CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-106222 MEDIUM · 5.9 Onjuiste autorisatie in Sync in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om gevoelige informatie te verkrijgen via vervaardigd netwerkverkeer. (Ernst van chroombeveiliging:… Google
- CVE-2026-106221 HIGH · 8.3 Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy… Google
- CVE-2026-106220 HIGH · 8.8 Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security… Google
- CVE-2026-106217 MEDIUM · 4.3 Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data… Google
- CVE-2026-106216 MEDIUM · 5.4 Cross-site aanvraagvervalsing in ReadingList in Google Chrome op Android vóór 155.0.8059.39 stond een externe aanvaller die gebruik maakte van social engineering toe om het oorsprongsbeleid… Google
- CVE-2026-106215 MEDIUM · 4.7 Ongeïnitialiseerde bron in HOEK in Google Chrome op Windows vóór 155.0.8059.39 stond een externe aanvaller toe om geheugen buiten de sandbox te lezen via een… Google Microsoft
- CVE-2026-106214 MEDIUM · 5.3 Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic.… Google Microsoft
- CVE-2026-106213 MEDIUM · 4.3 Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium… Google
- CVE-2026-106212 HIGH · 8.8 Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML… Google
- CVE-2026-106211 CRITICAL · 9.6 Gebruik na gratis in TabStrip in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om social engineering te gebruiken om mogelijk willekeurige code buiten… Google
- CVE-2026-106210 LOW · 3.1 Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security… Google
- CVE-2026-106209 MEDIUM · 5.4 Door een verkeerde voorstelling van de gebruikersinterface in Mobiel in Google Chrome op iOS vóór 155.0.8059.39 kon een externe aanvaller met behulp van social engineering… Google Apple
- CVE-2026-106208 MEDIUM · 6.1 Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome… Google
- CVE-2026-106207 HIGH · 8.8 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… Google
- CVE-2026-106206 MEDIUM · 5.9 Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network… Google Apple
- CVE-2026-106205 HIGH · 8.1 Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass… Google
- CVE-2026-106204 HIGH · 8.8 Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-106203 HIGH · 8.8 Onvolledige opschoning in Automatisch aanvullen in Google Chrome op iOS vóór 155.0.8059.39 stond een externe aanvaller toe om via social engineering gevoelige informatie te verkrijgen… Google Apple
- CVE-2026-106202 MEDIUM · 4.7 Ongeïnitialiseerde bron in HOEK in Google Chrome op Windows vóór 155.0.8059.39 stond een externe aanvaller toe om geheugen buiten de sandbox te lezen via een… Google Microsoft
- CVE-2026-106201 HIGH · 8.8 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML… Google
- CVE-2026-106200 HIGH · 8.8 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… Google
- CVE-2026-106199 HIGH · 8.2 Onjuiste autorisatie in Actor in Google Chrome op Android vóór 155.0.8059.39 stond een externe aanvaller toe die het rendererproces had gecompromitteerd om mogelijk site-isolatie te… Google
- CVE-2026-106198 HIGH · 8.2 Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy… Google
- CVE-2026-106197 CRITICAL · 9.6 Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… Google
- CVE-2026-106196 HIGH · 7.6 Door de ontbrekende autorisatie in Navigatie in Google Chrome op iOS vóór 155.0.8059.39 kon een externe aanvaller het beleid voor weboorsprong omzeilen naar een bevoorrechte… Google Apple
- CVE-2026-106195 CRITICAL · 9.1 Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network… Google Apple
- CVE-2026-106194 HIGH · 8.3 Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to… Google
- CVE-2026-106193 HIGH · 8.8 Gebruik na gratis in Parser in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via… Google
- CVE-2026-106192 MEDIUM · 4.6 Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium… Google Apple
- CVE-2026-106191 HIGH · 8.3 Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code… Google
- CVE-2026-106190 HIGH · 8.8 Gebruik na gratis in Media in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om willekeurige code in de sandbox uit te voeren via… Google
- CVE-2026-106189 HIGH · 7.3 Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy… Google Apple
- CVE-2026-106188 HIGH · 7.1 Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged… Google
- CVE-2026-106187 MEDIUM · 4.2 Door het ontbreken van autorisatie in machtigingen in Google Chrome vóór 155.0.8059.39 kon een externe aanvaller die het rendererproces had gecompromitteerd, UI-elementen vervalsen via een… Google
- CVE-2026-106186 HIGH · 8.6 Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside… Google Microsoft
- CVE-2026-106185 MEDIUM · 6.5 Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access… Google
- CVE-2026-106184 MEDIUM · 4.3 Ongeïnitialiseerde bron in Media in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om cross-origin-gegevens te verkrijgen via een vervaardigde HTML-pagina. (Ernst van chroombeveiliging:… Google
- CVE-2026-106183 MEDIUM · 5.9 Door ontbrekende autorisatie in Chromoting in Google Chrome op Windows vóór 155.0.8059.39 kon een externe aanvaller gevoelige informatie verkrijgen via vervaardigd netwerkverkeer. (Ernst van chroombeveiliging:… Google Microsoft
- CVE-2026-106182 MEDIUM · 5.4 UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security… Google
- CVE-2026-106181 MEDIUM · 5.3 Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information… Google
- CVE-2026-106180 LOW · 3.1 Waarneembare discrepantie in animatie in Google Chrome vóór 155.0.8059.39 stond een externe aanvaller toe om mogelijk cross-origin-gegevens te verkrijgen via een vervaardigde HTML-pagina. (Ernst van… Google
- CVE-2026-106179 MEDIUM · 5.4 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security… Google
- CVE-2026-106123 MEDIUM · 5.5 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw… Vmware
- CVE-2026-106122 HIGH · 7.5 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8… Vmware
- CVE-2026-106121 MEDIUM · 4.9 The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate… Vmware
- CVE-2026-106120 NONE LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited array indices…
- CVE-2026-106119 NONE LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured session identifier…
- CVE-2026-106118 HIGH · 7.5 ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and…
- CVE-2026-106033 MEDIUM · 5.4 A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application…
- CVE-2026-105488 HIGH · 7.1 Ontbrekende autorisatie in de globale kluis in Devolutions Server 2026.3.7.0 en eerder staat een geverifieerde gebruiker met alleen de globale kluisweergave toestemming toe om globale…