Browse CVEs

HIGH 8.8 CVE-2026-7940 Use after free in V8 in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arb… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7928 Use after free in WebRTC in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.5 CVE-2026-7929 Use after free in MediaRecording in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gest… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7918 Use after free in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perfo… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7919 Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perf… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7920 Use after free in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perf… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7921 Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chr… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7922 Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a craft… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-7925 Use after free in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7926 Use after free in PresentationAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a … Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7907 Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 CRITICAL 9.6 CVE-2026-7908 Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted … Chrome 148.0.7778.96+ Fix from $2,3002026-05-06 CRITICAL 9.6 CVE-2026-7910 Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site iso… Chrome 148.0.7778.96+ Fix from $2,3002026-05-06 HIGH 8.3 CVE-2026-7911 Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to poten… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.3 CVE-2026-7917 Use after free in Fullscreen in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7898 Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious netwo… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7901 Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a cra… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-7906 Use after free in SVG in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 7.5 CVE-2026-7897 Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestu… Chrome 148.0.7778.96+ Fix from $1,9502026-05-06 HIGH 8.8 CVE-2026-43232 In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When t… Linux Kernel 4.10 / 4.15+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43236 In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release The atmel_… Linux Kernel 5.10.252 / 5.15.202+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43237 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Time… Linux Kernel 6.18.16 / 6.19.6+ Fix from $1,9502026-05-06 HIGH 7.5 CVE-2026-43203 In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal When the PC… Linux Kernel 5.10.252 / 5.15.202+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43138 In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs This is a special device that's … Linux Kernel 6.12.75 / 6.18.16+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43111 In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report_event roccat_report_event() it… Linux Kernel 6.6.136 / 6.12.83+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43084 In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: make hash table per queue Sharing a global hash tab… Linux Kernel 6.12.83 / 6.18.24+ Fix from $1,9502026-05-06 HIGH 7.8 CVE-2026-43076 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data i_size during inode read When reading an inode from… Linux Kernel 6.6.136 / 6.12.83+ Fix from $1,9502026-05-06 HIGH 8.1 CVE-2026-23631 Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-repl… Redis 8.6.3+ Fix from $1,9502026-05-05 HIGH 8.8 CVE-2026-23479 Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `pro… Redis 8.6.3+ Fix from $1,9502026-05-05 HIGH 7.8 CVE-2026-43059 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Commi… Linux Kernel 6.7 / 6.12.78+ Fix from $1,9502026-05-05