Browse CVEs

MEDIUM 6.5 CVE-2026-46357 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenti… Mitigation only Fix from $1,6002026-06-05 HIGH 7.5 CVE-2026-45291 Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.0.0.CR3-20260418.124334-32` i… Mitigation only Fix from $1,9502026-06-05 HIGH 7.5 CVE-2026-36501 An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a crafted input. Mitigation only Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-8714 A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid inp… Tapo C520ws Firmware 1.2.6+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2025-5089 In a CVX cluster, an EOS switch connected to a CVX server is not resilient to certain malformed messages received from the connected CVX server. Simi… Mitigation only Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2025-5090 CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An at… Mitigation only Fix from $1,6002026-06-05 HIGH 7.7 CVE-2026-11297 Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navig… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.5 CVE-2026-11287 Insufficient policy enforcement in Navigation in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the re… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.5 CVE-2026-11283 Insufficient validation of untrusted input in Shortcuts in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to bypass navigation… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 HIGH 8.8 CVE-2026-11272 Insufficient validation of untrusted input in Reading List in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a u… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 6.1 CVE-2026-11273 Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engag… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 HIGH 7.5 CVE-2026-11255 Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromise… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 7.5 CVE-2026-11239 Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 8.0 CVE-2026-11241 Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perfor… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 HIGH 7.5 CVE-2026-11242 Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rende… Chrome 149.0.7827.53+ Fix from $1,9502026-06-05 MEDIUM 5.3 CVE-2026-11246 Insufficient validation of untrusted input in IndexedDB in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the ren… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 HIGH 8.8 CVE-2026-11235 Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer pro… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 8.3 CVE-2026-11237 Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rendere… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 MEDIUM 6.5 CVE-2026-11223 Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the rende… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.8 CVE-2026-11218 Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convinced a user… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.5 CVE-2026-11220 Insufficient validation of untrusted input in Navigation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the re… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 CRITICAL 9.6 CVE-2026-11213 Insufficient validation of untrusted input in Reading Mode in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the … Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 MEDIUM 5.9 CVE-2026-11199 Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak cross-ori… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 HIGH 8.8 CVE-2026-11202 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sand… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 MEDIUM 6.1 CVE-2026-11205 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a… Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 CRITICAL 9.6 CVE-2026-11207 Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a san… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 CRITICAL 9.6 CVE-2026-11198 Insufficient validation of untrusted input in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandb… Chrome 149.0.7827.53+ Fix from $2,3002026-06-04 MEDIUM 6.5 CVE-2026-11189 Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 HIGH 8.6 CVE-2026-11158 Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perfor… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04 HIGH 7.5 CVE-2026-11149 Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the re… Chrome 149.0.7827.53+ Fix from $1,9502026-06-04