Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Android Framework Information Disclosure VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityPatch nowKEVEPSS 0.26%Dec 1, 2025
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.03%Nov 12, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.39%Sep 17, 2025
- High8.8Android Runtime Use-After-Free VulnerabilityPatch nowKEVEPSS 0.63%Sep 1, 2025
- Medium6.5Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control SecCheck this weekEPSS 31.00%Aug 14, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaCheck if you run itEPSS 0.16%Aug 12, 2025
- High8.6A safe mode bypass vulnerability in the method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a speciallCheck this weekEPSS 12.00%Aug 11, 2025
- High8.8Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 33.00%Aug 7, 2025
- High8.8Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.Check this weekEPSS 32.00%Aug 7, 2025
- High7.2The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in file metadata in all versionsCheck this weekEPSS 26.00%Aug 5, 2025
- High8.8The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and excCheck this weekEPSS 69.00%Jul 25, 2025
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityPatch nowKEVEPSS 1.34%Jul 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still holding the ep mutex Jann Horn points out that epoll is decreCheck if you run itEPSS 0.17%Jul 18, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- High7.8Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.Check if you run itEPSS 0.15%Jul 14, 2025
- Medium5.4Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck this weekEPSS 48.00%Jul 11, 2025
- Medium6.3No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check this weekEPSS 63.00%Jul 11, 2025
- Medium5.6Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.Check this weekEPSS 37.00%Jul 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs.Check if you run itEPSS 0.29%Jul 8, 2025
- Critical9.3Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- High8.8Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- Critical9.3Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- High7.4No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 3.92%Jul 1, 2025
- High8.1Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 14.14%Jun 30, 2025