Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2026

1,504 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 5 of 16

  • CVE-2026-121603
    34Monitor

    Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler

    HighCVSS 8.5No exploitEPSS 0%

    solanum-ircd · solanum4 days ago

  • CVE-2026-28327
    32Monitor

    SolarWinds Dameware DLL Hijacking Vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    solarwinds · dameware4 days ago

  • CVE-2026-28335
    33Monitor

    SolarWinds Dameware Buffer Overflow Vulnerability

    HighCVSS 8.4No exploitEPSS 1%

    solarwinds · dameware4 days ago

  • CVE-2026-28336
    39Monitor

    SolarWinds Dameware Command Injection Vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    solarwinds · dameware4 days ago

  • CVE-2026-38595
    39Monitor

    An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted file

    CriticalCVSS 9.8No exploitEPSS 0%

    4 days ago

  • CVE-2026-38600
    39Monitor

    A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via up

    CriticalCVSS 9.8No exploitEPSS 0%

    4 days ago

  • GHSA-p3jp-9v83-76w9
    32Monitor

    Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

    HighCVSS 8.1No exploit

    4 days ago

  • CVE-2026-121624
    30Monitor

    Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validation

    HighCVSS 7.6No exploitEPSS 0%

    nanosystems · supremo4 days ago

  • CVE-2026-44265
    29Monitor

    Elo: Code injection in Elo backends via unvalidated emission of programmatic AST fields

    HighCVSS 7.4No exploitEPSS 0%

    enspirit · elo4 days ago

  • CVE-2026-44266
    39Monitor

    Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels

    CriticalCVSS 9.8No exploitEPSS 0%

    enspirit · elo4 days ago

  • CVE-2026-44267
    39Monitor

    Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    enspirit · elo4 days ago

  • CVE-2026-63418
    28Monitor

    Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary

    HighCVSS 7.0No exploitEPSS 0%

    monitoring-plugins · monitoring-plugins4 days ago

  • CVE-2026-112917
    36Monitor

    Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall

    CriticalCVSS 9.2No exploitEPSS 0%

    docker · docker desktop4 days ago

  • CVE-2026-119922
    34Monitor

    Babelfish for PostgreSQL Privilege Escalation

    HighCVSS 8.7No exploitEPSS 0%

    aws · babelfish-for-postgresql4 days ago

  • CVE-2026-120678
    34Monitor

    MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)

    HighCVSS 8.7No exploitEPSS 0%

    mongodb · c driver4 days ago

  • CVE-2026-120955
    34Monitor

    MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata

    HighCVSS 8.7No exploitEPSS 0%

    mongodb · c driver4 days ago

  • CVE-2026-120956
    28Monitor

    remote abort and memory disclosure from a malformed cursor.ns

    HighCVSS 7.1No exploitEPSS 0%

    mongodb · c driver4 days ago

  • CVE-2026-121382
    30Monitor

    Netcore NBR100V2 auto_ac msg_aes_dec integer overflow

    HighCVSS 7.7No exploitEPSS 0%

    netcore · nbr100v24 days ago

  • CVE-2026-39379
    28Monitor

    GeoNetwork: Reflected XSS through client-side template injection

    HighCVSS 7.1No exploitEPSS 0%

    geonetwork · core-geonetwork4 days ago

  • CVE-2026-46487
    30Monitor

    GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field

    HighCVSS 7.5No exploitEPSS 0%

    geonetwork · core-geonetwork4 days ago

  • CVE-2026-57154
    32Monitor

    OPNsense: Configuration line injection via multiple GUI text fields

    HighCVSS 8.1No exploitEPSS 0%

    opnsense · core4 days ago

  • CVE-2026-63197
    29Monitor

    traQ: XSS in the User Uploaded File Retrieval API

    HighCVSS 7.3No exploitEPSS 0%

    traptitech · traq4 days ago

  • CVE-2026-63198
    29Monitor

    traQ: Privilege escalation by OAuth prompt=none request

    HighCVSS 7.3No exploitEPSS 0%

    traptitech · traq4 days ago

  • CVE-2026-63417
    32Monitor

    Logging Redactor: PII data in str/repr of non primitive objects was not being redacted

