| CVE-2026-120200 | MEDIUM | 5.4 | Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to h… | 2026-10-31 |
| CVE-2026-120201 | CRITICAL | 9.8 | Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attack… | 2026-10-31 |
| CVE-2026-120202 | MEDIUM | 6.5 | Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to… | 2026-10-31 |
| CVE-2026-120203 | HIGH | 8.8 | ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authentica… | 2026-10-31 |
| CVE-2026-120204 | MEDIUM | 5.6 | DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that … | 2026-10-31 |
| CVE-2026-120205 | HIGH | 8.0 | Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() tha… | 2026-10-31 |
| CVE-2026-120206 | MEDIUM | 5.9 | Thelia before 3.2.0 contains a cross-site request forgery vulnerability in the back office that allows attacke… | 2026-10-31 |
| CVE-2026-120207 | HIGH | 7.1 | Thelia Page Module before 2.0.4 contains a cross-site request forgery vulnerability that allows remote attacke… | 2026-10-31 |
| CVE-2026-120208 | HIGH | 7.5 | libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in unc_decoder_mixed_interlea… | 2026-10-31 |
| CVE-2026-120209 | CRITICAL | 9.8 | AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Sha… | 2026-10-31 |
| CVE-2026-120210 | MEDIUM | 4.3 | FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to o… | 2026-10-31 |
| CVE-2026-118147 | HIGH | 7.4 | Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a ne… | 2026-10-31 |
| CVE-2026-118636 | CRITICAL | 9.8 | **UNSUPPORTED WHEN ASSIGNED**
JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.… | 2026-10-31 |
| CVE-2026-120135 | NA | N/A | Uncontrolled Recursion vulnerability in Apache Thrift Java bindings.
This issue affects Apache Thrift: befo… | 2026-10-31 |
| CVE-2026-120185 | MEDIUM | 4.7 | A security flaw has been discovered in ken678 YznCMS up to 2.2.0. The affected element is the function Backend… | 2026-10-31 |
| CVE-2026-110133 | MEDIUM | 5.8 | A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, … | 2026-10-30 |
| CVE-2026-112602 | NA | N/A | An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app… | 2026-10-30 |
| CVE-2026-112605 | NA | N/A | This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be … | 2026-10-30 |
| CVE-2026-118947 | MEDIUM | 4.3 | A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides … | 2026-10-30 |
| CVE-2026-118959 | MEDIUM | 5.4 | A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization… | 2026-10-30 |
| CVE-2026-119260 | NA | N/A | Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrar… | 2026-10-30 |
| CVE-2026-119261 | NA | N/A | Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potenti… | 2026-10-30 |
| CVE-2026-119262 | NA | N/A | Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potential… | 2026-10-30 |
| CVE-2026-119263 | NA | N/A | Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to po… | 2026-10-30 |
| CVE-2026-119264 | NA | N/A | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially exe… | 2026-10-30 |
| CVE-2026-119265 | NA | N/A | Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially ex… | 2026-10-30 |
| CVE-2026-119266 | NA | N/A | Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execu… | 2026-10-30 |
| CVE-2026-119267 | NA | N/A | Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially exec… | 2026-10-30 |
| CVE-2026-119268 | NA | N/A | Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially e… | 2026-10-30 |
| CVE-2026-119269 | NA | N/A | Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary… | 2026-10-30 |
| CVE-2026-119270 | NA | N/A | Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to… | 2026-10-30 |
| CVE-2026-119271 | NA | N/A | Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary … | 2026-10-30 |
| CVE-2026-119272 | NA | N/A | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read mem… | 2026-10-30 |
| CVE-2026-76024 | NA | N/A | Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentia… | 2026-10-30 |
| CVE-2026-76025 | NA | N/A | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbi… | 2026-10-30 |
| CVE-2026-76026 | NA | N/A | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arb… | 2026-10-30 |
| CVE-2026-76027 | NA | N/A | Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read me… | 2026-10-30 |
| CVE-2026-76028 | NA | N/A | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbi… | 2026-10-30 |
| CVE-2026-76029 | NA | N/A | Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially … | 2026-10-30 |
| CVE-2026-76030 | NA | N/A | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potential… | 2026-10-30 |
| CVE-2026-76031 | NA | N/A | Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary… | 2026-10-30 |
| CVE-2026-112922 | LOW | 3.3 | A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to proc… | 2026-10-30 |
| CVE-2026-118475 | LOW | 3.6 | A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profil… | 2026-10-30 |
| CVE-2026-15466 | NA | N/A | Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condit… | 2026-10-30 |
| CVE-2026-18629 | NA | N/A | A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory a… | 2026-10-30 |
| CVE-2026-19199 | NA | N/A | Software installed and run as a non-privileged user may conduct improper system calls to allocate physical mem… | 2026-10-30 |
| CVE-2026-65584 | NA | N/A | Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack over… | 2026-10-30 |
| CVE-2026-65586 | NA | N/A | Software installed and run as a non-privileged user may conduct improper GPU system calls to free memory in st… | 2026-10-30 |
| CVE-2026-65587 | NA | N/A | A web page that contains unusual WebGPU content loaded into the GPU GLES render process can trigger an OOB wri… | 2026-10-30 |
| CVE-2026-74912 | NA | N/A | On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics b… | 2026-10-30 |