CVE-2026-42835 | Microsoft Teams for Android Information Disclosure Vulnerability | High | 8.1 | Information Disclosure | |
| CVE-2026-42974 | Windows Performance Monitor Remote Code Execution Vulnerability | High | 8.1 | Remote Code Execution | |
| CVE-2026-42981 | Windows Performance Monitor Remote Code Execution Vulnerability | High | 8.1 | Remote Code Execution | |
| CVE-2026-42987 | Windows Deployment Services (WDS) Remote Code Execution | High | 8.1 | Remote Code Execution | |
| CVE-2026-45599 | Windows UPnP Device Host Remote Code Execution Vulnerability | High | 8.1 | Remote Code Execution | |
| CVE-2026-45635 | Windows UPnP Device Host Remote Code Execution Vulnerability | High | 8.1 | Remote Code Execution | |
| CVE-2026-47631 | Microsoft Exchange Server Spoofing Vulnerability | High | 8.1 | Spoofing | |
| CVE-2026-45644 | Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability | High | 8 | Elevation of Privilege | |
| CVE-2026-47298 | Microsoft SharePoint Server Remote Code Execution Vulnerability | High | 8 | Remote Code Execution | |
| CVE-2026-45588 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-45654 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-47656 | Windows Boot Manager Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48568 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48570 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48573 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48575 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48576 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Security Feature Bypass | |
| CVE-2026-48578 | Secure Boot Security Feature Bypass Vulnerability | High | 7.9 | Elevation of Privilege | |
| CVE-2026-40404 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-40409 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-41092 | Microsoft Kinect Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42828 | Windows Projected File System Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42829 | Windows Administrator Protection Secure Feature Bypass Vulnerability | High | 7.8 | Security Feature Bypass | |
| CVE-2026-42837 | Windows Projected File System Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42902 | Microsoft PowerToys Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42910 | Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42916 | NT OS Kernel Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42983 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44802 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44804 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44807 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44808 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44811 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44813 | Windows DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44819 | Microsoft Office Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-44820 | Microsoft Excel Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-44823 | Microsoft Excel Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-44824 | Microsoft Office Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45457 | Microsoft Word Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45469 | Microsoft Excel Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45471 | Microsoft Word Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45475 | Microsoft Office Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45486 | Microsoft Word Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45490 | .NET SDK Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45593 | Windows SDK Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45605 | Windows Bluetooth Service Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45636 | Windows NTFS Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45637 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45638 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45643 | Microsoft Word Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45645 | Microsoft Office Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45656 | UEFI Secure Boot Security Feature Bypass Vulnerability | High | 7.8 | Security Feature Bypass | |
| CVE-2026-47292 | Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-48565 | Windows Narrator Braille Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-48574 | Windows Media Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-48583 | Windows Kernel Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-50511 | Microsoft PC Manager Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-50512 | Microsoft PC Manager Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-8863 | UEFI Secure Boot Security Feature Bypass Vulnerability | High | 7.8 | Security Feature Bypass | |
| CVE-2026-40376 | Visual Studio Code Elevation of Privilege Vulnerability | High | 7.5 | Elevation of Privilege | |
| CVE-2026-42908 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | High | 7.5 | Information Disclosure | |
| CVE-2026-42992 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-42993 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-44799 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-44801 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-45583 | Microsoft Exchange Server Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-45591 | ASP.NET Core Denial of Service Vulnerability | High | 7.5 | Denial of Service | |
| CVE-2026-45639 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | High | 7.5 | Information Disclosure | |
| CVE-2026-48563 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-48569 | Visual Studio Code Security Feature Bypass Vulnerability | High | 7.1 | Security Feature Bypass | |
| CVE-2026-42836 | Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-42911 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-42912 | Windows Telephony Service Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-44818 | Microsoft Excel Remote Code Execution Vulnerability | High | 7 | Remote Code Execution | |
| CVE-2026-45596 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45598 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45601 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45603 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45640 | Windows Bluetooth Port Driver Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-47293 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-42907 | Windows Shell Information Disclosure Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-45454 | Microsoft SharePoint Remote Code Execution Vulnerability | Medium | 6.5 | Remote Code Execution | |
| CVE-2026-45501 | Microsoft Exchange Server Spoofing Vulnerability | Medium | 6.5 | Spoofing | |
| CVE-2026-47284 | Visual Studio Code Information Disclosure Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-47287 | Visual Studio Code Tampering Vulnerability | Medium | 6.5 | Tampering | |
| CVE-2026-47644 | Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-50519 | Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-45500 | Microsoft Exchange Server Spoofing Vulnerability | Medium | 6.1 | Spoofing | |
| CVE-2026-42906 | Windows Shell Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-42915 | Microsoft Windows VMSwitch Denial of Service Vulnerability | Medium | 5.5 | Denial of Service | |
| CVE-2026-42968 | Windows Telephony Server Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-42970 | Windows Push Notification Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-42971 | Windows Push Notification Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-42972 | Windows Hyper-V Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-42973 | Windows Push Notification Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-44814 | Windows DWM Core Library Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-44821 | Microsoft Office Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-45594 | Windows Application Identity (AppID) Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-45604 | Windows Managed Installer Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-45606 | Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability | Medium | 5.5 | Denial of Service | |
| CVE-2026-45647 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability | Medium | 5.5 | Elevation of Privilege | |
| CVE-2026-48566 | Windows DWM Core Library Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-33113 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-45453 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-45464 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-45465 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-45595 | Windows Mark of the Web Security Feature Bypass Vulnerability | Medium | 5.4 | Security Feature Bypass | |
| CVE-2026-47636 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-48560 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-42914 | Windows Kerberos Denial of Service Vulnerability | Medium | 5.3 | Denial of Service | |
| CVE-2026-45655 | Windows BitLocker Security Feature Bypass Vulnerability | Medium | 5.3 | Security Feature Bypass | |
| CVE-2026-45462 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45467 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45468 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45479 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45483 | Microsoft Office Project Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-47637 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-47638 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-47641 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-48562 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45650 | Microsoft Bing Search Spoofing Vulnerability | Medium | 4.3 | Spoofing | |
| CVE-2026-45642 | Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability | Low | 3.9 | Spoofing | |
| CVE-2026-45455 | Microsoft Excel Information Disclosure Vulnerability | Low | 3.3 | Information Disclosure | |
| CVE-2026-45459 | Microsoft Excel Security Feature Bypass Vulnerability | Low | 3.3 | Security Feature Bypass | |
| CVE-2026-45485 | Microsoft Office Information Disclosure Vulnerability | Low | 3.3 | Information Disclosure | |
| CVE-2026-42904 | Windows TCP/IP Elevation of Privilege Vulnerability | Critical | 9.6 | Elevation of Privilege | |
| CVE-2026-47281 | Visual Studio Code Elevation of Privilege Vulnerability | Critical | 9.6 | Elevation of Privilege | |
| CVE-2026-32193 | Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | |
| CVE-2026-45504 | Microsoft Exchange Server Elevation of Privilege Vulnerability | High | 8.8 | Elevation of Privilege | |
| CVE-2026-45648 | Windows Active Directory Domain Services Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | |
| CVE-2026-47653 | Remote Desktop Client Remote Code Execution Vulnerability | High | 8.8 | Remote Code Execution | |
| CVE-2026-44822 | Microsoft Excel Information Disclosure Vulnerability | High | 8.2 | Information Disclosure | |
| CVE-2026-45503 | Microsoft Exchange Server Information Disclosure Vulnerability | High | 8.1 | Information Disclosure | |
| CVE-2026-33828 | Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42977 | Windows Push Notifications Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42978 | Windows Push Notifications Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42979 | Windows Push Notifications Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-42991 | Windows Push Notifications Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44809 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-44817 | Microsoft Excel Remote Code Execution Vulnerability | High | 7.8 | Remote Code Execution | |
| CVE-2026-45487 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45592 | Windows Internet (wininet.dll) Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-45600 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | High | 7.8 | Elevation of Privilege | |
| CVE-2026-49161 | Microsoft PC Manager Security Feature Bypass Vulnerability | High | 7.8 | Security Feature Bypass | |
| CVE-2026-42909 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-42913 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-47654 | Remote Desktop Client Remote Code Execution Vulnerability | High | 7.5 | Remote Code Execution | |
| CVE-2026-45649 | Office for Android Spoofing Vulnerability | High | 7.1 | Spoofing | |
| CVE-2026-47288 | Windows Kerberos Key Distribution Center (KDC) Remote Code Execution | High | 7.1 | Remote Code Execution | |
| CVE-2026-34335 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-41108 | Windows DNS Client Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-42984 | Windows Kernel Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45597 | Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45653 | Windows Kernel Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-47648 | Windows Storage Elevation of Privilege Vulnerability | High | 7 | Elevation of Privilege | |
| CVE-2026-45608 | Windows DHCP Client Information Disclosure Vulnerability | Medium | 6.8 | Information Disclosure | |
| CVE-2026-42903 | Windows Kerberos Denial of Service Vulnerability | Medium | 6.5 | Denial of Service | |
| CVE-2026-45491 | .NET Tampering Vulnerability | Medium | 6.2 | Tampering | |
| CVE-2026-42969 | Windows Push Notification Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-44805 | Windows Network Controller (NC) Host Agent Denial of Service Vulnerability | Medium | 5.5 | Denial of Service | |
| CVE-2026-45634 | Windows DHCP Client Information Disclosure Vulnerability | Medium | 5.5 | Information Disclosure | |
| CVE-2026-47639 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 5.4 | Spoofing | |
| CVE-2026-45502 | Microsoft Exchange Server Information Disclosure Vulnerability | Medium | 5 | Information Disclosure | |
| CVE-2026-45460 | Microsoft Office Information Disclosure Vulnerability | Medium | 4.7 | Information Disclosure | |
| CVE-2026-47640 | Microsoft SharePoint Server Spoofing Vulnerability | Medium | 4.6 | Spoofing | |
| CVE-2026-45466 | Microsoft Word Information Disclosure Vulnerability | Low | 3.3 | Information Disclosure | |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | Critical | 10 | Elevation of Privilege | |
| CVE-2026-48567 | Azure HorizonDB Elevation of Privilege Vulnerability | Critical | 10 | Elevation of Privilege | |
| CVE-2026-47647 | Dynamics 365 Elevation of Privilege Vulnerability | Critical | 9.9 | Elevation of Privilege | |
| CVE-2026-48584 | Microsoft Azure Synapse Elevation of Privilege Vulnerability | Critical | 9.9 | Elevation of Privilege | |
| CVE-2026-52913 | batman-adv: v: stop OGMv2 on disabled interface | Critical | 9.8 | | |
| CVE-2026-52919 | batman-adv: fix tp_meter counter underflow during shutdown | Critical | 9.8 | | |
| CVE-2026-52922 | batman-adv: dat: handle forward allocation error | Critical | 9.8 | | |
| CVE-2026-52931 | batman-adv: tp_meter: avoid use of uninit sender vars | Critical | 9.8 | | |
| CVE-2026-52934 | batman-adv: tvlv: reject oversized TVLV packets | Critical | 9.8 | | |
| CVE-2026-52944 | ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE | Critical | 9.8 | | |
| CVE-2026-52947 | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | Critical | 9.8 | | |
| CVE-2026-52989 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | Critical | 9.8 | | |
| CVE-2026-52991 | sched/psi: fix race between file release and pressure write | Critical | 9.8 | | |
| CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | Critical | 9.8 | | |
| CVE-2026-53000 | netfilter: nat: use kfree_rcu to release ops | Critical | 9.8 | | |
| CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | Critical | 9.8 | | |
| CVE-2026-53009 | ice: fix double-free of tx_buf skb | Critical | 9.8 | | |
| CVE-2026-53010 | ksmbd: fix use-after-free in smb2_open during durable reconnect | Critical | 9.8 | | |
| CVE-2026-53017 | f2fs: fix data loss caused by incorrect use of nat_entry flag | Critical | 9.8 | | |
| CVE-2026-53018 | f2fs: avoid reading already updated pages during GC | Critical | 9.8 | | |
| CVE-2026-53025 | greybus: raw: fix use-after-free on cdev close | Critical | 9.8 | | |
| CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | Critical | 9.8 | | |
| CVE-2026-53043 | ocfs2/dlm: validate qr_numregions in dlm_match_regions() | Critical | 9.8 | | |
| CVE-2026-53045 | memory: tegra124-emc: Fix dll_change check | Critical | 9.8 | | |
| CVE-2026-53049 | gfs2: add some missing log locking | Critical | 9.8 | | |
| CVE-2026-53052 | ASoC: qcom: qdsp6: topology: check widget type before accessing data | Critical | 9.8 | | |
| CVE-2026-53053 | iommu/amd: Fix clone_alias() to use the original device's devid | Critical | 9.8 | | |
| CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | Critical | 9.8 | | |
| CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | Critical | 9.8 | | |
| CVE-2026-53077 | net/rds: Restrict use of RDS/IB to the initial network namespace | Critical | 9.8 | | |
| CVE-2026-53086 | net: bcmgenet: fix racing timeout handler | Critical | 9.8 | | |
| CVE-2026-53130 | fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START | Critical | 9.8 | | |
| CVE-2026-53309 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | Critical | 9.8 | | |
| CVE-2026-54130 | M365 Copilot Information Disclosure Vulnerability | Critical | 9.8 | Information Disclosure | |
| CVE-2026-54906 | concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption | Critical | 9.8 | | |
| CVE-2026-7531 | Use-after-free in PQC hybrid key-share handling | Critical | 9.8 | | |
| CVE-2026-48582 | Microsoft Exchange Online Elevation of Privilege Vulnerability | Critical | 9.6 | Elevation of Privilege | |
| CVE-2026-44631 | Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow | Critical | 9.4 | | |
| CVE-2026-47646 | Dynamics 365 Customer Voice Spoofing Vulnerability | Critical | 9.3 | Spoofing | |
| CVE-2026-12087 | Socket versions before 2.041 for Perl have an out-of-bounds heap read | Critical | 9.1 | | |
| CVE-2026-48579 | Microsoft Exchange Online Information Disclosure Vulnerability | Critical | 9.1 | Information Disclosure | |
| CVE-2026-53176 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | Critical | 9.1 | | |
| CVE-2026-6094 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData | Critical | 9.1 | | |
| CVE-2026-32208 | Microsoft Entra ID Spoofing Vulnerability | High | 8.8 | Edge - Chromium | |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | High | 8.8 | | |
| CVE-2026-47645 | Microsoft 365 Copilot's Business Chat Elevation of Privilege Vulnerability | High | 8.8 | Elevation of Privilege | |
| CVE-2026-48715 | radvdump's Route Information Option Parser has a Stack Buffer Overflow | High | 8.8 | | |
| CVE-2026-56115 | Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass | High | 8.8 | | |
| CVE-2026-6893 | Dracut: dracut: root code execution via dhcp options command injection | High | 8.8 | | |
| CVE-2026-9698 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer | High | 8.8 | | |
| CVE-2026-10879 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders | High | 8.6 | | |
| CVE-2026-29167 | Apache HTTP Server: mod_ldap per-dir use-after-free | High | 8.6 | | |
| CVE-2026-13325 | Virt-handler-rhel9: kubevirt: kubevirt: disabletls migration setting removes authentication, exposing unauthenticated virtqemud proxy on all interfaces | High | 8.5 | | |
| CVE-2026-52911 | ksmbd: scope conn->binding slowpath to bound sessions only | High | 8.4 | | |
| CVE-2026-49759 | Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash | High | 8.2 | | |
| CVE-2026-57235 | Nokogiri: Possible Out-of-Bounds Read in `Nokogiri::XML::NodeSet#[]` | High | 8.2 | | |
| CVE-2026-57236 | Nokogiri: Possible Use-After-Free when `Nokogiri::XML::Document#encoding=` raises an exception | High | 8.2 | | |
| CVE-2026-11816 | Path Traversal in keras-team/keras | High | 8.1 | | |
| CVE-2026-42055 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability | High | 8.1 | | |
| CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | High | 8.1 | | |
| CVE-2026-55200 | libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c | High | 8.1 | | |
| CVE-2026-56123 | socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser | High | 8.1 | | |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | High | 8.1 | | |
| CVE-2026-11332 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution | High | 7.8 | | |
| CVE-2026-11822 | SQLite before 3.53.2 Memory Corruption in FTS5 Extension | High | 7.8 | | |
| CVE-2026-11824 | SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate | High | 7.8 | | |
| CVE-2026-12505 | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall | High | 7.8 | | |
| CVE-2026-43958 | Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service | High | 7.8 | | |
| CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | High | 7.8 | | |
| CVE-2026-46274 | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | High | 7.8 | | |
| CVE-2026-46301 | spi: topcliff-pch: fix use-after-free on unbind | High | 7.8 | | |
| CVE-2026-46324 | netfilter: nf_tables: use list_del_rcu for netlink hooks | High | 7.8 | | |
| CVE-2026-50256 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatch | High | 7.8 | | |
| CVE-2026-50258 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels | High | 7.8 | | |
| CVE-2026-50259 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing | High | 7.8 | | |
| CVE-2026-50261 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter() | High | 7.8 | | |
| CVE-2026-52908 | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | High | 7.8 | | |
| CVE-2026-52909 | ip6_vti: set netns_immutable on the fallback device. | High | 7.8 | | |
| CVE-2026-52910 | bpf: Free reuseport cBPF prog after RCU grace period. | High | 7.8 | | |
| CVE-2026-52912 | netfilter: nf_queue: hold bridge skb->dev while queued | High | 7.8 | | |
| CVE-2026-52923 | ipc: limit next_id allocation to the valid ID range | High | 7.8 | | |
| CVE-2026-52926 | batman-adv: clear current gateway during teardown | High | 7.8 | | |
| CVE-2026-52935 | xfrm: espintcp: do not reuse an in-progress partial send | High | 7.8 | | |
| CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | High | 7.8 | | |
| CVE-2026-52972 | crypto: af_alg - Cap AEAD AD length to 0x80000000 | High | 7.8 | | |
| CVE-2026-53005 | af_unix: Drop all SCM attributes for SOCKMAP. | High | 7.8 | | |
| CVE-2026-53039 | ocfs2: validate group add input before caching | High | 7.8 | | |
| CVE-2026-53068 | drm/komeda: fix integer overflow in AFBC framebuffer size check | High | 7.8 | | |
| CVE-2026-53097 | wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work() | High | 7.8 | | |
| CVE-2026-53143 | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | High | 7.8 | | |
| CVE-2026-53159 | misc: fastrpc: fix DMA address corruption due to find_vma misuse | High | 7.8 | | |
| CVE-2026-53160 | misc: fastrpc: fix use-after-free race in fastrpc_map_create | High | 7.8 | | |
| CVE-2026-53194 | USB: serial: kl5kusb105: fix bulk-out buffer overflow | High | 7.8 | | |
| CVE-2026-53196 | USB: serial: io_ti: fix heap overflow in get_manuf_info() | High | 7.8 | | |
| CVE-2026-53198 | ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL | High | 7.8 | | |
| CVE-2026-53215 | net: mvpp2: refill RX buffers before XDP or skb use | High | 7.8 | | |
| CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | High | 7.8 | | |
| CVE-2026-53247 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown | High | 7.8 | | |
| CVE-2026-53262 | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | High | 7.8 | | |
| CVE-2026-55693 | Vim: Out-of-bounds Write in Spell File Word Count | High | 7.8 | | |
| CVE-2026-55895 | Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename | High | 7.8 | | |
| CVE-2026-57455 | Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument | High | 7.8 | | |
| CVE-2026-57456 | Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings | High | 7.8 | | |
| CVE-2026-32174 | Azure Bot Service Elevation of Privilege Vulnerability | High | 7.7 | Elevation of Privilege | |
| CVE-2026-45497 | Microsoft M365 Copilot Remote Code Execution Vulnerability | High | 7.7 | Remote Code Execution | |
| CVE-2026-10097 | ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery | High | 7.5 | | |
| CVE-2026-10512 | X25519 x86_64 assembly final reduction leaves non-canonical field element | High | 7.5 | | |
| CVE-2026-11310 | X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring | High | 7.5 | | |
| CVE-2026-11625 | Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes | High | 7.5 | | |
| CVE-2026-11703 | Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption | High | 7.5 | | |
| CVE-2026-11999 | X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() | High | 7.5 | | |
| CVE-2026-12143 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) | High | 7.5 | | |
| CVE-2026-12340 | Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation | High | 7.5 | | |
| CVE-2026-14164 | Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() | High | 7.5 | | |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | High | 7.5 | | |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | High | 7.5 | | |
| CVE-2026-34355 | Apache HTTP Server: mod_proxy_html buffer overflow | High | 7.5 | | |
| CVE-2026-34356 | Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow | High | 7.5 | | |
| CVE-2026-37460 | Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message. | High | 7.5 | | |
| CVE-2026-42504 | Quadratic complexity in WordDecoder.DecodeHeader in mime | High | 7.5 | | |
| CVE-2026-42535 | Apache HTTP Server: mod_dav_fs protected directory access | High | 7.5 | | |
| CVE-2026-42536 | Apache HTTP Server: mod_xml2enc heap overflow | High | 7.5 | | |
| CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | High | 7.5 | | |
| CVE-2026-42765 | NULL Dereference in Certificate Verification with OCSP Checking | High | 7.5 | | |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | High | 7.5 | | |
| CVE-2026-46669 | `openvm-pairing` pairing check missing proper subfield check on scaling factor | High | 7.5 | | |
| CVE-2026-47633 | Microsoft Cost Management Information Disclosure Vulnerability | High | 7.5 | Information Disclosure | |
| CVE-2026-48779 | ws: Memory exhaustion DoS from tiny fragments and data chunks | High | 7.5 | | |
| CVE-2026-49975 | Apache HTTP Server: mod_http2 denial of service | High | 7.5 | | |
| CVE-2026-50031 | ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages. | High | 7.5 | | |
| CVE-2026-52955 | libceph: Fix potential out-of-bounds access in crush_decode() | High | 7.5 | | |
| CVE-2026-52956 | libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() | High | 7.5 | | |
| CVE-2026-52957 | libceph: Fix potential null-ptr-deref in decode_choose_args() | High | 7.5 | | |
| CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | High | 7.5 | | |
| CVE-2026-53284 | btrfs: only release the dirty pages io tree after successful writes | High | 7.5 | | |
| CVE-2026-55203 | HAProxy - Integer Overflow in FCGI Demux Record Length Field | High | 7.5 | | |
| CVE-2026-55204 | HAProxy - NULL Pointer Dereference in hpack_dht_insert Function | High | 7.5 | | |
| CVE-2026-55958 | Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage | High | 7.5 | | |
| CVE-2026-55960 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation | High | 7.5 | | |
| CVE-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer | High | 7.5 | | |
| CVE-2026-55967 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse | High | 7.5 | | |
| CVE-2026-57231 | Podman: Malformed Image can trick podman run into leaking host environment variables into the container | High | 7.5 | | |
| CVE-2026-57434 | Nokogiri: Null Pointer Dereference calling methods on uninitialized wrapper classes | High | 7.5 | | |
| CVE-2026-57435 | Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=` | High | 7.5 | | |
| CVE-2026-57585 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error | High | 7.5 | | |
| CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | High | 7.5 | | |
| CVE-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list | High | 7.5 | | |
| CVE-2026-6331 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal | High | 7.5 | | |
| CVE-2026-6731 | X.509 name constraint bypass via Subject CN treated as a DNS name | High | 7.5 | | |
| CVE-2026-7511 | PKCS7_verify signer confusion allows forged signatures to be accepted | High | 7.5 | | |
| CVE-2026-7532 | iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined | High | 7.5 | | |
| CVE-2026-8720 | HMAC-BLAKE2 final discards message when key length exceeds block size | High | 7.5 | | |
| CVE-2026-8829 | HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities | High | 7.5 | | |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | High | 7.5 | | |
| CVE-2026-9675 | undici WebSocket client vulnerable to denial of service via cumulative fragment bypass | High | 7.5 | | |
| CVE-2026-3195 | Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730) | High | 7.4 | | |
| CVE-2026-34181 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys | High | 7.4 | | |
| CVE-2026-50292 | In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution | High | 7.4 | | |
| CVE-2026-9697 | undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent | High | 7.4 | | |
| CVE-2026-11463 | USCiLab Cereal Shared Pointer type confusion | High | 7.3 | | |
| CVE-2026-12912 | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | High | 7.3 | | |
| CVE-2026-44185 | Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` | High | 7.3 | | |
| CVE-2026-48913 | Apache HTTP Server: mod_http2 memory corruption when file handles exhausted | High | 7.3 | | |
| CVE-2026-58014 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | High | 7.3 | | |
| CVE-2026-46285 | mtd: docg3: fix use-after-free in docg3_release() | High | 7.1 | | |
| CVE-2026-46293 | clk: microchip: mpfs-ccc: fix out of bounds access during output registration | High | 7.1 | | |
| CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | High | 7.1 | | |
| CVE-2026-46330 | Revert "net/smc: Introduce TCP ULP support" | High | 7.1 | | |
| CVE-2026-49839 | jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow | High | 7.1 | | |
| CVE-2026-52917 | sctp: diag: reject stale associations in dump_one path | High | 7.1 | | |
| CVE-2026-52918 | Bluetooth: serialize accept_q access | High | 7.1 | | |
| CVE-2026-52942 | netfilter: nf_log: validate MAC header was set before dumping it | High | 7.1 | | |
| CVE-2026-52953 | iommu/vt-d: Fix oops due to out of scope access | High | 7.1 | | |
