FXBIA/cve-intelligence-stream huggingface dataset:
CVE ID: CVE-2026-11142 Severity: MEDIUM (CVSS 6.5) CWE: CWE-639 KEV (actively exploited): NO Description: Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11141 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11140 Severity: MEDIUM (CVSS 6.5) CWE: CWE-20 KEV (actively exploited): NO Description: Out of bounds read in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11139 Severity: MEDIUM (CVSS 6.5) CWE: CWE-352 KEV (actively exploited): NO Description: Inappropriate implementation in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11138 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11137 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11135 Severity: MEDIUM (CVSS 6.5) CWE: CWE-284 KEV (actively exploited): NO Description: Insufficient policy enforcement in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11134 Severity: MEDIUM (CVSS 6.5) CWE: CWE-352 KEV (actively exploited): NO Description: Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11133 Severity: MEDIUM (CVSS 6.5) CWE: CWE-346 KEV (actively exploited): NO Description: Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11132 Severity: MEDIUM (CVSS 6.5) CWE: CWE-346 KEV (actively exploited): NO Description: Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11131 Severity: CRITICAL (CVSS 9.6) CWE: CWE-416 KEV (actively exploited): NO Description: Use after free in Autofill in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11129 Severity: MEDIUM (CVSS 6.5) CWE: CWE-352 KEV (actively exploited): NO Description: Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11119 Severity: CRITICAL (CVSS 9.6) CWE: CWE-20 KEV (actively exploited): NO Description: Inappropriate implementation in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11116 Severity: HIGH (CVSS 8.8) CWE: CWE-416 KEV (actively exploited): NO Description: Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Medium)
CVE ID: CVE-2026-11115 Severity: HIGH (CVSS 7.3) CWE: CWE-416 KEV (actively exploited): NO Description: Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE ID: CVE-2026-9280 Severity: MEDIUM (CVSS 6.1) CWE: CWE-79 KEV (actively exploited): NO Description: The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Parameters in iframe Mode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Exploitation requires that iframe mode (AI_OPTION_IFRAME) is enabled on at least one ad block displayed on the targeted page, which is a non-default but supported configuration commonly used for AdSense and JavaScript-based ads.
CVE ID: CVE-2026-9197 Severity: MEDIUM (CVSS 4.9) CWE: CWE-22 KEV (actively exploited): NO Description: The Smart Slider 3 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.1.36 via the replaceHTMLImage function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVE ID: CVE-2026-8991 Severity: MEDIUM (CVSS 4.4) CWE: CWE-79 KEV (actively exploited): NO Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'drag_n_drop_text' and 'drag_n_drop_browse_text' Settings in all versions up to, and including, 1.3.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE ID: CVE-2026-8978 Severity: MEDIUM (CVSS 4.9) CWE: CWE-89 KEV (actively exploited): NO Description: The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVE ID: CVE-2026-8502 Severity: MEDIUM (CVSS 5.3) CWE: CWE-862 KEV (actively exploited): NO Description: The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the 'return_type' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including the plaintext post_password of password-protected courses and the full post_content, post_author, and post_name of unpublished draft, private, and pending courses via the unrestricted SELECT * fallback query. Exploitation requires supplying both c_status=all (to bypass the publish-only post_status WHERE clause) and return_type=json (to prevent the safe DISTINCT(ID) AS ID field override) in a single unauthenticated request to the /wp-json/lp/v1/courses/archive-course endpoint.
CVE ID: CVE-2026-7796 Severity: MEDIUM (CVSS 6.4) CWE: CWE-79 KEV (actively exploited): NO Description: The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block 'url' attribute in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page
CVE ID: CVE-2026-7795 Severity: MEDIUM (CVSS 6.4) CWE: CWE-79 KEV (actively exploited): NO Description: The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode 'num' parameter in all versions up to, and including, 4.38. This is due to insufficient escaping when embedding user-supplied shortcode attribute values inside JavaScript string literals that are then placed in HTML event-handler attributes. The CCW_Shortcode::shortcode() function applies esc_attr() to the 'num' parameter (line 157), which converts single quotes to the HTML entity &#039;. This entity-encoded value is then interpolated directly into a JavaScript window.open() call string delimited by single quotes (line 194/221), and that complete string is placed verbatim into an HTML onclick attribute in the style template files (e.g., sc-style-1.php line 6). Because browsers HTML-decode event attribute values before executing the embedded JavaScript, the &#039; entities are decoded back to literal single quotes at runtime, allowing the injected payload to break out of the JavaScript string context and execute arbitrary code. This makes it possible for authenticated attackers with Contributor-level access and above to inject arbitrary web scripts into pages that will execute whenever a user clicks the WhatsApp chat button rendered by the [chat] shortcode.
