CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 19:13 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100121 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100120 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-95634 | CT C2PA Tool Adobe | 8.6 | Oct 13 | CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) |
| CVE-2026-100115 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Access Control (CWE-284) |
| CVE-2026-100137 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-100117 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100135 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100118 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Certificate Validation (CWE-295) |
| CVE-2026-100113 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100124 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-106627 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-95632 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) |
| CVE-2026-100125 | CT C2PA Tool Adobe | 5.9 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-100138 | CT C2PA Tool Adobe | 7.5 | Oct 13 | CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) |
| CVE-2026-48377 | CT C2PA Tool Adobe | 5.3 | Oct 13 | CAI Content Credentials | Improper Input Validation (CWE-20) |
| CVE-2026-103820 | CT C2PA Tool Adobe | 5.5 | Oct 13 | CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) |
| CVE-2026-97381 | LE LegacyUpdate LegacyUpdate | 9.9 | Oct 13 | Legacy Update ActiveX control accepts unauthorized hosting origins |
| CVE-2026-110142 | CH Chrome Google | 9.6 | Oct 13 | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-110171 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110167 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110155 | CH Chrome Google | 8.8 | Oct 13 | Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110154 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110147 | CH Chrome Google | 8.8 | Oct 13 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110157 | CH Chrome Google | 8.8 | Oct 13 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110138 | CH Chrome Google | 8.3 | Oct 13 | Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the… |
| CVE-2026-110141 | CH Chrome Google | 3.1 | Oct 13 | Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page |
| CVE-2026-110163 | CH Chrome Google | 8.8 | Oct 13 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110164 | CH Chrome Google | 8.8 | Oct 13 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110172 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110139 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110168 | CH Chrome Google | 8.8 | Oct 13 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110169 | CH Chrome Google | 8.8 | Oct 13 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110166 | CH Chrome Google | 8.8 | Oct 13 | Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110153 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110144 | CH Chrome Google | 8.6 | Oct 13 | Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a… |
| CVE-2026-110159 | CH Chrome Google | 9.6 | Oct 13 | Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program |
| CVE-2026-110145 | CH Chrome Google | 8.3 | Oct 13 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the… |
| CVE-2026-110158 | CH Chrome Google | 8.3 | Oct 13 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the… |
| CVE-2026-110140 | CH Chrome Google | 8.8 | Oct 13 | Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110137 | CH Chrome Google | 8.8 | Oct 13 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110156 | CH Chrome Google | 8.3 | Oct 13 | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute… |
| CVE-2026-110150 | CH Chrome Google | 5.5 | Oct 13 | Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program |
| CVE-2026-110146 | CH Chrome Google | 6.5 | Oct 13 | Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML… |
| CVE-2026-110143 | CH Chrome Google | 4.3 | Oct 13 | Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted… |
| CVE-2026-110160 | CH Chrome Google | 4.2 | Oct 13 | Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to… |
| CVE-2026-110170 | CH Chrome Google | 4.3 | Oct 13 | Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page |
| CVE-2026-110162 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110151 | CH Chrome Google | 8.8 | Oct 13 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110148 | CH Chrome Google | 8.8 | Oct 13 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-110165 | CH Chrome Google | 9.6 | Oct 13 | Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML… |