Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,206 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-106484 | 4.4 Medium | Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium) | Oct 28, 2026 |
| CVE-2026-118251 | 8.4 High | Highcharts: javascript: URL in credits.href runs script on click | Oct 28, 2026 |
| CVE-2026-118250 | 7.2 High | Highcharts: dotted series.keys paths write to Object.prototype | Oct 28, 2026 |
| CVE-2026-118249 | 7.2 High | Highcharts: series column construction writes to Object.prototype | Oct 28, 2026 |
| CVE-2026-118248 | 6.9 Medium | Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype | Oct 28, 2026 |
| CVE-2026-118247 | 6.9 Medium | Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `__proto__` as an existing column. | Oct 28, 2026 |
| CVE-2026-118246 | 8.4 High | Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes | Oct 28, 2026 |
| CVE-2026-118245 | 8.6 High | Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace | Oct 28, 2026 |
| CVE-2026-118244 | 7.2 High | Highcharts Core: AST `DOMParser` fallback assigns unsanitized markup to `innerHTML` during print | Oct 28, 2026 |
| CVE-2026-116273 | Not scored | MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion | Oct 28, 2026 |
| CVE-2026-116272 | Not scored | MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment | Oct 28, 2026 |
| CVE-2026-116271 | Not scored | MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes | Oct 28, 2026 |
| CVE-2026-116270 | Not scored | MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords | Oct 28, 2026 |
| CVE-2026-118243 | 5.3 Medium | Highcharts Dashboards: `__proto__` data table id writes sync listeners to `Object.prototype` | Oct 28, 2026 |
| CVE-2026-116269 | Not scored | MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename | Oct 28, 2026 |
| CVE-2026-116268 | Not scored | MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters | Oct 28, 2026 |
| CVE-2026-116267 | Not scored | MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message | Oct 28, 2026 |
| CVE-2026-116266 | Not scored | MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous | Oct 28, 2026 |
| CVE-2026-116265 | Not scored | MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations | Oct 28, 2026 |
| CVE-2026-110183 | 4.3 Medium | PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking | Oct 28, 2026 |
| CVE-2026-110182 | 4.3 Medium | PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data | Oct 28, 2026 |
| CVE-2026-110181 | 6.5 Medium | PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data | Oct 28, 2026 |
| CVE-2026-116264 | Not scored | MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary | Oct 28, 2026 |
| CVE-2026-105620 | 6.5 Medium | PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query | Oct 28, 2026 |
| CVE-2026-105619 | 4.8 Medium | PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views | Oct 28, 2026 |
| CVE-2026-105618 | 5.7 Medium | PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent | Oct 28, 2026 |
| CVE-2026-105617 | 5.7 Medium | PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule | Oct 28, 2026 |
| CVE-2026-105616 | 5.7 Medium | PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting | Oct 28, 2026 |
| CVE-2026-105615 | 3.5 Low | PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats | Oct 28, 2026 |
| CVE-2026-105614 | 4.7 Medium | PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() | Oct 28, 2026 |
| CVE-2026-105613 | 4.7 Medium | PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions | Oct 28, 2026 |
| CVE-2026-105612 | 3.5 Low | PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles | Oct 28, 2026 |
| CVE-2026-118242 | 8.5 High | Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>` | Oct 28, 2026 |
| CVE-2026-84725 | 8.1 High | Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap | Oct 28, 2026 |
| CVE-2026-116797 | 8.5 High | Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` | Oct 28, 2026 |
| CVE-2026-79656 | 6.0 Medium | OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors | Oct 28, 2026 |
| CVE-2026-116796 | 7.2 High | Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts | Oct 28, 2026 |
| CVE-2026-58458 | 6.9 Medium | Don't Starve Together Memory Corruption via world_gen_data | Oct 28, 2026 |
| CVE-2026-117501 | Not scored | HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies | Oct 28, 2026 |
| CVE-2026-117500 | Not scored | HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload | Oct 28, 2026 |
| CVE-2026-116531 | Not scored | HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk | Oct 28, 2026 |
| CVE-2026-116285 | Not scored | HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies | Oct 28, 2026 |
| CVE-2026-116135 | Not scored | HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them | Oct 28, 2026 |
| CVE-2026-116134 | Not scored | HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block | Oct 28, 2026 |
| CVE-2026-116133 | Not scored | HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary | Oct 28, 2026 |
| CVE-2026-116132 | Not scored | HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk | Oct 28, 2026 |
| CVE-2026-116131 | Not scored | HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts | Oct 28, 2026 |
| CVE-2026-116795 | 7.5 High | RE2JS: Quadratic-time denial of service in re2js lookbehind matching | Oct 28, 2026 |
| CVE-2026-116794 | 8.3 High | russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation | Oct 28, 2026 |
| CVE-2026-82962 | 6.5 Medium | Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet | Oct 28, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.