CVE ID: CVE-2026-7792 Severity: MEDIUM (CVSS 5.3) CWE: CWE-345 KEV (actively exploited): NO Description: The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to and including 1.10.0.1. This is due to the PayPal Commerce webhook endpoint processing unauthenticated JSON webhook payloads without verifying that the request originated from PayPal using the required HMAC-SHA256 webhook signature, and only checking whether the supplied event_type is whitelisted before dispatching the attacker-controlled resource data to handlers that update payment records. This makes it possible for unauthenticated attackers who know a valid PayPal subscription_id to forge PayPal webhook events and modify subscription payment records, such as reactivating a cancelled or suspended subscription by setting its subscription_status to active.
CVE ID: CVE-2026-7665 Severity: MEDIUM (CVSS 5.3) CWE: CWE-639 KEV (actively exploited): NO Description: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.6.4 via the ajax_load_more function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.
CVE ID: CVE-2026-7566 Severity: MEDIUM (CVSS 6.6) CWE: CWE-502 KEV (actively exploited): NO Description: The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.4 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVE ID: CVE-2026-7565 Severity: MEDIUM (CVSS 4.9) CWE: CWE-22 KEV (actively exploited): NO Description: The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Traversal in all versions up to, and including, 4.1.4 via the 'import-user-file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVE ID: CVE-2026-7537 Severity: HIGH (CVSS 7.2) CWE: CWE-434 KEV (actively exploited): NO Description: The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7.8.3 via the mdjm_send_comm_email function. This is due to no file type, extension, or MIME type validation being performed on uploaded files. This makes it possible for authenticated attackers, with administrator-level access and above, to upload files that may be executable, which makes remote code execution possible.
CVE ID: CVE-2026-2500 Severity: MEDIUM (CVSS 4.4) CWE: CWE-22 KEV (actively exploited): NO Description: The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` function passing the user-supplied `filename` POST parameter directly to `file_get_contents()` without any validation, sanitization, or path restriction. This makes it possible for authenticated attackers, with Administrator-level access and above, to read arbitrary files on the server, such as `wp-config.php` or `/etc/passwd`, which can contain sensitive information. Note: This vulnerability is only exploitable when the site has been synced with WordPress Playground (the `is_qckply_clone` option is set) or when running on `playground.wordpress.net`.
CVE ID: CVE-2026-11114 Severity: CRITICAL (CVSS 9.6) CWE: CWE-416 KEV (actively exploited): NO Description: Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11113 Severity: CRITICAL (CVSS 9.6) Software: Google Chrome Exploit available: NO KEV: NO Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11112 Severity: CRITICAL (CVSS 9.6) CWE: CWE-20 KEV (actively exploited): NO Description: Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE ID: CVE-2026-11111 Severity: HIGH (CVSS 8.1) CWE: CWE-125 KEV (actively exploited): NO Description: Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11110 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11109 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11108 Severity: HIGH (CVSS 8.8) CWE: CWE-269 KEV (actively exploited): NO Description: Inappropriate implementation in NFC in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11107 Severity: MEDIUM (CVSS 4.3) CWE: CWE-451 KEV (actively exploited): NO Description: Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11106 Severity: MEDIUM (CVSS 6.5) CWE: CWE-352 KEV (actively exploited): NO Description: Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11105 Severity: MEDIUM (CVSS 6.5) CWE: CWE-20 KEV (actively exploited): NO Description: Insufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11104 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11102 Severity: HIGH (CVSS 8.8) Software: Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)
CVE ID: CVE-2026-11101 Severity: MEDIUM (CVSS 6.5) CWE: CWE-457 KEV (actively exploited): NO Description: Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11100 Severity: CRITICAL (CVSS 9.6) CWE: CWE-416 KEV (actively exploited): NO Description: Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11098 Severity: MEDIUM (CVSS 6.5) CWE: CWE-20 KEV (actively exploited): NO Description: Insufficient validation of untrusted input in GPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-11097 Severity: MEDIUM (CVSS 6.5) CWE: CWE-474 KEV (actively exploited): NO Description: Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-10973 Severity: HIGH (CVSS 7.4) Software: Google Chrome Exploit available: NO KEV: NO Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10972 Severity: CRITICAL (CVSS 9.6) Software: Google Chrome, Linux Linux Kernel Exploit available: NO KEV: NO Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10968 Severity: HIGH (CVSS 7.4) Software: Google Chrome, Microsoft Windows Exploit available: NO KEV: NO Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10966 Severity: CRITICAL (CVSS 9.6) Software: Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
CVE ID: CVE-2026-10955 Severity: HIGH (CVSS 8.8) CWE: CWE-843 KEV (actively exploited): NO Description: Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVE ID: CVE-2026-9281 Severity: MEDIUM (CVSS 6.4) CWE: CWE-79 KEV (actively exploited): NO Description: The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jtlma_custom_js' Page Setting (Custom JS Extension) in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The unfiltered_html capability check is only enforced during Elementor control registration (UI rendering) and not during the save process, enabling Author-level users to inject the jtlma_custom_js setting directly via a crafted POST request to admin-ajax.php?action=elementor_ajax, bypassing the UI-level restriction entirely.
CVE ID: CVE-2026-9008 Severity: MEDIUM (CVSS 4.3) CWE: CWE-862 KEV (actively exploited): NO Description: The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. This is due to the pagelist_unqprfx_ext_shortcode() function (the [pagelist_ext] / [pagelistext] shortcode) accepting attacker-controlled post_status, post_type, and show_meta_key attributes and passing them directly into get_pages() and get_post_meta() with no capability check verifying that the rendering user is permitted to read the matched objects. When the current post has no child pages, the shortcode re-issues the query with child_of => 0, broadening it to every page on the site matching the supplied status/type. This makes it possible for authenticated attackers, with contributor-level access and above, to disclose the titles, body content/excerpts, and arbitrary post meta of unrelated private and draft pages by inserting the shortcode into a contributor-authored draft and previewing it.
CVE ID: CVE-2026-8901 Severity: HIGH (CVSS 7.2) CWE: CWE-79 KEV (actively exploited): NO Description: The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Submission Data in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload only executes when a CRM API call fails for the submitted form and an administrator subsequently views the error log details modal in the WordPress admin panel.
CVE ID: CVE-2026-8438 Severity: HIGH (CVSS 7.2) CWE: CWE-79 KEV (actively exploited): NO Description: The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.4.7. This is due to insufficient input sanitization in the get_rest_route() function and missing output escaping in the column_default() method of the debug log list table. When the 'Disable REST API for non-logged in users' feature (aiowps_disallow_unauthorized_rest_requests) is enabled alongside debug logging (aiowps_enable_debug), an unauthenticated attacker can embed arbitrary HTML or JavaScript in the REST request path. The path is retrieved via urldecode($_SERVER['REQUEST_URI']), which decodes URL-encoded payloads into literal HTML characters. This decoded, unsanitized value is concatenated directly into a debug log message and stored in the database. When an administrator navigates to the AIOS Dashboard Debug Logs page, the column_default() method returns the raw database value without escaping, and the parent list table echoes it directly, causing JavaScript execution in the administrator's browser session. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute when an administrator views the debug log page, enabling nonce theft, privileged AJAX/REST actions, and potential full site compromise.
