CVE Database

55204+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-87072
7.1 HIGH

Tanium addressed an improper access controls vulnerability in Comply.

Sep 9, 2026
CVE-2026-87036
8.1 HIGH

Tanium addressed an improper access controls vulnerability in Comply.

Sep 9, 2026
CVE-2026-87034
8.3 HIGH

Tanium addressed a SQL injection vulnerability in Comply.

Sep 9, 2026
CVE-2026-87030
8.5 HIGH

Tanium addressed a path traversal vulnerability in Comply.

Sep 9, 2026
CVE-2026-87023
8.5 HIGH

Tanium addressed a path traversal vulnerability in Comply.

Sep 9, 2026
CVE-2026-87021
7.2 HIGH

Tanium addressed an unauthorized code execution vulnerability in Comply.

Sep 9, 2026
CVE-2026-76801
8.8 HIGH

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all …

Sep 9, 2026
CVE-2026-15667
7.5 HIGH

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up …

Sep 9, 2026
CVE-2026-15406
7.5 HIGH

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up …

Sep 9, 2026
CVE-2026-13359
7.2 HIGH

The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter …

Sep 9, 2026
CVE-2026-87648
8.3 HIGH

Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to …

Sep 9, 2026
CVE-2026-87644
8.3 HIGH

Incorrect authorization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged …

Sep 9, 2026
CVE-2026-87639
8.3 HIGH

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary …

Sep 9, 2026
CVE-2026-87636
8.8 HIGH

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026
CVE-2026-87633
8.6 HIGH

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. …

Sep 9, 2026
CVE-2026-87628
8.3 HIGH

Use after free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted …

Sep 9, 2026
CVE-2026-87625
8.8 HIGH

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox …

Sep 9, 2026
CVE-2026-87618
8.3 HIGH

Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to …

Sep 9, 2026
CVE-2026-87617
8.8 HIGH

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox …

Sep 9, 2026
CVE-2026-87616
8.3 HIGH

Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged …

Sep 9, 2026
CVE-2026-87612
8.8 HIGH

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML …

Sep 9, 2026
CVE-2026-87608
7.5 HIGH

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted …

Sep 9, 2026
CVE-2026-87606
8.1 HIGH

Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via …

Sep 9, 2026
CVE-2026-87604
8.3 HIGH

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute …

Sep 9, 2026
CVE-2026-87601
7.5 HIGH

Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML …

Sep 9, 2026
CVE-2026-87588
8.8 HIGH

Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026
CVE-2026-87587
8.8 HIGH

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026
CVE-2026-87585
8.8 HIGH

Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox …

Sep 9, 2026
CVE-2026-87582
8.3 HIGH

Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code …

Sep 9, 2026
CVE-2026-87579
8.8 HIGH

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML …

Sep 9, 2026
CVE-2026-87578
8.3 HIGH

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network …

Sep 9, 2026
CVE-2026-87572
8.3 HIGH

Injection in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside …

Sep 9, 2026
CVE-2026-87570
8.8 HIGH

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to …

Sep 9, 2026
CVE-2026-87569
8.8 HIGH

Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted …

Sep 9, 2026
CVE-2026-87554
8.1 HIGH

Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via …

Sep 9, 2026
CVE-2026-87553
8.3 HIGH

Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary …

Sep 9, 2026
CVE-2026-87542
8.8 HIGH

Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026
CVE-2026-87537
8.1 HIGH

Missing authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code …

Sep 9, 2026
CVE-2026-87536
8.8 HIGH

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026
CVE-2026-87533
8.1 HIGH

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local …

Sep 9, 2026
CVE-2026-87530
8.1 HIGH

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the …

Sep 9, 2026
CVE-2026-87524
8.3 HIGH

Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to …

Sep 9, 2026
CVE-2026-87514
8.1 HIGH

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local …

Sep 9, 2026
CVE-2026-87510
8.3 HIGH

Improper input validation in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary …

Sep 9, 2026
CVE-2026-87509
8.1 HIGH

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via …

Sep 9, 2026
CVE-2026-87506
8.3 HIGH

Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code …

Sep 9, 2026
CVE-2026-87505
8.1 HIGH

Incorrect authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via …

Sep 9, 2026
CVE-2026-87499
8.1 HIGH

Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via …

Sep 9, 2026
CVE-2026-87491
8.8 HIGH KEV

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a …

Sep 9, 2026
CVE-2026-87489
8.8 HIGH

Memory corruption in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted …

Sep 9, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →

Affiliate links: we may earn a commission, your price stays the same.