| CVE-2026-52961 | ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size | High | 7.1 | | |
| CVE-2026-52969 | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | High | 7.1 | | |
| CVE-2026-52992 | fs/adfs: validate nzones in adfs_validate_bblk() | High | 7.1 | | |
| CVE-2026-52996 | ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open | High | 7.1 | | |
| CVE-2026-53016 | crypto: ccp - copy IV using skcipher ivsize | High | 7.1 | | |
| CVE-2026-53023 | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | High | 7.1 | | |
| CVE-2026-53024 | greybus: raw: fix use-after-free if write is called after disconnect | High | 7.1 | | |
| CVE-2026-53027 | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | High | 7.1 | | |
| CVE-2026-53041 | ocfs2: fix listxattr handling when the buffer is full | High | 7.1 | | |
| CVE-2026-53063 | dm cache: fix write hang in passthrough mode | High | 7.1 | | |
| CVE-2026-53064 | dm cache: fix null-deref with concurrent writes in passthrough mode | High | 7.1 | | |
| CVE-2026-53091 | net: pull headers in qdisc_pkt_len_segs_init() | High | 7.1 | | |
| CVE-2026-53098 | wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | High | 7.1 | | |
| CVE-2026-53136 | drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | High | 7.1 | | |
| CVE-2026-53137 | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | High | 7.1 | | |
| CVE-2026-53178 | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | High | 7.1 | | |
| CVE-2026-53179 | staging: rtl8723bs: fix buffer over-read in rtw_update_protection | High | 7.1 | | |
| CVE-2026-53186 | RDMA/srp: bound SRP_RSP sense copy by the received length | High | 7.1 | | |
| CVE-2026-53195 | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | High | 7.1 | | |
| CVE-2026-53212 | netfilter: nft_tunnel: fix use-after-free on object destroy | High | 7.1 | | |
| CVE-2026-53217 | net: mvpp2: sync RX data at the hardware packet offset | High | 7.1 | | |
| CVE-2026-53230 | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list | High | 7.1 | | |
| CVE-2026-53253 | Bluetooth: bnep: reject short frames before parsing | High | 7.1 | | |
| CVE-2026-53265 | dm cache policy smq: check allocation under invalidate lock | High | 7.1 | | |
| CVE-2026-53268 | netfilter: conntrack_irc: fix possible out-of-bounds read | High | 7.1 | | |
| CVE-2026-53270 | ipvs: clear the svc scheduler ptr early on edit | High | 7.1 | | |
| CVE-2026-53303 | f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() | High | 7.1 | | |
| CVE-2026-53306 | tty: hvc_iucv: fix off-by-one in number of supported devices | High | 7.1 | | |
| CVE-2026-53689 | | High | 7.1 | | |
| CVE-2026-54369 | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions | High | 7.1 | | |
| CVE-2026-54371 | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr | High | 7.1 | | |
| CVE-2026-57918 | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC in rpc_read_from_socket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. | High | 7.1 | | |
| CVE-2026-46244 | netfilter: nft_inner: Fix IPv6 inner_thoff desync | High | 7 | | |
| CVE-2026-46275 | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | High | 7 | | |
| CVE-2026-46306 | flow_dissector: do not dissect PPPoE PFC frames | High | 7 | | |
| CVE-2026-46319 | net/sched: act_ct: Only release RCU read lock after ct_ft | High | 7 | | |
| CVE-2026-52920 | netfilter: xt_policy: fix strict mode inbound policy matching | High | 7 | | |
| CVE-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling | High | 7 | | |
| CVE-2026-52933 | io_uring/poll: fix signed comparison in io_poll_get_ownership() | High | 7 | | |
| CVE-2026-52998 | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | High | 7 | | |
| CVE-2026-53006 | ipv6: fix possible UAF in icmpv6_rcv() | High | 7 | | |
| CVE-2026-53011 | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | High | 7 | | |
| CVE-2026-53034 | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | High | 7 | | |
| CVE-2026-53059 | dm log: fix out-of-bounds write due to region_count overflow | High | 7 | | |
| CVE-2026-53071 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | High | 7 | | |
| CVE-2026-53072 | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | High | 7 | | |
| CVE-2026-53073 | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | High | 7 | | |
| CVE-2026-53078 | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | High | 7 | | |
| CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | High | 7 | | |
| CVE-2026-53132 | vsock/virtio: fix potential unbounded skb queue | High | 7 | | |
| CVE-2026-53133 | RDMA/umem: Fix truncation for block sizes >= 4G | High | 7 | | |
| CVE-2026-53148 | thunderbolt: Clamp XDomain response data copy to allocation size | High | 7 | | |
| CVE-2026-53150 | thunderbolt: Reject zero-length property entries in validator | High | 7 | | |
| CVE-2026-53161 | misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context | High | 7 | | |
| CVE-2026-53167 | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | High | 7 | | |
| CVE-2026-53168 | fuse: reject fuse_notify() pagecache ops on directories | High | 7 | | |
| CVE-2026-53182 | wifi: nl80211: reject oversized EMA RNR lists | High | 7 | | |
| CVE-2026-53192 | ALSA: timer: Fix UAF at snd_timer_user_params() | High | 7 | | |
| CVE-2026-53208 | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | High | 7 | | |
| CVE-2026-53209 | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | High | 7 | | |
| CVE-2026-53218 | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | High | 7 | | |
| CVE-2026-53228 | ipv6: sit: reload inner IPv6 header after GSO offloads | High | 7 | | |
| CVE-2026-53236 | tcp: restrict SO_ATTACH_FILTER to priv users | High | 7 | | |
| CVE-2026-53239 | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | High | 7 | | |
| CVE-2026-53242 | ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams | High | 7 | | |
| CVE-2026-53249 | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | High | 7 | | |
| CVE-2026-53254 | Bluetooth: RFCOMM: validate skb length in MCC handlers | High | 7 | | |
| CVE-2026-53264 | net/sched: act_api: use RCU with deferred freeing for action lifecycle | High | 7 | | |
| CVE-2026-53267 | netfilter: nft_ct: bail out on template ct in get eval | High | 7 | | |
| CVE-2026-53275 | ipv6: mcast: Fix use-after-free when processing MLD queries | High | 7 | | |
| CVE-2026-58050 | libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation | High | 7 | | |
| CVE-2026-56132 | In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers. | Medium | 6.9 | | |
| CVE-2026-56403 | libexpat before 2.8.2 has an integer overflow in storeAtts. | Medium | 6.9 | | |
| CVE-2026-56404 | libexpat before 2.8.2 has an integer overflow in addBinding. | Medium | 6.9 | | |
| CVE-2026-56405 | libexpat before 2.8.2 has an integer overflow in getAttributeId. | Medium | 6.9 | | |
| CVE-2026-56406 | libexpat before 2.8.2 has an integer overflow in XML_ParseBuffer because it lacked a check that was present in XML_Parse. | Medium | 6.9 | | |
| CVE-2026-56407 | libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. | Medium | 6.9 | | |
| CVE-2026-56410 | xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. | Medium | 6.9 | | |
| CVE-2026-56411 | xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. | Medium | 6.9 | | |
| CVE-2026-13595 | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing | Medium | 6.8 | | |
| CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | Medium | 6.8 | | |
| CVE-2026-48914 | Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling | Medium | 6.7 | | |
| CVE-2026-42014 | Gnutls: fix use-after-free in gnutls_pkcs11_token_set_pin | Medium | 6.6 | | |
| CVE-2026-46323 | net: gro: don't merge zcopy skbs | Medium | 6.6 | | |
| CVE-2026-50257 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence() | Medium | 6.6 | | |
| CVE-2026-50260 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter() | Medium | 6.6 | | |
| CVE-2026-57438 | Nokogiri: Possible Use-After-Free in XInclude Processing | Medium | 6.6 | | |
| CVE-2025-15661 | libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c | Medium | 6.5 | | |
| CVE-2026-13208 | Kubevirt: virt-handler-rhel9: kubevirt: virt-handler notify server trusts vmi identity from unauthenticated grpc request body | Medium | 6.5 | | |
| CVE-2026-27145 | Inefficient candidate hostname parsing in crypto/x509 | Medium | 6.5 | | |
| CVE-2026-42824 | M365 Copilot Information Disclosure Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-42895 | Microsoft Copilot Tampering Vulnerability | Medium | 6.5 | Tampering | |
| CVE-2026-43951 | Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash | Medium | 6.5 | | |
| CVE-2026-44186 | Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp | Medium | 6.5 | | |
| CVE-2026-46433 | lldpd: Heap OOB Read in VLAN Decapsulation memmove | Medium | 6.5 | | |
| CVE-2026-47655 | Microsoft Graph Information Disclosure Vulnerability | Medium | 6.5 | Information Disclosure | |
| CVE-2026-48855 | SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured | Medium | 6.5 | | |
| CVE-2026-48856 | httpc leaks Authorization header to cross-origin redirect targets | Medium | 6.5 | | |
| CVE-2026-48858 | ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks | Medium | 6.5 | | |
| CVE-2026-48860 | Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist | Medium | 6.5 | | |
| CVE-2026-53111 | bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap | Medium | 6.5 | | |
| CVE-2026-53146 | thunderbolt: Limit XDomain response copy to actual frame size | Medium | 6.5 | | |
| CVE-2026-55962 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify | Medium | 6.5 | | |
| CVE-2026-56116 | dhcpcd Memory Leak DoS via IPv6 Router Advertisement Handling | Medium | 6.5 | | |
| CVE-2026-56409 | xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used. | Medium | 6.5 | | |
| CVE-2026-57453 | Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction | Medium | 6.5 | | |
| CVE-2026-58010 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() | Medium | 6.5 | | |
| CVE-2026-58011 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime | Medium | 6.5 | | |
| CVE-2026-58012 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() | Medium | 6.5 | | |
| CVE-2026-58013 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" | Medium | 6.5 | | |
| CVE-2026-58051 | libssh2 - Free of Uninitialized Pointer in publickey List Cleanup | Medium | 6.5 | | |
| CVE-2026-58058 | Nmap - Integer Underflow in IPv6 Extension Header Parsing | Medium | 6.5 | | |
| CVE-2026-6091 | Partial-chain verification accepts untrusted intermediate as trust anchor | Medium | 6.5 | | |
| CVE-2026-6291 | Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption | Medium | 6.5 | | |
| CVE-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison length | Medium | 6.5 | | |
| CVE-2026-6330 | ML-KEM ARM64 NEON ciphertext comparison only compares half of the input | Medium | 6.5 | | |
| CVE-2026-9539 | libslirp TCP URG OOB Read Information Leak | Medium | 6.5 | | |
| CVE-2026-13318 | Virt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip | Medium | 6.4 | | |
| CVE-2026-52968 | KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic | Medium | 6.4 | | |
| CVE-2026-53074 | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | Medium | 6.4 | | |
| CVE-2026-53094 | bpf: Fix stale offload->prog pointer after constant blinding | Medium | 6.4 | | |
| CVE-2026-13201 | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enables notify socket hijacking and node-level vm disruption | Medium | 6.3 | | |
| CVE-2026-13757 | P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing | Medium | 6.2 | | |
| CVE-2026-29170 | Apache HTTP Server: mod_proxy_ftp XSS | Medium | 6.1 | | |
| CVE-2026-44889 | WebOb: Location header normalization during redirect leads to open redirect | Medium | 6.1 | | |
| CVE-2026-46322 | tun: free page on build_skb failure in tun_xdp_one() | Medium | 6.1 | | |
| CVE-2026-46325 | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE | Medium | 6.1 | | |
| CVE-2026-53021 | scsi: target: core: Fix integer overflow in UNMAP bounds check | Medium | 6.1 | | |
| CVE-2026-57454 | Vim: Out-of-bounds Read with Text Properties | Medium | 6.1 | | |
| CVE-2026-12725 | Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies | Medium | 5.9 | | |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | Medium | 5.9 | | |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | Medium | 5.9 | | |
| CVE-2026-52946 | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | Medium | 5.9 | | |
| CVE-2026-54411 | Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext. | Medium | 5.9 | | |
| CVE-2026-55199 | libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler | Medium | 5.9 | | |
| CVE-2026-58015 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | Medium | 5.9 | | |
| CVE-2025-71315 | drm/vkms: Convert to DRM's vblank timer | Medium | 5.5 | | |
| CVE-2026-3196 | Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation | Medium | 5.5 | | |
| CVE-2026-4367 | Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing | Medium | 5.5 | | |
| CVE-2026-44119 | Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules | Medium | 5.5 | | |
| CVE-2026-46254 | AppArmor: Allow apparmor to handle unaligned dfa tables | Medium | 5.5 | | |
| CVE-2026-46273 | ibmveth: Disable GSO for packets with small MSS | Medium | 5.5 | | |
| CVE-2026-46280 | lib: test_hmm: evict device pages on file close to avoid use-after-free | Medium | 5.5 | | |
| CVE-2026-46282 | iio: frequency: admv1013: fix NULL pointer dereference on str | Medium | 5.5 | | |
| CVE-2026-46287 | net: txgbe: fix RTNL assertion warning when remove module | Medium | 5.5 | | |
| CVE-2026-46289 | lib/scatterlist: fix length calculations in extract_kvec_to_sg | Medium | 5.5 | | |
| CVE-2026-46291 | crypto: caam - guard HMAC key hex dumps in hash_digest_key | Medium | 5.5 | | |
| CVE-2026-46292 | pmdomain: core: Fix detach procedure for virtual devices in genpd | Medium | 5.5 | | |
| CVE-2026-46296 | spi: s3c64xx: fix NULL-deref on driver unbind | Medium | 5.5 | | |
| CVE-2026-46299 | hfsplus: fix held lock freed on hfsplus_fill_super() | Medium | 5.5 | | |
| CVE-2026-46302 | selinux: allow multiple opens of /sys/fs/selinux/policy | Medium | 5.5 | | |
| CVE-2026-46303 | isofs: validate Rock Ridge CE continuation extent against volume size | Medium | 5.5 | | |
| CVE-2026-46304 | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | Medium | 5.5 | | |
| CVE-2026-46307 | wifi: ath5k: do not access array OOB | Medium | 5.5 | | |
| CVE-2026-46312 | media: videobuf2: Set vma_flags in vb2_dma_sg_mmap | Medium | 5.5 | | |
| CVE-2026-46314 | drm/v3d: Reject empty multisync extension to prevent infinite loop | Medium | 5.5 | | |
| CVE-2026-46321 | tun: free page on short-frame rejection in tun_xdp_one() | Medium | 5.5 | | |
| CVE-2026-47770 | jq: stack overflow in deep structural equality | Medium | 5.5 | | |
| CVE-2026-49760 | Stack Buffer Overflow in ei_s_print_term at Very Large Integer | Medium | 5.5 | | |
| CVE-2026-50262 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes | Medium | 5.5 | | |
| CVE-2026-50263 | Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow() | Medium | 5.5 | | |
| CVE-2026-52915 | netfilter: ip6t_hbh: reject oversized option lists | Medium | 5.5 | | |
