Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

33,533 of 90,429· Page 199/671
6.1
CVE-2026-19797

The User Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_group_section'

6.6
CVE-2026-11363

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to PHP Object Injectio

6.5
CVE-2026-87073

Tanium addressed an improper access controls vulnerability in Comply.

5.4
CVE-2026-87048

Tanium addressed an improper access controls vulnerability in Comply.

6.3
CVE-2026-87047

Tanium addressed an improper access controls vulnerability in Comply.

4.3
CVE-2026-87046

Tanium addressed an improper access controls vulnerability in Comply.

5.4
CVE-2026-87037

Tanium addressed an improper access controls vulnerability in Comply.

4.3
CVE-2026-87035

Tanium addressed an information disclosure vulnerability in Comply.

5.4
CVE-2026-87033

Tanium addressed an improper access controls vulnerability in Comply.

4.3
CVE-2026-87032

Tanium addressed an information disclosure vulnerability in Tanium Server.

5.4
CVE-2026-87025

Tanium addressed an improper access controls vulnerability in Comply.

4.3
CVE-2026-87019

Tanium addressed an improper access controls vulnerability in Comply.

4.3
CVE-2026-14892

Tanium addressed an improper access controls vulnerability in Tanium Server.

6.6
CVE-2026-14505

Tanium addressed a path traversal vulnerability in Tanium Data Service.

6.4
CVE-2026-13709

The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'iq

5.3
CVE-2026-12956

The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu

6.5
CVE-2026-87724

Tor before 0.4.9.12 interprets the CC_RESPONSE extension even when CC_REQUEST was not sent, which allows remote attacker

5.5
CVE-2026-87083

A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from

4.3
CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engin

5.4
CVE-2026-87656

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy

5.4
CVE-2026-87655

Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineerin

5.4
CVE-2026-87653

UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to sp

4.3
CVE-2026-87651

Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origi

5.4
CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social en

5.4
CVE-2026-87645

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass sy

4.3
CVE-2026-87642

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin d

4.2
CVE-2026-87641

Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access rest

6.1
CVE-2026-87640

Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had co

5.4
CVE-2026-87635

UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements

4.3
CVE-2026-87632

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web ori

6.5
CVE-2026-87631

Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensi

4.3
CVE-2026-87630

Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the s

6.5
CVE-2026-87629

Incorrect authorization in Sources in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social e

6.5
CVE-2026-87627

Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leve

6.5
CVE-2026-87626

Incorrect authorization in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attack

4.2
CVE-2026-87624

UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who ha

6.5
CVE-2026-87623

Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engine

4.3
CVE-2026-87622

Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin po

6.5
CVE-2026-87620

Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive info

4.3
CVE-2026-87619

Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origi

5.4
CVE-2026-87615

Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineeri

6.5
CVE-2026-87610

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system ac

5.3
CVE-2026-87605

Missing authorization in Contacts in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised

6.5
CVE-2026-87603

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system a

4.7
CVE-2026-87602

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potential

6.5
CVE-2026-87600

Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacke

5.4
CVE-2026-87599

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI

4.3
CVE-2026-87598

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web

4.8
CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to sp

4.3
CVE-2026-87596

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →