Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5launch-editor allows users to open files with line numbers in editor from Node.js.Check if you run itEPSS 0.51%Jun 1, 2026
- High7.8Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device in…Check if you run itEPSS 0.18%Jun 1, 2026
- High7.4Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows.Check if you run itEPSS 0.25%Jun 1, 2026
- High8.5Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.14%Jun 1, 2026
- High8.5Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.14%Jun 1, 2026
- Low2.0StrongDM Desktop Application before 23.74.0 (Desktop Client before 53.77.0) on Microsoft Windows stores authentication state, including a JSON Web Token and asymmetric…Check if you run itEPSS 0.13%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
- High8.3Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.30%May 28, 2026
- Low3.1Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cr…Check if you run itEPSS 0.21%May 28, 2026
- High8.8Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.38%May 28, 2026
- High8.3Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.30%May 28, 2026
- Low3.1Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.18%May 28, 2026
- High8.3Use after free in Core in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.30%May 28, 2026
- High8.8Use after free in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.41%May 28, 2026
- High8.3Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a…Check if you run itEPSS 0.22%May 28, 2026
- High8.8Out of bounds read in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.30%May 28, 2026
- High8.3Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially per…Check if you run itEPSS 0.25%May 28, 2026
- Medium4.3Out of bounds read in Dawn in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.26%May 28, 2026
- High8.3Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially p…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…Check if you run itEPSS 0.30%May 28, 2026
- High8.3Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo…Check if you run itEPSS 0.18%May 28, 2026
- High8.2Usagi-org ai-goofish-monitor contains an unauthenticated arbitrary file read vulnerability in the GET /api/prompts/{filename} endpoint on Windows deployments that allo…Check if you run itEPSS 0.60%May 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix UAF in inactivity-timer cleanup path Commit 38224c472a03 ("HID: appletb-kbd:…Check if you run itEPSS 0.17%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-initialize security descriptor buffer Commit 62e7dd0a39c2d ("smb:…Check if you run itEPSS 0.16%May 28, 2026