| CVE-2026-52916 | batman-adv: frag: disallow unicast fragment in fragment | Medium | 5.5 | | |
| CVE-2026-52921 | netfilter: ipset: stop hash:* range iteration at end | Medium | 5.5 | | |
| CVE-2026-52925 | vrf: Fix a potential NPD when removing a port from a VRF | Medium | 5.5 | | |
| CVE-2026-52927 | netfilter: ebtables: fix OOB read in compat_mtw_from_user | Medium | 5.5 | | |
| CVE-2026-52928 | af_unix: Reject SIOCATMARK on non-stream sockets | Medium | 5.5 | | |
| CVE-2026-52929 | sctp: stream: fully roll back denied add-stream state | Medium | 5.5 | | |
| CVE-2026-52930 | ipc/shm: serialize orphan cleanup with shm_nattch updates | Medium | 5.5 | | |
| CVE-2026-52936 | crypto: jitterentropy - replace long-held spinlock with mutex | Medium | 5.5 | | |
| CVE-2026-52937 | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | Medium | 5.5 | | |
| CVE-2026-52941 | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | Medium | 5.5 | | |
| CVE-2026-52948 | i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | Medium | 5.5 | | |
| CVE-2026-52954 | libceph: handle rbtree insertion error in decode_choose_args() | Medium | 5.5 | | |
| CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | Medium | 5.5 | | |
| CVE-2026-52960 | ceph: put folios not suitable for writeback | Medium | 5.5 | | |
| CVE-2026-52962 | ceph: fix a buffer leak in __ceph_setxattr() | Medium | 5.5 | | |
| CVE-2026-52963 | ALSA: usb-audio: Bound MIDI endpoint descriptor scans | Medium | 5.5 | | |
| CVE-2026-52964 | ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans | Medium | 5.5 | | |
| CVE-2026-52967 | smb/client: fix possible infinite loop and oob read in symlink_data() | Medium | 5.5 | | |
| CVE-2026-52970 | netfilter: nft_ct: fix missing expect put in obj eval | Medium | 5.5 | | |
| CVE-2026-52974 | net: tls: fix strparser anchor skb leak on offload RX setup failure | Medium | 5.5 | | |
| CVE-2026-52975 | bonding: 3ad: implement proper RCU rules for port->aggregator | Medium | 5.5 | | |
| CVE-2026-52977 | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | Medium | 5.5 | | |
| CVE-2026-52981 | neigh: let neigh_xmit take skb ownership | Medium | 5.5 | | |
| CVE-2026-52982 | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() | Medium | 5.5 | | |
| CVE-2026-52984 | net/sched: netem: fix queue limit check to include reordered packets | Medium | 5.5 | | |
| CVE-2026-52985 | netdevsim: zero initialize struct iphdr in dummy sk_buff | Medium | 5.5 | | |
| CVE-2026-52988 | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | Medium | 5.5 | | |
| CVE-2026-52999 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | Medium | 5.5 | | |
| CVE-2026-53003 | pppoe: drop PFC frames | Medium | 5.5 | | |
| CVE-2026-53012 | nexthop: fix IPv6 route referencing IPv4 nexthop | Medium | 5.5 | | |
| CVE-2026-53013 | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | Medium | 5.5 | | |
| CVE-2026-53015 | erofs: unify lcn as u64 for 32-bit platforms | Medium | 5.5 | | |
| CVE-2026-53022 | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | Medium | 5.5 | | |
| CVE-2026-53032 | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | Medium | 5.5 | | |
| CVE-2026-53035 | bpf, sockmap: Fix af_unix iter deadlock | Medium | 5.5 | | |
| CVE-2026-53037 | HID: usbhid: fix deadlock in hid_post_reset() | Medium | 5.5 | | |
| CVE-2026-53046 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine | Medium | 5.5 | | |
| CVE-2026-53047 | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | Medium | 5.5 | | |
| CVE-2026-53048 | gfs2: prevent NULL pointer dereference during unmount | Medium | 5.5 | | |
| CVE-2026-53050 | quota: Fix race of dquot_scan_active() with quota deactivation | Medium | 5.5 | | |
| CVE-2026-53056 | drm/msm/dpu: fix mismatch between power and frequency | Medium | 5.5 | | |
| CVE-2026-53058 | drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() | Medium | 5.5 | | |
| CVE-2026-53060 | dm cache metadata: fix memory leak on metadata abort retry | Medium | 5.5 | | |
| CVE-2026-53061 | dm cache: fix dirty mapping checking in passthrough mode switching | Medium | 5.5 | | |
| CVE-2026-53065 | ASoC: sti: use managed regmap_field allocations | Medium | 5.5 | | |
| CVE-2026-53066 | drm/sun4i: backend: fix error pointer dereference | Medium | 5.5 | | |
| CVE-2026-53070 | sctp: disable BH before calling udp_tunnel_xmit_skb() | Medium | 5.5 | | |
| CVE-2026-53076 | bpf: Fix OOB in pcpu_init_value | Medium | 5.5 | | |
| CVE-2026-53080 | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | Medium | 5.5 | | |
| CVE-2026-53082 | net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf | Medium | 5.5 | | |
| CVE-2026-53088 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | Medium | 5.5 | | |
| CVE-2026-53093 | wifi: brcmfmac: Fix error pointer dereference | Medium | 5.5 | | |
| CVE-2026-53096 | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | Medium | 5.5 | | |
| CVE-2026-53102 | wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req() | Medium | 5.5 | | |
| CVE-2026-53106 | bpf: Do not allow deleting local storage in NMI | Medium | 5.5 | | |
| CVE-2026-53107 | wifi: libertas: don't kill URBs in interrupt context | Medium | 5.5 | | |
| CVE-2026-53108 | powerpc/64s: Fix unmap race with PMD migration entries | Medium | 5.5 | | |
| CVE-2026-53109 | powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy | Medium | 5.5 | | |
| CVE-2026-53110 | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | Medium | 5.5 | | |
| CVE-2026-53113 | wifi: ath11k: fix memory leaks in beacon template setup | Medium | 5.5 | | |
| CVE-2026-53115 | bus: fsl-mc: use generic driver_override infrastructure | Medium | 5.5 | | |
| CVE-2026-53118 | vdpa: use generic driver_override infrastructure | Medium | 5.5 | | |
| CVE-2026-53120 | PCI: use generic driver_override infrastructure | Medium | 5.5 | | |
| CVE-2026-53122 | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | Medium | 5.5 | | |
| CVE-2026-53126 | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | Medium | 5.5 | | |
| CVE-2026-53128 | drbd: Balance RCU calls in drbd_adm_dump_devices() | Medium | 5.5 | | |
| CVE-2026-53129 | fs/mbcache: cancel shrink work before destroying the cache | Medium | 5.5 | | |
| CVE-2026-53135 | drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs | Medium | 5.5 | | |
| CVE-2026-53138 | drm/amd/display: Bound VBIOS record-chain walk loops | Medium | 5.5 | | |
| CVE-2026-53139 | drm/v3d: Skip CSD when it has zeroed workgroups | Medium | 5.5 | | |
| CVE-2026-53147 | thunderbolt: Validate XDomain request packet size before type cast | Medium | 5.5 | | |
| CVE-2026-53149 | thunderbolt: Bound root directory content to block size | Medium | 5.5 | | |
| CVE-2026-53151 | rxrpc: Fix the ACK parser to extract the SACK table for parsing | Medium | 5.5 | | |
| CVE-2026-53154 | mm/hugetlb: restore reservation on error in hugetlb folio copy paths | Medium | 5.5 | | |
| CVE-2026-53156 | nvmem: core: fix use-after-free bugs in error paths | Medium | 5.5 | | |
| CVE-2026-53157 | net: phonet: free phonet_device after RCU grace period | Medium | 5.5 | | |
| CVE-2026-53158 | misc: fastrpc: Fix NULL pointer dereference in rpmsg callback | Medium | 5.5 | | |
| CVE-2026-53163 | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | Medium | 5.5 | | |
| CVE-2026-53166 | futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock | Medium | 5.5 | | |
| CVE-2026-53177 | bnxt_en: Fix NULL pointer dereference | Medium | 5.5 | | |
| CVE-2026-53181 | vsock/vmci: fix sk_ack_backlog leak on failed handshake | Medium | 5.5 | | |
| CVE-2026-53183 | mptcp: allow subflow rcv wnd to shrink | Medium | 5.5 | | |
| CVE-2026-53184 | udp: clear skb->dev before running a sockmap verdict | Medium | 5.5 | | |
| CVE-2026-53190 | drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | Medium | 5.5 | | |
| CVE-2026-53199 | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | Medium | 5.5 | | |
| CVE-2026-53207 | mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison | Medium | 5.5 | | |
| CVE-2026-53213 | drm/vc4: fix krealloc() memory leak | Medium | 5.5 | | |
| CVE-2026-53214 | ipv6: Fix a potential NPD in cleanup_prefix_route() | Medium | 5.5 | | |
| CVE-2026-53219 | netfilter: x_tables: avoid leaking percpu counter pointers | Medium | 5.5 | | |
| CVE-2026-53220 | netfilter: revalidate bridge ports | Medium | 5.5 | | |
| CVE-2026-53221 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | Medium | 5.5 | | |
| CVE-2026-53223 | net: guard timestamp cmsgs to real error queue skbs | Medium | 5.5 | | |
| CVE-2026-53225 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | Medium | 5.5 | | |
| CVE-2026-53226 | gpio: rockchip: fix generic IRQ chip leak on remove | Medium | 5.5 | | |
| CVE-2026-53227 | net: openvswitch: fix possible kfree_skb of ERR_PTR | Medium | 5.5 | | |
| CVE-2026-53229 | net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure | Medium | 5.5 | | |
| CVE-2026-53232 | net: phy: clean the sfp upstream if phy probing fails | Medium | 5.5 | | |
| CVE-2026-53237 | gpio: mvebu: fix NULL pointer dereference in suspend/resume | Medium | 5.5 | | |
| CVE-2026-53245 | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | Medium | 5.5 | | |
| CVE-2026-53252 | Bluetooth: fix memory leak in error path of hci_alloc_dev() | Medium | 5.5 | | |
| CVE-2026-53255 | Bluetooth: MGMT: validate advertising TLV before type checks | Medium | 5.5 | | |
| CVE-2026-53258 | wifi: fix leak if split 6 GHz scanning fails | Medium | 5.5 | | |
| CVE-2026-53263 | 6lowpan: fix off-by-one in multicast context address compression | Medium | 5.5 | | |
| CVE-2026-53269 | netfilter: synproxy: add mutex to guard hook reference counting | Medium | 5.5 | | |
| CVE-2026-53274 | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | Medium | 5.5 | | |
| CVE-2026-53279 | drm/gma500/oaktrail_lvds: fix hang on init failure | Medium | 5.5 | | |
| CVE-2026-53287 | audit: fix incorrect inheritable capability in CAPSET records | Medium | 5.5 | | |
| CVE-2026-53289 | ice: fix NULL pointer dereference in ice_reset_all_vfs() | Medium | 5.5 | | |
| CVE-2026-53291 | ALSA: hda/conexant: Fix missing error check for jack detection | Medium | 5.5 | | |
| CVE-2026-53292 | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | Medium | 5.5 | | |
| CVE-2026-53293 | drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG | Medium | 5.5 | | |
| CVE-2026-53294 | mailbox: mailbox-test: don't free the reused channel | Medium | 5.5 | | |
| CVE-2026-53295 | mailbox: add sanity check for channel array | Medium | 5.5 | | |
| CVE-2026-53296 | mailbox: mailbox-test: free channels on probe error | Medium | 5.5 | | |
| CVE-2026-53297 | net: mana: Guard mana_remove against double invocation | Medium | 5.5 | | |
| CVE-2026-53304 | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | Medium | 5.5 | | |
| CVE-2026-53313 | drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths | Medium | 5.5 | | |
| CVE-2026-53314 | padata: Put CPU offline callback in ONLINE section to allow failure | Medium | 5.5 | | |
| CVE-2026-53317 | wifi: mt76: mt7921: Place upper limit on station AID | Medium | 5.5 | | |
| CVE-2026-53320 | nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() | Medium | 5.5 | | |
| CVE-2026-53325 | agp/amd64: Fix broken error propagation in agp_amd64_probe() | Medium | 5.5 | | |
| CVE-2026-53655 | node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling) | Medium | 5.5 | | |
| CVE-2026-54679 | jq: potential integer overflow in jvp_string_append | Medium | 5.5 | | |
| CVE-2026-54905 | concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity | Medium | 5.5 | | |
| CVE-2026-55892 | Vim: Out-of-bounds Write in Spell File Prefix Dump | Medium | 5.5 | | |
| CVE-2026-57452 | Vim: Out-of-bounds Read with libsodium-encrypted Files | Medium | 5.5 | | |
| CVE-2026-40930 | LIBPNG: Chunk smuggling in push-mode APNG parser via unconsumed chunk body | Medium | 5.4 | | |
| CVE-2026-58055 | nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length | Medium | 5.4 | | |
| CVE-2026-10098 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status | Medium | 5.3 | | |
| CVE-2026-10592 | Wildcard DNS SAN bypasses CA name-constraint checks | Medium | 5.3 | | |
| CVE-2026-12969 | Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation | Medium | 5.3 | | |
| CVE-2026-42507 | Arbitrary inputs are included in errors without any escaping in net/textproto | Medium | 5.3 | | |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | Medium | 5.3 | | |
| CVE-2026-44967 | opentelemetry-cpp: OTLP HTTP exporters read unbounded HTTP response | Medium | 5.3 | | |
| CVE-2026-50265 | Rejected reason: This CVE ID was assigned as a duplicate of CVE-2026-50292 | Medium | 5.3 | | |
| CVE-2026-55964 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) | Medium | 5.3 | | |
| CVE-2026-57436 | Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type | Medium | 5.3 | | |
| CVE-2026-57437 | Nokogiri: Possible Use-After-Free when directly using `NokogirI::XML::XPathContext` beyond document lifetime | Medium | 5.3 | | |
| CVE-2026-57451 | Vim: Out-of-bounds Read in Text Property Count | Medium | 5.3 | | |
| CVE-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured | Medium | 5.3 | | |
| CVE-2026-6450 | CRL critical extension bypass in ParseCRL_Extensions | Medium | 5.3 | | |
| CVE-2026-6678 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info | Medium | 5.3 | | |
| CVE-2026-10275 | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow | Medium | 5 | | |
| CVE-2026-35188 | Double-free When Checking OCSP Stapled Response | Medium | 5 | | |
| CVE-2026-55655 | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions | Medium | 5 | | |
| CVE-2026-50219 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur, | Medium | 4.9 | | |
| CVE-2026-56131 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur (similar to the CVE-2026-50219 situation). | Medium | 4.9 | | |
| CVE-2026-56412 | libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219. | Medium | 4.9 | | |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | Medium | 4.8 | | |
| CVE-2026-48142 | NGINX ngx_http_charset_module vulnerability | Medium | 4.8 | | |
| CVE-2026-46245 | drm/amd/display: Fix dc_link NULL handling in HPD init | Medium | 4.7 | | |
| CVE-2026-53112 | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | Medium | 4.7 | | |
| CVE-2026-11623 | tmux image.c image_free use after free | Medium | 4.5 | | |
| CVE-2025-71313 | PCI: endpoint: Add missing NULL check for alloc_workqueue() | Medium | 4.4 | | |
| CVE-2026-46250 | MIPS: Work around LLVM bug when gp is used as global register variable | Medium | 4.4 | | |
| CVE-2026-53238 | netlabel: validate unlabeled address and mask attribute lengths | Medium | 4.3 | | |
| CVE-2026-55653 | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service | Medium | 4.3 | | |
| CVE-2026-6412 | Continued acceptance of SHA-1/MD5 digests in certificate processing | Medium | 4.3 | | |
| CVE-2026-11526 | GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle | Medium | 4.2 | | |
| CVE-2026-13218 | Kubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher | Medium | 4.2 | | |
| CVE-2026-46272 | coresight: tmc-etr: Fix race condition between sysfs and perf mode | Low | 3.9 | | |
| CVE-2026-13322 | Kubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service | Low | 3.8 | | |