    HighCVSS 8.2No exploitEPSS 0%

    armurox · loggingredactor4 days ago

  • CVE-2026-82976
    28Monitor

    Image-customization-controller: unauthenticated plaintext image server with directory listing exposes ignition images containing cluster pull secret

    HighCVSS 7.1No exploitEPSS 0%

    red hat · red hat openshift container platform 44 days ago

  • CVE-2026-105821
    33Monitor

    Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy

    HighCVSS 8.3No exploitEPSS 0%

    tp-link systems inc. · tapo cloud service4 days ago

  • CVE-2026-105822
    33Monitor

    Server-Side Request Forgery in Tapo Cloud MQTT Proxy

    HighCVSS 8.3No exploitEPSS 0%

    tp-link systems inc. · tapo cloud service4 days ago

  • CVE-2026-45146
    28Monitor

    Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificated

    HighCVSS 7.2No exploitEPSS 0%

    chamilo · chamilo-lms4 days ago

  • CVE-2026-54161
    32Monitor

    upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution

    HighCVSS 8.1Proof of conceptEPSS 0%

    networkupstools · nut4 days ago

  • CVE-2026-63395
    35Monitor

    isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

    HighCVSS 8.8No exploitEPSS 0%

    isomorphic-git · isomorphic-git4 days ago

  • CVE-2026-63469
    37Monitor

    fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict

    CriticalCVSS 9.3No exploitEPSS 0%

    koxudaxi · fastapi-code-generator4 days ago

  • CVE-2026-63470
    37Monitor

    fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring

    CriticalCVSS 9.3No exploitEPSS 0%

    koxudaxi · fastapi-code-generator4 days ago

  • CVE-2026-63471
    37Monitor

    fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator

    CriticalCVSS 9.3No exploitEPSS 0%

    koxudaxi · fastapi-code-generator4 days ago

  • CVE-2026-63482
    30Monitor

    Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data

    HighCVSS 7.5No exploitEPSS 0%

    yeti-platform · yeti4 days ago

  • CVE-2026-63489
    30Monitor

    Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters

    HighCVSS 7.6No exploitEPSS 0%

    yeti-platform · yeti4 days ago

  • CVE-2026-63500
    28Monitor

    Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export

    HighCVSS 7.1No exploitEPSS 0%

    yeti-platform · yeti4 days ago

  • CVE-2026-63501
    30Monitor

    ag-psd: Uncontrolled Memory Allocation in PSD Layer Decoding (totalMemoryLimit bypass)

    HighCVSS 7.5No exploitEPSS 0%

    agamnentzar · ag-psd4 days ago

  • CVE-2026-63502
    33Monitor

    Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write

    HighCVSS 8.3No exploitEPSS 0%

    yeti-platform · yeti4 days ago

  • CVE-2026-88066
    30Monitor

    Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable

    HighCVSS 7.5No exploitEPSS 0%

    anthropics · claude-code4 days ago

  • CVE-2026-88968
    30Monitor

    Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace

    HighCVSS 7.7No exploitEPSS 0%

    anthropics · claude-code4 days ago

  • CVE-2026-93325
    29Monitor

    Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

    HighCVSS 7.3No exploitEPSS 0%

    docker · docker buildx4 days ago

  • CVE-2026-95722
    35Monitor

    Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client

    HighCVSS 8.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95723
    33Monitor

    Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

    HighCVSS 8.4No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95724
    32Monitor

    Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

    HighCVSS 8.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95725
    31Monitor

    Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

    HighCVSS 7.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95726
    30Monitor

    Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95727
    28Monitor

    Authenticated Command Injection Vulnerability in HPE Networking VIA

    HighCVSS 7.2No exploitEPSS 1%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95728
    28Monitor

    Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux

    HighCVSS 7.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · virtual intranet access (via)4 days ago

  • CVE-2026-95731
    39Monitor

    Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

    CriticalCVSS 9.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95732
    38Monitor

    Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

    CriticalCVSS 9.6No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95733
    38Monitor

    Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

    CriticalCVSS 9.6No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95734
    35Monitor

    Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

    HighCVSS 8.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95735
    34Monitor

    Improper Certificate Validation in HPE Networking Fabric Composer

    HighCVSS 8.7No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95736
    33Monitor

    Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer

    HighCVSS 8.3No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95737
    32Monitor

    Local Privilege Escalation in HPE Networking Fabric Composer

    HighCVSS 8.2No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95738
    32Monitor

    Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer

    HighCVSS 8.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95739
    32Monitor

    Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HPE Networking Fabric Composer

    HighCVSS 8.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95740
    32Monitor

    Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer

    HighCVSS 8.0No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95741
    32Monitor

    Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer

    HighCVSS 8.0No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95742
    31Monitor

    Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer

    HighCVSS 7.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95743
    31Monitor

    Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer

    HighCVSS 7.8No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95744
    30Monitor

    Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer

    HighCVSS 7.7No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95745
    30Monitor

    Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95746
    30Monitor

    Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95747
    30Monitor

    Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95748
    30Monitor

    Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95749
    30Monitor

    Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95750
    30Monitor

    Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer

    HighCVSS 7.5No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95751
    29Monitor

    Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer

    HighCVSS 7.4No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95752
    28Monitor

    Local Privilege Escalation in HPE Networking Fabric Composer

    HighCVSS 7.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-95753
    28Monitor

    Privilege Escalation in HPE Networking Fabric Composer API

    HighCVSS 7.1No exploitEPSS 0%

    hewlett packard enterprise (hpe) · fabric composer4 days ago

  • CVE-2026-111751
    32Monitor

    Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)

    HighCVSS 8.2No exploitEPSS 0%

    angular · angular4 days ago

  • CVE-2026-111752
    32Monitor

    Angular: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

    HighCVSS 8.2No exploitEPSS 0%

    angular · angular4 days ago

  • CVE-2026-115731
    37Monitor

    Report Deserialization Code Execution

    CriticalCVSS 9.4No exploitEPSS 0%

    perforce · puppet enterprise4 days ago

  • CVE-2026-115732
    36Monitor

    Certificate Name Authorization Bypass

    CriticalCVSS 9.0No exploitEPSS 0%

    perforce · puppet enterprise4 days ago

  • CVE-2026-115878
    31Monitor

    Stanza: RCE via pickle deserialization in the lemmatizer

    HighCVSS 7.8No exploitEPSS 0%

    stanfordnlp · stanza4 days ago

  • CVE-2026-119636
    35Monitor

    Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.2

    HighCVSS 8.8No exploitEPSS 0%

    devolutions · server4 days ago

  • CVE-2026-120715
    32Monitor

    Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authentica

    HighCVSS 8.1No exploitEPSS 0%

    devolutions · server4 days ago

  • CVE-2026-120733
    30Monitor

    Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with re

    HighCVSS 7.5No exploitEPSS 0%

    devolutions · server4 days ago

  • CVE-2026-121030
    38Monitor

    Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to poten

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121034
    38Monitor

    Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to exe

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121035
    38Monitor

    Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121036
    35Monitor

    Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121037
    38Monitor

    Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrar

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121044
    35Monitor

    Use after free in Layout in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121047
    35Monitor

    Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121048
    35Monitor

    Race condition in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121050
    35Monitor

    Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a craft

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121052
    35Monitor

    Use after free in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121054
    35Monitor

    Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121057
    35Monitor

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121060
    38Monitor

    Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121061
    35Monitor

    Use after free in Modularization in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sand

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121064
    31Monitor

    Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary c

    HighCVSS 7.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121065
    35Monitor

    Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypas

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121068
    35Monitor

    Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121069
    35Monitor

    Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121070
    35Monitor

    Use after free in WTF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a c

    HighCVSS 8.8No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121071
    38Monitor

    Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to pot

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago

  • CVE-2026-121073
    38Monitor

    Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside th

    CriticalCVSS 9.6No exploitEPSS 0%

    google · chrome4 days ago