Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 33.00%Aug 7, 2025
- High8.8Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.Check this weekEPSS 32.00%Aug 7, 2025
- High7.2The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in file metadata in all versionsCheck this weekEPSS 26.00%Aug 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migration of SEV{-ES} stateCheck if you run itEPSS 0.18%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU syzbot reports that defer/local task_work addingCheck this weekEPSS 17.00%Jul 25, 2025
- High8.8The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and excCheck this weekEPSS 69.00%Jul 25, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without rCheck if you run itEPSS 0.18%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, [0Check if you run itEPSS 0.19%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset for cloning syzbot reports that it can trigger a WARN_ON() forCheck this weekEPSS 15.00%Jul 4, 2025
- Medium5.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-SCheck this weekEPSS 25.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BCheck this weekEPSS 20.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect from concurrent accessCheck if you run itEPSS 0.18%Jul 3, 2025
- Critical9.3Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- High8.8Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- Critical9.3Neither filed by Chrome nor a valid security vulnerability.Check if you run itEPSS 0.00%Jul 2, 2025
- High8.1Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 14.14%Jun 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() triggers hugetlb page tablCheck if you run itEPSS 0.20%Jun 28, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thhake Photo Express for Google photo-express-for-google allows Reflected XSS.Check this weekEPSS 26.00%Jun 27, 2025
- Medium5.4Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execCheck this weekEPSS 23.00%Jun 24, 2025
- Medium5.4Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- Medium5.4Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 21.00%Jun 24, 2025
- High8.8Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check this weekEPSS 44.00%Jun 18, 2025
- High8.8Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check this weekEPSS 11.49%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set the DMA mask for the udmabuf device (v2) If the DMA mask is not set explicitly, the following warniCheck this weekEPSS 24.00%Jun 18, 2025