| CVE-2026-11525 | undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching | Low | 3.7 | | |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | Low | 3.7 | | |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | Low | 3.7 | | |
| CVE-2026-5419 | Guntls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | Low | 3.7 | | |
| CVE-2026-46252 | regulator: core: fix locking in regulator_resolve_supply() error path | Low | 3.4 | | |
| CVE-2026-10722 | cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow | Low | 3.3 | | |
| CVE-2026-49356 | Babel: Arbitrary File Read via sourceMappingURL Comment in @babel/core | Low | 3.2 | | |
| CVE-2026-57062 | CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. | Low | 2.9 | | |
| CVE-2026-57234 | Nokogiri: XML::Schema on JRuby allows network requests when NONET is set, bypassing CVE-2020-26247 | Low | 2.6 | | |
| CVE-2026-53089 | bpf: Fix use-after-free in offloaded map/prog info fill | Low | 2.5 | | |
| CVE-2026-0864 | Configuration Injection via Carriage Return (\r) in write() method | N/A | | | |
| CVE-2026-10846 | Insufficient verification that responses belong to a query | N/A | | | |
| CVE-2026-10881 | Chromium: CVE-2026-10881 Out of bounds read and write in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10882 | Chromium: CVE-2026-10882 Use after free in Network | N/A | | Edge - Chromium | |
| CVE-2026-10883 | Chromium: CVE-2026-10883 Out of bounds write in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10884 | Chromium: CVE-2026-10884 Use after free in Chromecast | N/A | | Edge - Chromium | |
| CVE-2026-10886 | Chromium: CVE-2026-10886 Use after free in FileSystem | N/A | | Edge - Chromium | |
| CVE-2026-10887 | Chromium: CVE-2026-10887 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-10888 | Chromium: CVE-2026-10888 Use after free in Cast Streaming | N/A | | Edge - Chromium | |
| CVE-2026-10889 | Chromium: CVE-2026-10889 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10890 | Chromium: CVE-2026-10890 Use after free in Cast | N/A | | Edge - Chromium | |
| CVE-2026-10891 | Chromium: CVE-2026-10891 Use after free in GFX | N/A | | Edge - Chromium | |
| CVE-2026-10892 | Chromium: CVE-2026-10892 Out of bounds write in GPU | N/A | | Edge - Chromium | |
| CVE-2026-10893 | Chromium: CVE-2026-10893 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-10894 | Chromium: CVE-2026-10894 Use after free in Printing | N/A | | Edge - Chromium | |
| CVE-2026-10895 | Chromium: CVE-2026-10895 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-10897 | Chromium: CVE-2026-10897 Out of bounds write in GPU | N/A | | Edge - Chromium | |
| CVE-2026-10898 | Chromium: CVE-2026-10898 Stack buffer overflow in GPU | N/A | | Edge - Chromium | |
| CVE-2026-10899 | Chromium: CVE-2026-10899 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-10900 | Chromium: CVE-2026-10900 Use after free in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-10901 | Chromium: CVE-2026-10901 Use after free in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-10902 | Chromium: CVE-2026-10902 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-10903 | Chromium: CVE-2026-10903 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10904 | Chromium: CVE-2026-10904 Inappropriate implementation in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10905 | Chromium: CVE-2026-10905 Use after free in Network | N/A | | Edge - Chromium | |
| CVE-2026-10906 | Chromium: CVE-2026-10906 Use after free in WebAuthentication | N/A | | Edge - Chromium | |
| CVE-2026-10907 | Chromium: CVE-2026-10907 Out of bounds write in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10908 | Chromium: CVE-2026-10908 Use after free in FullScreen | N/A | | Edge - Chromium | |
| CVE-2026-10909 | Chromium: CVE-2026-10909 Use after free in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10910 | Chromium: CVE-2026-10910 Type Confusion in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10911 | Chromium: CVE-2026-10911 Insufficient validation of untrusted input in Media | N/A | | Edge - Chromium | |
| CVE-2026-10912 | Chromium: CVE-2026-10912 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-10913 | Chromium: CVE-2026-10913 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10914 | Chromium: CVE-2026-10914 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10916 | Chromium: CVE-2026-10916 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-10917 | Chromium: CVE-2026-10917 Insufficient validation of untrusted input in Media | N/A | | Edge - Chromium | |
| CVE-2026-10918 | Chromium: CVE-2026-10918 Use after free in Viz | N/A | | Edge - Chromium | |
| CVE-2026-10919 | Chromium: CVE-2026-10919 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10920 | Chromium: CVE-2026-10920 Insufficient validation of untrusted input in WebShare | N/A | | Edge - Chromium | |
| CVE-2026-10921 | Chromium: CVE-2026-10921 Integer overflow in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10922 | Chromium: CVE-2026-10922 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-10923 | Chromium: CVE-2026-10923 Use after free in WebAppInstalls | N/A | | Edge - Chromium | |
| CVE-2026-10924 | Chromium: CVE-2026-10924 Integer overflow in Chromecast | N/A | | Edge - Chromium | |
| CVE-2026-10925 | Chromium: CVE-2026-10925 Out of bounds write in Skia | N/A | | Edge - Chromium | |
| CVE-2026-10926 | Chromium: CVE-2026-10926 Use after free in Cast | N/A | | Edge - Chromium | |
| CVE-2026-10927 | Chromium: CVE-2026-10927 Out of bounds read in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10928 | Chromium: CVE-2026-10928 Script injection in Headless | N/A | | Edge - Chromium | |
| CVE-2026-10929 | Chromium: CVE-2026-10929 Heap buffer overflow in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10930 | Chromium: CVE-2026-10930 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10931 | Chromium: CVE-2026-10931 Use after free in FileSystem | N/A | | Edge - Chromium | |
| CVE-2026-10932 | Chromium: CVE-2026-10932 Use after free in UI | N/A | | Edge - Chromium | |
| CVE-2026-10933 | Chromium: CVE-2026-10933 Use after free in Audio | N/A | | Edge - Chromium | |
| CVE-2026-10934 | Chromium: CVE-2026-10934 Use after free in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-10935 | Chromium: CVE-2026-10935 Inappropriate implementation in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10936 | Chromium: CVE-2026-10936 Type Confusion in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10937 | Chromium: CVE-2026-10937 Inappropriate implementation in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-10938 | Chromium: CVE-2026-10938 Insufficient validation of untrusted input in Input | N/A | | Edge - Chromium | |
| CVE-2026-10939 | Chromium: CVE-2026-10939 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10940 | Chromium: CVE-2026-10940 Race in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-10941 | Chromium: CVE-2026-10941 Out of bounds memory access in Skia | N/A | | Edge - Chromium | |
| CVE-2026-10942 | Chromium: CVE-2026-10942 Insufficient validation of untrusted input in UI | N/A | | Edge - Chromium | |
| CVE-2026-10943 | Chromium: CVE-2026-10943 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10945 | Chromium: CVE-2026-10945 Use after free in PDF | N/A | | Edge - Chromium | |
| CVE-2026-10946 | Chromium: CVE-2026-10946 Heap buffer overflow in Media | N/A | | Edge - Chromium | |
| CVE-2026-10947 | Chromium: CVE-2026-10947 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10948 | Chromium: CVE-2026-10948 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10949 | Chromium: CVE-2026-10949 Heap buffer overflow in Video | N/A | | Edge - Chromium | |
| CVE-2026-10953 | Chromium: CVE-2026-10953 Use after free in Core | N/A | | Edge - Chromium | |
| CVE-2026-10954 | Chromium: CVE-2026-10954 Use after free in Actor | N/A | | Edge - Chromium | |
| CVE-2026-10955 | Chromium: CVE-2026-10955 Type Confusion in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10956 | Chromium: CVE-2026-10956 Use after free in MimeHandlerView | N/A | | Edge - Chromium | |
| CVE-2026-10957 | Chromium: CVE-2026-10957 Use after free in Glic | N/A | | Edge - Chromium | |
| CVE-2026-10959 | Chromium: CVE-2026-10959 Use after free in Input | N/A | | Edge - Chromium | |
| CVE-2026-10960 | Chromium: CVE-2026-10960 Uninitialized Use in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-10962 | Chromium: CVE-2026-10962 Type Confusion in Media | N/A | | Edge - Chromium | |
| CVE-2026-10963 | Chromium: CVE-2026-10963 Integer overflow in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10964 | Chromium: CVE-2026-10964 Integer overflow in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10965 | Chromium: CVE-2026-10965 Integer overflow in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-10966 | Chromium: CVE-2026-10966 Insufficient validation of untrusted input in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-10967 | Chromium: CVE-2026-10967 Use after free in SurfaceCapture | N/A | | Edge - Chromium | |
| CVE-2026-10968 | Chromium: CVE-2026-10968 Insufficient validation of untrusted input in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10969 | Chromium: CVE-2026-10969 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-10970 | Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups | N/A | | Edge - Chromium | |
| CVE-2026-10971 | Chromium: CVE-2026-10971 Insufficient validation of untrusted input in Printing | N/A | | Edge - Chromium | |
| CVE-2026-10972 | Chromium: CVE-2026-10972 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-10973 | Chromium: CVE-2026-10973 Uninitialized Use in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10974 | Chromium: CVE-2026-10974 Insufficient validation of untrusted input in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10975 | Chromium: CVE-2026-10975 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-10976 | Chromium: CVE-2026-10976 Uninitialized Use in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10977 | Chromium: CVE-2026-10977 Uninitialized Use in Skia | N/A | | Edge - Chromium | |
| CVE-2026-10978 | Chromium: CVE-2026-10978 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-10979 | Chromium: CVE-2026-10979 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10980 | Chromium: CVE-2026-10980 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-10981 | Chromium: CVE-2026-10981 Insufficient validation of untrusted input in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-10982 | Chromium: CVE-2026-10982 Use after free in WebXR | N/A | | Edge - Chromium | |
| CVE-2026-10983 | Chromium: CVE-2026-10983 Insufficient validation of untrusted input in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-10984 | Chromium: CVE-2026-10984 Inappropriate implementation in Accessibility | N/A | | Edge - Chromium | |
| CVE-2026-10985 | Chromium: CVE-2026-10985 Out of bounds read in Skia | N/A | | Edge - Chromium | |
| CVE-2026-10986 | Chromium: CVE-2026-10986 Integer overflow in Media | N/A | | Edge - Chromium | |
| CVE-2026-10987 | Chromium: CVE-2026-10987 Integer overflow in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10988 | Chromium: CVE-2026-10988 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-10989 | Chromium: CVE-2026-10989 Inappropriate implementation in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10990 | Chromium: CVE-2026-10990 Use after free in Glic | N/A | | Edge - Chromium | |
| CVE-2026-10991 | Chromium: CVE-2026-10991 Use after free in V8 | N/A | | Edge - Chromium | |
| CVE-2026-10992 | Chromium: CVE-2026-10992 Insufficient data validation in Animation | N/A | | Edge - Chromium | |
| CVE-2026-10993 | Chromium: CVE-2026-10993 Heap buffer overflow in Skia | N/A | | Edge - Chromium | |
| CVE-2026-10994 | Chromium: CVE-2026-10994 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-10995 | Chromium: CVE-2026-10995 Heap buffer overflow in TabStrip | N/A | | Edge - Chromium | |
| CVE-2026-10996 | Chromium: CVE-2026-10996 Inappropriate implementation in Workers | N/A | | Edge - Chromium | |
| CVE-2026-10997 | Chromium: CVE-2026-10997 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-10998 | Chromium: CVE-2026-10998 Out of bounds read in Media | N/A | | Edge - Chromium | |
| CVE-2026-10999 | Chromium: CVE-2026-10999 Out of bounds memory access in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11000 | Chromium: CVE-2026-11000 Use after free in Fonts | N/A | | Edge - Chromium | |
| CVE-2026-11001 | Chromium: CVE-2026-11001 Incorrect security UI in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11002 | Chromium: CVE-2026-11002 Use after free in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11003 | Chromium: CVE-2026-11003 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11004 | Chromium: CVE-2026-11004 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11005 | Chromium: CVE-2026-11005 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11006 | Chromium: CVE-2026-11006 Out of bounds read in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11007 | Chromium: CVE-2026-11007 Insufficient validation of untrusted input in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11008 | Chromium: CVE-2026-11008 Insufficient validation of untrusted input in WebAppInstalls | N/A | | Edge - Chromium | |
| CVE-2026-11009 | Chromium: CVE-2026-11009 Use after free in USB | N/A | | Edge - Chromium | |
| CVE-2026-11010 | Chromium: CVE-2026-11010 Use after free in WebShare | N/A | | Edge - Chromium | |
| CVE-2026-11011 | Chromium: CVE-2026-11011 Insufficient policy enforcement in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11012 | Chromium: CVE-2026-11012 Use after free in Serial | N/A | | Edge - Chromium | |
| CVE-2026-11013 | Chromium: CVE-2026-11013 Insufficient validation of untrusted input in Network | N/A | | Edge - Chromium | |
| CVE-2026-11014 | Chromium: CVE-2026-11014 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11015 | Chromium: CVE-2026-11015 Out of bounds read in WebGPU | N/A | | Edge - Chromium | |
| CVE-2026-11016 | Chromium: CVE-2026-11016 Insufficient validation of untrusted input in Network | N/A | | Edge - Chromium | |
| CVE-2026-11017 | Chromium: CVE-2026-11017 Inappropriate implementation in Link Preview | N/A | | Edge - Chromium | |
| CVE-2026-11018 | Chromium: CVE-2026-11018 Insufficient policy enforcement in Actor | N/A | | Edge - Chromium | |
| CVE-2026-11019 | Chromium: CVE-2026-11019 Inappropriate implementation in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11020 | Chromium: CVE-2026-11020 Inappropriate implementation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11021 | Chromium: CVE-2026-11021 Insufficient validation of untrusted input in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11022 | Chromium: CVE-2026-11022 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11023 | Chromium: CVE-2026-11023 Insufficient validation of untrusted input in WebAppInstalls | N/A | | Edge - Chromium | |
| CVE-2026-11024 | Chromium: CVE-2026-11024 Stack buffer overflow in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11025 | Chromium: CVE-2026-11025 Insufficient policy enforcement in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-11026 | Chromium: CVE-2026-11026 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11027 | Chromium: CVE-2026-11027 Insufficient validation of untrusted input in Glic | N/A | | Edge - Chromium | |
| CVE-2026-11028 | Chromium: CVE-2026-11028 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-11029 | Chromium: CVE-2026-11029 Insufficient validation of untrusted input in Drag and Drop | N/A | | Edge - Chromium | |
| CVE-2026-11030 | Chromium: CVE-2026-11030 Use after free in Network | N/A | | Edge - Chromium | |
| CVE-2026-11031 | Chromium: CVE-2026-11031 Insufficient validation of untrusted input in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11032 | Chromium: CVE-2026-11032 Insufficient data validation in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11033 | Chromium: CVE-2026-11033 Uninitialized Use in WebML | N/A | | Edge - Chromium | |
| CVE-2026-11034 | Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group Sync | N/A | | Edge - Chromium | |
| CVE-2026-11035 | Chromium: CVE-2026-11035 Insufficient validation of untrusted input in Custom Tabs | N/A | | Edge - Chromium | |
| CVE-2026-11036 | Chromium: CVE-2026-11036 Inappropriate implementation in DOM | N/A | | Edge - Chromium | |
| CVE-2026-11037 | Chromium: CVE-2026-11037 Out of bounds write in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11038 | Chromium: CVE-2026-11038 Insufficient validation of untrusted input in Subresource Integrity | N/A | | Edge - Chromium | |
| CVE-2026-11039 | Chromium: CVE-2026-11039 Uninitialized Use in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11040 | Chromium: CVE-2026-11040 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11041 | Chromium: CVE-2026-11041 Insufficient validation of untrusted input in Media | N/A | | Edge - Chromium | |
| CVE-2026-11042 | Chromium: CVE-2026-11042 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-11043 | Chromium: CVE-2026-11043 Out of bounds write in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11044 | Chromium: CVE-2026-11044 Integer overflow in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11045 | Chromium: CVE-2026-11045 Insufficient validation of untrusted input in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11046 | Chromium: CVE-2026-11046 Insufficient validation of untrusted input in Media | N/A | | Edge - Chromium | |
| CVE-2026-11047 | Chromium: CVE-2026-11047 Insufficient validation of untrusted input in Base | N/A | | Edge - Chromium | |
| CVE-2026-11048 | Chromium: CVE-2026-11048 Inappropriate implementation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11049 | Chromium: CVE-2026-11049 Use after free in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11050 | Chromium: CVE-2026-11050 Use after free in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11051 | Chromium: CVE-2026-11051 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11052 | Chromium: CVE-2026-11052 Type Confusion in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11053 | Chromium: CVE-2026-11053 VULNERABILITY in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11054 | Chromium: CVE-2026-11054 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11055 | Chromium: CVE-2026-11055 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11056 | Chromium: CVE-2026-11056 Insufficient validation of untrusted input in SiteIsolation | N/A | | Edge - Chromium | |
| CVE-2026-11057 | Chromium: CVE-2026-11057 Uninitialized Use in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11058 | Chromium: CVE-2026-11058 Integer overflow in CredentialProvider | N/A | | Edge - Chromium | |
| CVE-2026-11059 | Chromium: CVE-2026-11059 Use after free in Blink | N/A | | Edge - Chromium | |
| CVE-2026-11060 | Chromium: CVE-2026-11060 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-11061 | Chromium: CVE-2026-11061 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11062 | Chromium: CVE-2026-11062 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11063 | Chromium: CVE-2026-11063 Insufficient validation of untrusted input in WebNN | N/A | | Edge - Chromium | |
| CVE-2026-11064 | Chromium: CVE-2026-11064 Uninitialized Use in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11065 | Chromium: CVE-2026-11065 Use after free in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11066 | Chromium: CVE-2026-11066 Insufficient validation of untrusted input in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11067 | Chromium: CVE-2026-11067 Uninitialized Use in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11068 | Chromium: CVE-2026-11068 Use after free in WebSockets | N/A | | Edge - Chromium | |
| CVE-2026-11069 | Chromium: CVE-2026-11069 Insufficient validation of untrusted input in Cast | N/A | | Edge - Chromium | |
| CVE-2026-11070 | Chromium: CVE-2026-11070 Insufficient validation of untrusted input in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11071 | Chromium: CVE-2026-11071 Use after free in Base | N/A | | Edge - Chromium | |
| CVE-2026-11072 | Chromium: CVE-2026-11072 Use after free in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11073 | Chromium: CVE-2026-11073 Use after free in WebGL | N/A | | Edge - Chromium | |
| CVE-2026-11074 | Chromium: CVE-2026-11074 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11075 | Chromium: CVE-2026-11075 Out of bounds read in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11076 | Chromium: CVE-2026-11076 Type Confusion in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11077 | Chromium: CVE-2026-11077 Out of bounds read in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11078 | Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystem | N/A | | Edge - Chromium | |
| CVE-2026-11079 | Chromium: CVE-2026-11079 Insufficient validation of untrusted input in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11080 | Chromium: CVE-2026-11080 Use after free in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11081 | Chromium: CVE-2026-11081 Policy bypass in Canvas | N/A | | Edge - Chromium | |
| CVE-2026-11082 | Chromium: CVE-2026-11082 Use after free in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11083 | Chromium: CVE-2026-11083 Inappropriate implementation in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11084 | Chromium: CVE-2026-11084 Inappropriate implementation in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11085 | Chromium: CVE-2026-11085 Integer overflow in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11086 | Chromium: CVE-2026-11086 Insufficient validation of untrusted input in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11087 | Chromium: CVE-2026-11087 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11088 | Chromium: CVE-2026-11088 Integer overflow in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11089 | Chromium: CVE-2026-11089 Uninitialized Use in Media | N/A | | Edge - Chromium | |
| CVE-2026-11090 | Chromium: CVE-2026-11090 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11091 | Chromium: CVE-2026-11091 Inappropriate implementation in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11092 | Chromium: CVE-2026-11092 Insufficient policy enforcement in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11093 | Chromium: CVE-2026-11093 Insufficient validation of untrusted input in Printing | N/A | | Edge - Chromium | |
| CVE-2026-11094 | Chromium: CVE-2026-11094 Use after free in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11095 | Chromium: CVE-2026-11095 Insufficient validation of untrusted input in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11096 | Chromium: CVE-2026-11096 Out of bounds read in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11097 | Chromium: CVE-2026-11097 Inappropriate implementation in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11098 | Chromium: CVE-2026-11098 Insufficient validation of untrusted input in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11099 | Chromium: CVE-2026-11099 Vulnerability in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11100 | Chromium: CVE-2026-11100 Use after free in File Input | N/A | | Edge - Chromium | |
| CVE-2026-11101 | Chromium: CVE-2026-11101 Uninitialized Use in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11102 | Chromium: CVE-2026-11102 Inappropriate implementation in Isolated Web Apps | N/A | | Edge - Chromium | |
| CVE-2026-11103 | Chromium: CVE-2026-11103 Inappropriate implementation in Installer | N/A | | Edge - Chromium | |
| CVE-2026-11104 | Chromium: CVE-2026-11104 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11105 | Chromium: CVE-2026-11105 Insufficient validation of untrusted input in WebUI | N/A | | Edge - Chromium | |
| CVE-2026-11106 | Chromium: CVE-2026-11106 Inappropriate implementation in Media | N/A | | Edge - Chromium | |
| CVE-2026-11107 | Chromium: CVE-2026-11107 Inappropriate implementation in Downloads | N/A | | Edge - Chromium | |
| CVE-2026-11108 | Chromium: CVE-2026-11108 Inappropriate implementation in NFC | N/A | | Edge - Chromium | |
| CVE-2026-11109 | Chromium: CVE-2026-11109 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11110 | Chromium: CVE-2026-11110 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11111 | Chromium: CVE-2026-11111 Out of bounds read in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11112 | Chromium: CVE-2026-11112 Insufficient validation of untrusted input in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11113 | Chromium: CVE-2026-11113 Insufficient validation of untrusted input in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11114 | Chromium: CVE-2026-11114 Use after free in Device Trust | N/A | | Edge - Chromium | |
| CVE-2026-11115 | Chromium: CVE-2026-11115 Use after free in Updater | N/A | | Edge - Chromium | |
| CVE-2026-11116 | Chromium: CVE-2026-11116 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11117 | Chromium: CVE-2026-11117 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-11118 | Chromium: CVE-2026-11118 Use after free in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11119 | Chromium: CVE-2026-11119 Insufficient validation of untrusted input in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11120 | Chromium: CVE-2026-11120 Insufficient validation of untrusted input in Enterprise Reporting | N/A | | Edge - Chromium | |
| CVE-2026-11121 | Chromium: CVE-2026-11121 Insufficient validation of untrusted input in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11122 | Chromium: CVE-2026-11122 Inappropriate implementation in Keyboard | N/A | | Edge - Chromium | |
| CVE-2026-11123 | Chromium: CVE-2026-11123 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11124 | Chromium: CVE-2026-11124 Heap buffer overflow in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11125 | Chromium: CVE-2026-11125 Use after free in Compositing | N/A | | Edge - Chromium | |
| CVE-2026-11126 | Chromium: CVE-2026-11126 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11127 | Chromium: CVE-2026-11127 Inappropriate implementation in WebAPKs | N/A | | Edge - Chromium | |
| CVE-2026-11128 | Chromium: CVE-2026-11128 Insufficient validation of untrusted input in Web Share | N/A | | Edge - Chromium | |
| CVE-2026-11129 | Chromium: CVE-2026-11129 Inappropriate implementation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11130 | Chromium: CVE-2026-11130 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-11131 | Chromium: CVE-2026-11131 Use after free in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11132 | Chromium: CVE-2026-11132 Policy bypass in Paint | N/A | | Edge - Chromium | |
| CVE-2026-11133 | Chromium: CVE-2026-11133 Insufficient policy enforcement in Paint | N/A | | Edge - Chromium | |
| CVE-2026-11134 | Chromium: CVE-2026-11134 Insufficient data validation in Media | N/A | | Edge - Chromium | |
| CVE-2026-11135 | Chromium: CVE-2026-11135 Insufficient policy enforcement in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11136 | Chromium: CVE-2026-11136 Use after free in Canvas | N/A | | Edge - Chromium | |
| CVE-2026-11137 | Chromium: CVE-2026-11137 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11138 | Chromium: CVE-2026-11138 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11139 | Chromium: CVE-2026-11139 Policy bypass in Paint | N/A | | Edge - Chromium | |
| CVE-2026-11140 | Chromium: CVE-2026-11140 Insufficient validation of untrusted input in Chromecast | N/A | | Edge - Chromium | |
| CVE-2026-11141 | Chromium: CVE-2026-11141 Uninitialized Use in Audio | N/A | | Edge - Chromium | |
| CVE-2026-11142 | Chromium: CVE-2026-11142 Policy bypass in Paint | N/A | | Edge - Chromium | |
| CVE-2026-11143 | Chromium: CVE-2026-11143 Heap buffer overflow in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11144 | Chromium: CVE-2026-11144 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-11145 | Chromium: CVE-2026-11145 Race in Geolocation | N/A | | Edge - Chromium | |
| CVE-2026-11146 | Chromium: CVE-2026-11146 Insufficient validation of untrusted input in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11147 | Chromium: CVE-2026-11147 Use after free in WebML | N/A | | Edge - Chromium | |
| CVE-2026-11148 | Chromium: CVE-2026-11148 Inappropriate implementation in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11149 | Chromium: CVE-2026-11149 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11150 | Chromium: CVE-2026-11150 Inappropriate implementation in XML | N/A | | Edge - Chromium | |
| CVE-2026-11151 | Chromium: CVE-2026-11151 Insufficient validation of untrusted input in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11152 | Chromium: CVE-2026-11152 Object lifecycle issue in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11153 | Chromium: CVE-2026-11153 Side-channel information leakage in Forms | N/A | | Edge - Chromium | |
| CVE-2026-11154 | Chromium: CVE-2026-11154 Use after free in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11155 | Chromium: CVE-2026-11155 Insufficient policy enforcement in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11156 | Chromium: CVE-2026-11156 Inappropriate implementation in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11157 | Chromium: CVE-2026-11157 Script injection in Accessibility | N/A | | Edge - Chromium | |
| CVE-2026-11158 | Chromium: CVE-2026-11158 Insufficient validation of untrusted input in Downloads | N/A | | Edge - Chromium | |
| CVE-2026-11159 | Chromium: CVE-2026-11159 Uninitialized Use in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11160 | Chromium: CVE-2026-11160 Out of bounds read in Input | N/A | | Edge - Chromium | |
| CVE-2026-11161 | Chromium: CVE-2026-11161 Insufficient data validation in DataTransfer | N/A | | Edge - Chromium | |
| CVE-2026-11162 | Chromium: CVE-2026-11162 Insufficient policy enforcement in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11163 | Chromium: CVE-2026-11163 Use after free in Messages | N/A | | Edge - Chromium | |
| CVE-2026-11164 | Chromium: CVE-2026-11164 Use after free in Blink | N/A | | Edge - Chromium | |
| CVE-2026-11166 | Chromium: CVE-2026-11166 Inappropriate implementation in SVG | N/A | | Edge - Chromium | |
| CVE-2026-11167 | Chromium: CVE-2026-11167 Inappropriate implementation in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11168 | Chromium: CVE-2026-11168 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11169 | Chromium: CVE-2026-11169 Inappropriate implementation in XML | N/A | | Edge - Chromium | |
| CVE-2026-11170 | Chromium: CVE-2026-11170 Inappropriate implementation in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11171 | Chromium: CVE-2026-11171 Integer overflow in Blink | N/A | | Edge - Chromium | |
| CVE-2026-11172 | Chromium: CVE-2026-11172 Incorrect security UI in Contact Picker | N/A | | Edge - Chromium | |
| CVE-2026-11173 | Chromium: CVE-2026-11173 Out of bounds write in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11174 | Chromium: CVE-2026-11174 Insufficient policy enforcement in Site Isolation | N/A | | Edge - Chromium | |
| CVE-2026-11175 | Chromium: CVE-2026-11175 Incorrect security UI in Messages | N/A | | Edge - Chromium | |
| CVE-2026-11176 | Chromium: CVE-2026-11176 Inappropriate implementation in Media | N/A | | Edge - Chromium | |
| CVE-2026-11177 | Chromium: CVE-2026-11177 Use after free in Omnibox | N/A | | Edge - Chromium | |
| CVE-2026-11178 | Chromium: CVE-2026-11178 Policy bypass in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11179 | Chromium: CVE-2026-11179 Inappropriate implementation in ORB | N/A | | Edge - Chromium | |
| CVE-2026-11180 | Chromium: CVE-2026-11180 Policy bypass in SVG | N/A | | Edge - Chromium | |
| CVE-2026-11181 | Chromium: CVE-2026-11181 Inappropriate implementation in Media Session | N/A | | Edge - Chromium | |
| CVE-2026-11182 | Chromium: CVE-2026-11182 Inappropriate implementation in SVG | N/A | | Edge - Chromium | |
| CVE-2026-11184 | Chromium: CVE-2026-11184 Insufficient policy enforcement in Actor | N/A | | Edge - Chromium | |
| CVE-2026-11185 | Chromium: CVE-2026-11185 Use after free in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11186 | Chromium: CVE-2026-11186 Inappropriate implementation in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11187 | Chromium: CVE-2026-11187 Insufficient policy enforcement in Glic | N/A | | Edge - Chromium | |
| CVE-2026-11188 | Chromium: CVE-2026-11188 Use after free in USB | N/A | | Edge - Chromium | |
| CVE-2026-11189 | Chromium: CVE-2026-11189 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11190 | Chromium: CVE-2026-11190 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11191 | Chromium: CVE-2026-11191 Out of bounds memory access in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11192 | Chromium: CVE-2026-11192 Insufficient validation of untrusted input in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11193 | Chromium: CVE-2026-11193 Insufficient policy enforcement in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11194 | Chromium: CVE-2026-11194 Inappropriate implementation in Network | N/A | | Edge - Chromium | |
| CVE-2026-11195 | Chromium: CVE-2026-11195 Inappropriate implementation in MHTML | N/A | | Edge - Chromium | |
| CVE-2026-11196 | Chromium: CVE-2026-11196 Type Confusion in XML | N/A | | Edge - Chromium | |
| CVE-2026-11197 | Chromium: CVE-2026-11197 Insufficient policy enforcement in Workers | N/A | | Edge - Chromium | |
| CVE-2026-11198 | Chromium: CVE-2026-11198 Insufficient validation of untrusted input in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11199 | Chromium: CVE-2026-11199 Insufficient validation of untrusted input in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11200 | Chromium: CVE-2026-11200 Inappropriate implementation in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11201 | Chromium: CVE-2026-11201 Use after free in ServiceWorker | N/A | | Edge - Chromium | |
| CVE-2026-11203 | Chromium: CVE-2026-11203 Policy bypass in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11206 | Chromium: CVE-2026-11206 Policy bypass in ServiceWorker | N/A | | Edge - Chromium | |
| CVE-2026-11207 | Chromium: CVE-2026-11207 Insufficient validation of untrusted input in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11208 | Chromium: CVE-2026-11208 Use after free in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11209 | Chromium: CVE-2026-11209 Insufficient policy enforcement in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-11210 | Chromium: CVE-2026-11210 Insufficient policy enforcement in Safe Browsing | N/A | | Edge - Chromium | |
| CVE-2026-11211 | Chromium: CVE-2026-11211 Integer overflow in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11212 | Chromium: CVE-2026-11212 Insufficient policy enforcement in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11213 | Chromium: CVE-2026-11213 Insufficient validation of untrusted input in Reading Mode | N/A | | Edge - Chromium | |
| CVE-2026-11215 | Chromium: CVE-2026-11215 Inappropriate implementation in Cronet | N/A | | Edge - Chromium | |
| CVE-2026-11216 | Chromium: CVE-2026-11216 Incorrect security UI in File Input | N/A | | Edge - Chromium | |
| CVE-2026-11217 | Chromium: CVE-2026-11217 Insufficient policy enforcement in Fenced Frames | N/A | | Edge - Chromium | |
| CVE-2026-11218 | Chromium: CVE-2026-11218 Inappropriate implementation in PlatformIntegration | N/A | | Edge - Chromium | |
| CVE-2026-11219 | Chromium: CVE-2026-11219 Insufficient data validation in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-11220 | Chromium: CVE-2026-11220 Insufficient validation of untrusted input in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-11221 | Chromium: CVE-2026-11221 Insufficient validation of untrusted input in PointerLock | N/A | | Edge - Chromium | |
| CVE-2026-11222 | Chromium: CVE-2026-11222 Incorrect security UI in Tab Strip | N/A | | Edge - Chromium | |
| CVE-2026-11223 | Chromium: CVE-2026-11223 Insufficient validation of untrusted input in Network | N/A | | Edge - Chromium | |
| CVE-2026-11224 | Chromium: CVE-2026-11224 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11225 | Chromium: CVE-2026-11225 Incorrect security UI in WebUI | N/A | | Edge - Chromium | |
| CVE-2026-11226 | Chromium: CVE-2026-11226 Insufficient policy enforcement in PreviewTab | N/A | | Edge - Chromium | |
| CVE-2026-11227 | Chromium: CVE-2026-11227 Incorrect security UI in Tab Hover Cards | N/A | | Edge - Chromium | |
| CVE-2026-11228 | Chromium: CVE-2026-11228 Incorrect security UI in File Input | N/A | | Edge - Chromium | |
| CVE-2026-11229 | Chromium: CVE-2026-11229 Insufficient policy enforcement in Enterprise | N/A | | Edge - Chromium | |
| CVE-2026-11230 | Chromium: CVE-2026-11230 Use after free in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11231 | Chromium: CVE-2026-11231 Inappropriate implementation in Safe Browsing | N/A | | Edge - Chromium | |
| CVE-2026-11232 | Chromium: CVE-2026-11232 Inappropriate implementation in TabGroups | N/A | | Edge - Chromium | |
| CVE-2026-11233 | Chromium: CVE-2026-11233 Insufficient validation of untrusted input in FoldableAPIs | N/A | | Edge - Chromium | |
| CVE-2026-11234 | Chromium: CVE-2026-11234 Insufficient policy enforcement in FoldableAPIs | N/A | | Edge - Chromium | |
| CVE-2026-11235 | Chromium: CVE-2026-11235 Insufficient validation of untrusted input in Compositing | N/A | | Edge - Chromium | |
| CVE-2026-11236 | Chromium: CVE-2026-11236 Insufficient policy enforcement in Web Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11237 | Chromium: CVE-2026-11237 Insufficient validation of untrusted input in Media | N/A | | Edge - Chromium | |
| CVE-2026-11238 | Chromium: CVE-2026-11238 Inappropriate implementation in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11239 | Chromium: CVE-2026-11239 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11240 | Chromium: CVE-2026-11240 Insufficient validation of untrusted input in Loader | N/A | | Edge - Chromium | |
| CVE-2026-11241 | Chromium: CVE-2026-11241 Insufficient validation of untrusted input in Cast | N/A | | Edge - Chromium | |
| CVE-2026-11242 | Chromium: CVE-2026-11242 Insufficient validation of untrusted input in Plugins | N/A | | Edge - Chromium | |
| CVE-2026-11243 | Chromium: CVE-2026-11243 Incorrect security UI in Downloads | N/A | | Edge - Chromium | |
| CVE-2026-11244 | Chromium: CVE-2026-11244 Insufficient validation of untrusted input in WebAuthentication | N/A | | Edge - Chromium | |
| CVE-2026-11245 | Chromium: CVE-2026-11245 Inappropriate implementation in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11246 | Chromium: CVE-2026-11246 Insufficient validation of untrusted input in IndexedDB | N/A | | Edge - Chromium | |
| CVE-2026-11247 | Chromium: CVE-2026-11247 Insufficient policy enforcement in CustomTabs | N/A | | Edge - Chromium | |
| CVE-2026-11248 | Chromium: CVE-2026-11248 Policy bypass in Google Lens | N/A | | Edge - Chromium | |
| CVE-2026-11249 | Chromium: CVE-2026-11249 Use after free in Network | N/A | | Edge - Chromium | |
| CVE-2026-11250 | Chromium: CVE-2026-11250 Inappropriate implementation in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11251 | Chromium: CVE-2026-11251 Insufficient validation of untrusted input in Password Manager | N/A | | Edge - Chromium | |
| CVE-2026-11252 | Chromium: CVE-2026-11252 Policy bypass in Content Settings | N/A | | Edge - Chromium | |
| CVE-2026-11253 | Chromium: CVE-2026-11253 Race in Permissions | N/A | | Edge - Chromium | |
| CVE-2026-11254 | Chromium: CVE-2026-11254 Inappropriate implementation in Permissions | N/A | | Edge - Chromium | |
| CVE-2026-11255 | Chromium: CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API | N/A | | Edge - Chromium | |
| CVE-2026-11256 | Chromium: CVE-2026-11256 Out of bounds read in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11257 | Chromium: CVE-2026-11257 Inappropriate implementation in Browser | N/A | | Edge - Chromium | |
| CVE-2026-11258 | Chromium: CVE-2026-11258 Inappropriate implementation in File System Access | N/A | | Edge - Chromium | |
| CVE-2026-11259 | Chromium: CVE-2026-11259 Insufficient validation of untrusted input in Cast | N/A | | Edge - Chromium | |
| CVE-2026-11260 | Chromium: CVE-2026-11260 Policy bypass in Permissions | N/A | | Edge - Chromium | |
| CVE-2026-11261 | Chromium: CVE-2026-11261 Insufficient validation of untrusted input in PDF | N/A | | Edge - Chromium | |
| CVE-2026-11262 | Chromium: CVE-2026-11262 Use after free in TabStrip | N/A | | Edge - Chromium | |
| CVE-2026-11263 | Chromium: CVE-2026-11263 Insufficient policy enforcement in WebAuthentication | N/A | | Edge - Chromium | |
| CVE-2026-11264 | Chromium: CVE-2026-11264 Policy bypass in Content Security Policy | N/A | | Edge - Chromium | |
| CVE-2026-11265 | Chromium: CVE-2026-11265 Insufficient data validation in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11266 | Chromium: CVE-2026-11266 Policy bypass in SafeBrowsing | N/A | | Edge - Chromium | |
| CVE-2026-11267 | Chromium: CVE-2026-11267 Insufficient policy enforcement in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11268 | Chromium: CVE-2026-11268 Uninitialized Use in ANGLE | N/A | | Edge - Chromium | |
| CVE-2026-11269 | Chromium: CVE-2026-11269 Inappropriate implementation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11270 | Chromium: CVE-2026-11270 Inappropriate implementation in UI | N/A | | Edge - Chromium | |
| CVE-2026-11271 | Chromium: CVE-2026-11271 Incorrect security UI in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-11273 | Chromium: CVE-2026-11273 Insufficient validation of untrusted input in Omnibox | N/A | | Edge - Chromium | |
| CVE-2026-11275 | Chromium: CVE-2026-11275 Insufficient policy enforcement in Page Info | N/A | | Edge - Chromium | |
| CVE-2026-11276 | Chromium: CVE-2026-11276 Inappropriate implementation in Cast | N/A | | Edge - Chromium | |
| CVE-2026-11278 | Chromium: CVE-2026-11278 Inappropriate implementation in CustomTabs | N/A | | Edge - Chromium | |
| CVE-2026-11279 | Chromium: CVE-2026-11279 Out of bounds read in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-11281 | Chromium: CVE-2026-11281 Integer overflow in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-11282 | Chromium: CVE-2026-11282 Policy bypass in Sandbox | N/A | | Edge - Chromium | |
| CVE-2026-11283 | Chromium: CVE-2026-11283 Policy bypass in Shortcuts | N/A | | Edge - Chromium | |
| CVE-2026-11284 | Chromium: CVE-2026-11284 Side-channel information leakage in PerformanceAPIs | N/A | | Edge - Chromium | |
| CVE-2026-11286 | Chromium: CVE-2026-11286 Insufficient validation of untrusted input in Wallet | N/A | | Edge - Chromium | |
| CVE-2026-11287 | Chromium: CVE-2026-11287 Insufficient validation of untrusted input in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-11288 | Chromium: CVE-2026-11288 Policy bypass in CSS | N/A | | Edge - Chromium | |
| CVE-2026-11289 | Chromium: CVE-2026-11289 Side-channel information leakage in Paint | N/A | | Edge - Chromium | |
| CVE-2026-11290 | Chromium: CVE-2026-11290 Integer overflow in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11291 | Chromium: CVE-2026-11291 Policy bypass in Android Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11292 | Chromium: CVE-2026-11292 Policy bypass in Blink | N/A | | Edge - Chromium | |
| CVE-2026-11293 | Chromium: CVE-2026-11293 Use after free in Input | N/A | | Edge - Chromium | |
| CVE-2026-11294 | Chromium: CVE-2026-11294 Inappropriate implementation in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-11295 | Chromium: CVE-2026-11295 Inappropriate implementation in WebView | N/A | | Edge - Chromium | |
| CVE-2026-11296 | Chromium: CVE-2026-11296 Inappropriate implementation in ImageCapture | N/A | | Edge - Chromium | |
| CVE-2026-11297 | Chromium: CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode | N/A | | Edge - Chromium | |
| CVE-2026-11299 | Chromium: CVE-2026-11299 Out of bounds read in Fonts | N/A | | Edge - Chromium | |
| CVE-2026-11300 | Chromium: CVE-2026-11300 Inappropriate implementation in Permissions | N/A | | Edge - Chromium | |
| CVE-2026-11301 | Chromium: CVE-2026-11301 Out of bounds read in LiveCaption | N/A | | Edge - Chromium | |
| CVE-2026-11303 | Chromium: CVE-2026-11303 Use after free in PDFium | N/A | | Edge - Chromium | |
| CVE-2026-11304 | Chromium: CVE-2026-11304 Use after free in PDFium | N/A | | Edge - Chromium | |
| CVE-2026-11305 | Chromium: CVE-2026-11305 Use after free in PDFium | N/A | | Edge - Chromium | |
| CVE-2026-11306 | Chromium: CVE-2026-11306 Use after free in PDFium | N/A | | Edge - Chromium | |
| CVE-2026-11307 | Chromium: CVE-2026-11307 Use after free in PDFium | N/A | | Edge - Chromium | |
| CVE-2026-11308 | Chromium: CVE-2026-11308 Inappropriate implementation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11309 | Chromium: CVE-2026-11309 Insufficient policy enforcement in History | N/A | | Edge - Chromium | |
| CVE-2026-11628 | Chromium: CVE-2026-11628 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-11629 | Chromium: CVE-2026-11629 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-11630 | Chromium: CVE-2026-11630 Use after free in File Input | N/A | | Edge - Chromium | |
| CVE-2026-11631 | Chromium: CVE-2026-11631 Use after free in Aura | N/A | | Edge - Chromium | |
| CVE-2026-11632 | Chromium: CVE-2026-11632 Use after free in TabStrip | N/A | | Edge - Chromium | |
| CVE-2026-11633 | Chromium: CVE-2026-11633 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11634 | Chromium: CVE-2026-11634 Use after free in Gamepad | N/A | | Edge - Chromium | |
| CVE-2026-11635 | Chromium: CVE-2026-11635 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11636 | Chromium: CVE-2026-11636 Use after free in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-11637 | Chromium: CVE-2026-11637 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-11638 | Chromium: CVE-2026-11638 Use after free in Printing | N/A | | Edge - Chromium | |
| CVE-2026-11639 | Chromium: CVE-2026-11639 Use after free in Compositing | N/A | | Edge - Chromium | |
| CVE-2026-11640 | Chromium: CVE-2026-11640 Integer overflow in libyuv | N/A | | Edge - Chromium | |
| CVE-2026-11641 | Chromium: CVE-2026-11641 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11642 | Chromium: CVE-2026-11642 Use after free in Web Apps | N/A | | Edge - Chromium | |
| CVE-2026-11643 | Chromium: CVE-2026-11643 Use after free in Proxy | N/A | | Edge - Chromium | |
| CVE-2026-11644 | Chromium: CVE-2026-11644 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-11645 | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11646 | Chromium: CVE-2026-11646 Use after free in ViewTransitions | N/A | | Edge - Chromium | |
| CVE-2026-11647 | Chromium: CVE-2026-11647 Use after free in Printing | N/A | | Edge - Chromium | |
| CVE-2026-11648 | Chromium: CVE-2026-11648 Use after free in FullScreen | N/A | | Edge - Chromium | |
| CVE-2026-11649 | Chromium: CVE-2026-11649 Use after free in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11650 | Chromium: CVE-2026-11650 Use after free in V8 | N/A | | Edge - Chromium | |
| CVE-2026-11651 | Chromium: CVE-2026-11651 Use after free in Network | N/A | | Edge - Chromium | |
| CVE-2026-11652 | Chromium: CVE-2026-11652 Use after free in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11653 | Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11654 | Chromium: CVE-2026-11654 Use after free in CameraCapture | N/A | | Edge - Chromium | |
| CVE-2026-11655 | Chromium: CVE-2026-11655 Integer overflow in Media | N/A | | Edge - Chromium | |
| CVE-2026-11656 | Chromium: CVE-2026-11656 Use after free in ServiceWorker | N/A | | Edge - Chromium | |
| CVE-2026-11657 | Chromium: CVE-2026-11657 Use after free in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11658 | Chromium: CVE-2026-11658 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-11659 | Chromium: CVE-2026-11659 Insufficient validation of untrusted input in UI | N/A | | Edge - Chromium | |
| CVE-2026-11660 | Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page | N/A | | Edge - Chromium | |
| CVE-2026-11661 | Chromium: CVE-2026-11661 Use after free in Views | N/A | | Edge - Chromium | |
| CVE-2026-11662 | Chromium: CVE-2026-11662 Type Confusion in Bindings | N/A | | Edge - Chromium | |
| CVE-2026-11663 | Chromium: CVE-2026-11663 Use after free in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11664 | Chromium: CVE-2026-11664 Use after free in Payments | N/A | | Edge - Chromium | |
| CVE-2026-11665 | Chromium: CVE-2026-11665 Out of bounds read in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11666 | Chromium: CVE-2026-11666 Insufficient validation of untrusted input in Input | N/A | | Edge - Chromium | |
| CVE-2026-11667 | Chromium: CVE-2026-11667 Out of bounds read in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-11668 | Chromium: CVE-2026-11668 Uninitialized Use in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11669 | Chromium: CVE-2026-11669 Integer overflow in Media | N/A | | Edge - Chromium | |
| CVE-2026-11670 | Chromium: CVE-2026-11670 Use after free in PDF | N/A | | Edge - Chromium | |
| CVE-2026-11671 | Chromium: CVE-2026-11671 Use after free in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-11672 | Chromium: CVE-2026-11672 Out of bounds write in GPU | N/A | | Edge - Chromium | |
| CVE-2026-11673 | Chromium: CVE-2026-11673 Use after free in InterestGroups | N/A | | Edge - Chromium | |
| CVE-2026-11674 | Chromium: CVE-2026-11674 Use after free in Guest View | N/A | | Edge - Chromium | |
| CVE-2026-11675 | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | N/A | | Edge - Chromium | |
| CVE-2026-11676 | Chromium: CVE-2026-11676 Insufficient validation of untrusted input in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11677 | Chromium: CVE-2026-11677 Race in Network | N/A | | Edge - Chromium | |
| CVE-2026-11678 | Chromium: CVE-2026-11678 Integer overflow in libyuv | N/A | | Edge - Chromium | |
| CVE-2026-11679 | Chromium: CVE-2026-11679 Use after free in Codecs | N/A | | Edge - Chromium | |
| CVE-2026-11680 | Chromium: CVE-2026-11680 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-11681 | Chromium: CVE-2026-11681 Use after free in Ozone | N/A | | Edge - Chromium | |
| CVE-2026-11682 | Chromium: CVE-2026-11682 Insufficient validation of untrusted input in Views | N/A | | Edge - Chromium | |
| CVE-2026-11683 | Chromium: CVE-2026-11683 Use after free in WebCodecs | N/A | | Edge - Chromium | |
| CVE-2026-11684 | Chromium: CVE-2026-11684 Insufficient policy enforcement in Network | N/A | | Edge - Chromium | |
| CVE-2026-11685 | Chromium: CVE-2026-11685 Insufficient data validation in MediaCapture | N/A | | Edge - Chromium | |
| CVE-2026-11686 | Chromium: CVE-2026-11686 Insufficient validation of untrusted input in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11687 | Chromium: CVE-2026-11687 Use after free in Dawn | N/A | | Edge - Chromium | |
| CVE-2026-11688 | Chromium: CVE-2026-11688 Object lifecycle issue in SVG | N/A | | Edge - Chromium | |
| CVE-2026-11689 | Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-11690 | Chromium: CVE-2026-11690 Out of bounds read and write in Media | N/A | | Edge - Chromium | |
| CVE-2026-11691 | Chromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page | N/A | | Edge - Chromium | |
| CVE-2026-11692 | Chromium: CVE-2026-11692 Use after free in Read Anything | N/A | | Edge - Chromium | |
| CVE-2026-11693 | Chromium: CVE-2026-11693 Inappropriate implementation in Plugins | N/A | | Edge - Chromium | |
| CVE-2026-11694 | Chromium: CVE-2026-11694 Use after free in ServiceWorker | N/A | | Edge - Chromium | |
| CVE-2026-11695 | Chromium: CVE-2026-11695 Inappropriate implementation in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-11696 | Chromium: CVE-2026-11696 Uninitialized Use in Video | N/A | | Edge - Chromium | |
| CVE-2026-11697 | Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI | N/A | | Edge - Chromium | |
| CVE-2026-11698 | Chromium: CVE-2026-11698 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11699 | Chromium: CVE-2026-11699 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-11700 | Chromium: CVE-2026-11700 Use after free in Tracing | N/A | | Edge - Chromium | |
| CVE-2026-11701 | Chromium: CVE-2026-11701 Insufficient validation of untrusted input in Guest View | N/A | | Edge - Chromium | |
| CVE-2026-11972 | tarfile opened in streaming mode mishandles EOF | N/A | | | |
| CVE-2026-11979 | Stack-Based Buffer Overflow in libxml2 | N/A | | | |
| CVE-2026-12003 | CPython >3.11 Insecure Input Validation resulting in privilege escalation | N/A | | | |
| CVE-2026-12007 | Chromium: CVE-2026-12007 Use after free Core | N/A | | Edge - Chromium | |
| CVE-2026-12008 | Chromium: CVE-2026-12008 Use after free DigitalCredentials | N/A | | Edge - Chromium | |
| CVE-2026-12009 | Chromium: CVE-2026-12009 Insufficient validation of untrusted input Accessibility | N/A | | Edge - Chromium | |
| CVE-2026-12010 | Chromium: CVE-2026-12010 Heap buffer overflow GPU | N/A | | Edge - Chromium | |
| CVE-2026-12011 | Chromium: CVE-2026-12011 Use after free WebMIDI | N/A | | Edge - Chromium | |
| CVE-2026-12012 | Chromium: CVE-2026-12012 Use after free Network | N/A | | Edge - Chromium | |
| CVE-2026-12013 | Chromium: CVE-2026-12013 Use after free Media | N/A | | Edge - Chromium | |
| CVE-2026-12014 | Chromium: CVE-2026-12014 Use after free Cast | N/A | | Edge - Chromium | |
| CVE-2026-12015 | Chromium: CVE-2026-12015 Use after free Autofill | N/A | | Edge - Chromium | |
| CVE-2026-12016 | Chromium: CVE-2026-12016 Insufficient validation of untrusted input DevTools | N/A | | Edge - Chromium | |
| CVE-2026-12017 | Chromium: CVE-2026-12017 Insufficient validation of untrusted input Extensions | N/A | | Edge - Chromium | |
| CVE-2026-12018 | Chromium: CVE-2026-12018 Inappropriate implementation Mojo | N/A | | Edge - Chromium | |
| CVE-2026-12019 | Chromium: CVE-2026-12019 Out of bounds write Codecs | N/A | | Edge - Chromium | |
| CVE-2026-12028 | Chromium: CVE-2026-12028 Use after free GPU | N/A | | Edge - Chromium | |
| CVE-2026-12030 | Chromium: CVE-2026-12031 Inappropriate implementation Views | N/A | | Edge - Chromium | |
| CVE-2026-12032 | Chromium: CVE-2026-12032 Inappropriate implementation Passwords | N/A | | Edge - Chromium | |
| CVE-2026-12437 | Chromium: CVE-2026-12437 Use after free in WebShare | N/A | | Edge - Chromium | |
| CVE-2026-12438 | Chromium: CVE-2026-12438 Inappropriate implementation in WebView | N/A | | Edge - Chromium | |
| CVE-2026-12439 | Chromium: CVE-2026-12439 Use after free in Digital Credentials | N/A | | Edge - Chromium | |
| CVE-2026-12440 | Chromium: CVE-2026-12440 Use after free in DigitalCredentials | N/A | | Edge - Chromium | |
| CVE-2026-12441 | Chromium: CVE-2026-12441 Use after free in File Input | N/A | | Edge - Chromium | |
| CVE-2026-12442 | Chromium: CVE-2026-12442 Use after free in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-12443 | Chromium: CVE-2026-12443 Use after free in Web Authentication | N/A | | Edge - Chromium | |
| CVE-2026-12444 | Chromium: CVE-2026-12444 Out of bounds read in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-12445 | Chromium: CVE-2026-12445 Use after free in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-12446 | Chromium: CVE-2026-12446 Insufficient data validation in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-12447 | Chromium: CVE-2026-12447 Heap buffer overflow in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-12448 | Chromium: CVE-2026-12448 Inappropriate implementation in WebView | N/A | | Edge - Chromium | |
| CVE-2026-12449 | Chromium: CVE-2026-12449 Use after free in Chromoting | N/A | | Edge - Chromium | |
| CVE-2026-12451 | Chromium: CVE-2026-12451 Use after free in DigitalCredentials | N/A | | Edge - Chromium | |
| CVE-2026-12452 | Chromium: CVE-2026-12452 Use after free in Downloads | N/A | | Edge - Chromium | |
| CVE-2026-12453 | Chromium: CVE-2026-12453 Insufficient validation of untrusted input in Input | N/A | | Edge - Chromium | |
| CVE-2026-12454 | Chromium: CVE-2026-12454 Race in Safe Browsing | N/A | | Edge - Chromium | |
| CVE-2026-12455 | Chromium: CVE-2026-12455 Use after free in Tab Strip | N/A | | Edge - Chromium | |
| CVE-2026-12456 | Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-12457 | Chromium: CVE-2026-12457 Insufficient data validation in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-12458 | Chromium: CVE-2026-12458 Incorrect security UI in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-12459 | Chromium: CVE-2026-12459 Inappropriate implementation in Serial | N/A | | Edge - Chromium | |
| CVE-2026-12460 | Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access | N/A | | Edge - Chromium | |
| CVE-2026-12461 | Chromium: CVE-2026-12461 Out of bounds read in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-12462 | Chromium: CVE-2026-12462 Use after free in Media | N/A | | Edge - Chromium | |
| CVE-2026-12463 | Chromium: CVE-2026-12463 Inappropriate implementation in Views | N/A | | Edge - Chromium | |
| CVE-2026-12464 | Chromium: CVE-2026-12464 Use after free in Browser | N/A | | Edge - Chromium | |
| CVE-2026-12465 | Chromium: CVE-2026-12465 Insufficient validation of untrusted input in Metrics | N/A | | Edge - Chromium | |
| CVE-2026-12466 | Chromium: CVE-2026-12466 Heap buffer overflow in WebRTC | N/A | | Edge - Chromium | |
| CVE-2026-12467 | Chromium: CVE-2026-12467 Use after free in Extensions | N/A | | Edge - Chromium | |
| CVE-2026-12468 | Chromium: CVE-2026-12468 Inappropriate implementation in Updater | N/A | | Edge - Chromium | |
| CVE-2026-12469 | Chromium: CVE-2026-12469 Uninitialized Use in GPU | N/A | | Edge - Chromium | |
| CVE-2026-13021 | Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials | N/A | | Edge - Chromium | |
| CVE-2026-13022 | Chromium: CVE-2026-13022 Inappropriate implementation in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-13023 | Chromium: CVE-2026-13023 Uninitialized Use in GPU | N/A | | Edge - Chromium | |
| CVE-2026-13024 | Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation | N/A | | Edge - Chromium | |
| CVE-2026-13025 | Chromium: CVE-2026-13025 Insufficient validation of untrusted input in DevTools | N/A | | Edge - Chromium | |
| CVE-2026-13026 | Chromium: CVE-2026-13026 Use after free in Digital Credentials | N/A | | Edge - Chromium | |
| CVE-2026-13027 | Chromium: CVE-2026-13027 Use after free in FileSystem | N/A | | Edge - Chromium | |
| CVE-2026-13029 | Chromium: CVE-2026-13029 Use after free in Web Authentication | N/A | | Edge - Chromium | |
| CVE-2026-13031 | Chromium: CVE-2026-13031 Use after free in Blink | N/A | | Edge - Chromium | |
| CVE-2026-13033 | Chromium: CVE-2026-13033 Out of bounds read in Blink>InterestGroups | N/A | | Edge - Chromium | |
| CVE-2026-13034 | Chromium: CVE-2026-13034 Inappropriate implementation in Passwords | N/A | | Edge - Chromium | |
| CVE-2026-13035 | Chromium: CVE-2026-13035 Use after free in Bluetooth | N/A | | Edge - Chromium | |
| CVE-2026-13036 | Chromium: CVE-2026-13036 Use after free in Blink | N/A | | Edge - Chromium | |
| CVE-2026-13038 | Chromium: CVE-2026-13038 Use after free in Autofill | N/A | | Edge - Chromium | |
| CVE-2026-3276 | Potential DoS via quadratic complexity in unicodedata.normalize() | N/A | | | |
| CVE-2026-41991 | Predictable Temporary File in GNU gzip | N/A | | | |
| CVE-2026-41992 | Global Buffer Overflow in GNU gzip | N/A | | | |
| CVE-2026-4360 | Tarfile.extract() doesn't fully respect filter parameter | N/A | | | |
| CVE-2026-43966 | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 | N/A | | | |
| CVE-2026-43973 | gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion | N/A | | | |
| CVE-2026-44705 | tmp: Path Traversal via unsanitized prefix/postfix enables directory escape | N/A | | | |
| CVE-2026-46643 | Snappy: Binary path is never shell-escaped due to an inverted is_executable check | N/A | | | |
| CVE-2026-46683 | Snappy: SSRF and local file read via the xsl-style-sheet option | N/A | | | |
| CVE-2026-47162 | Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name | N/A | | | |
| CVE-2026-47167 | Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex | N/A | | | |
| CVE-2026-47240 | Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument | N/A | | | |
| CVE-2026-47241 | Net::IMAP: Denial of Service via incomplete raw argument validation | N/A | | | |
| CVE-2026-47242 | Net::IMAP: Command Injection via ID command argument | N/A | | | |
| CVE-2026-48854 | Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc | N/A | | | |
| CVE-2026-49762 | Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service | N/A | | | |
| CVE-2026-49851 | Mistune: Potential DoS via quadratic-time parsing in parse_link_text | N/A | | | |
| CVE-2026-52858 | Vim: Arbitrary Code Execution via Python Omni-Completion | N/A | | | |
| CVE-2026-52859 | Vim: Out-of-bounds Read in Terminal Screen Snapshot | N/A | | | |
| CVE-2026-52860 | Vim: Arbitrary Code Execution via Python Omni-Completion | N/A | | | |
| CVE-2026-7774 | tarfile.data_filter path traversal bypass allows writing outside the extraction directory | N/A | | | |
| CVE-2026-8643 | pip can extract console_scripts and gui_scripts outside installation directory | N/A | | | |
| CVE-2026-9669 | bz2.BZ2Decompressor reuse after error can cause a stack buffer overflow | N/A | | | |