CVE: CVE-2026-21017 Severity: MEDIUM (CVSS 4.6) Software: Samsung Android Exploit available: NO KEV: NO Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE: CVE-2026-21025 Severity: MEDIUM (CVSS 6.9) Software: Samsung Android Exploit available: NO KEV: NO Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE: CVE-2026-21026 Severity: MEDIUM (CVSS 6.4) Software: Samsung Android Exploit available: NO KEV: NO Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE: CVE-2026-21027 Severity: MEDIUM (CVSS 4.8) Software: Samsung Android Exploit available: NO KEV: NO Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE: CVE-2026-21028 Severity: MEDIUM (CVSS 5.1) Software: Samsung Android Exploit available: NO KEV: NO Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE: CVE-2026-21029 Severity: MEDIUM (CVSS 6.8) Software: Samsung Android Exploit available: NO KEV: NO Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE: CVE-2026-21030 Severity: MEDIUM (CVSS 6.4) Software: Samsung Android Exploit available: NO KEV: NO Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE: CVE-2026-21031 Severity: MEDIUM (CVSS 5.2) Software: Samsung Android Exploit available: NO KEV: NO Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE: CVE-2026-11204 Severity: MEDIUM (CVSS 6.5) Software: Apple Iphone Os, Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in Signin in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11206 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11207 Severity: CRITICAL (CVSS 9.6) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: Medium)
CVE: CVE-2026-11208 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11209 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11210 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in Safe Browsing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted RAR file. (Chromium security severity: Medium)
CVE: CVE-2026-11212 Severity: MEDIUM (CVSS 4.3) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE: CVE-2026-11225 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Low)
CVE: CVE-2026-11226 Severity: MEDIUM (CVSS 6.5) Software: Google Android, Google Chrome Exploit available: NO KEV: NO Insufficient policy enforcement in PreviewTab in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE: CVE-2026-11227 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Low)
CVE: CVE-2026-10939 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10958 Severity: HIGH (CVSS 8.8) Software: Apple Iphone Os, Google Chrome Exploit available: NO KEV: NO Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10959 Severity: HIGH (CVSS 8.8) Software: Google Android, Google Chrome Exploit available: NO KEV: NO Use after free in Input in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-11003 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-10998 Severity: MEDIUM (CVSS 4.0) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)
CVE: CVE-2026-10997 Severity: MEDIUM (CVSS 6.5) Software: Google Chrome Exploit available: NO KEV: NO Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE: CVE-2026-10996 Severity: MEDIUM (CVSS 6.5) Software: Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-10995 Severity: HIGH (CVSS 8.8) Software: Google Chrome Exploit available: NO KEV: NO Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-10991 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-10989 Severity: HIGH (CVSS 8.8) Software: Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10988 Severity: HIGH (CVSS 8.8) Software: Google Chrome Exploit available: NO KEV: NO Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10987 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10986 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: High)
CVE: CVE-2026-10982 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10978 Severity: HIGH (CVSS 8.8) Software: Google Chrome, Microsoft Windows Exploit available: NO KEV: NO Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: High)
CVE: CVE-2026-10975 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10967 Severity: HIGH (CVSS 8.3) Software: Google Android, Google Chrome Exploit available: NO KEV: NO Use after free in SurfaceCapture in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10961 Severity: HIGH (CVSS 8.3) Software: Apple Iphone Os, Google Chrome Exploit available: NO KEV: NO Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10912 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10916 Severity: MEDIUM (CVSS 6.1) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)
CVE: CVE-2026-10923 Severity: HIGH (CVSS 8.8) Software: Google Android, Google Chrome Exploit available: NO KEV: NO Use after free in WebAppInstalls in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)
CVE: CVE-2026-11187 Severity: MEDIUM (CVSS 6.3) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in Glic in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11186 Severity: MEDIUM (CVSS 6.1) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11184 Severity: MEDIUM (CVSS 6.3) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient policy enforcement in Actor in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11183 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Out of bounds read in GWP-ASan in Google Chrome prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)
CVE: CVE-2026-11120 Severity: CRITICAL (CVSS 9.6) Software: Google Chrome Exploit available: NO KEV: NO Insufficient validation of untrusted input in Enterprise Reporting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11086 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11077 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Bad cast in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11076 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Type Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11074 Severity: HIGH (CVSS 8.8) Software: Google Chrome, Linux Linux Kernel Exploit available: NO KEV: NO Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11068 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11060 Severity: HIGH (CVSS 8.8) Software: Google Chrome, Microsoft Windows Exploit available: NO KEV: NO Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11059 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11058 Severity: HIGH (CVSS 7.5) Software: Google Chrome, Microsoft Windows Exploit available: NO KEV: NO Integer overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform OS-level privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11055 Severity: HIGH (CVSS 8.8) Software: Google Chrome, Microsoft Windows Exploit available: NO KEV: NO Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11054 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11050 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11049 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11046 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11028 Severity: HIGH (CVSS 8.8) Software: Google Chrome, Google Chrome Os, Linux Linux Kernel Exploit available: NO KEV: NO Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11188 Severity: HIGH (CVSS 8.8) Software: Google Android, Google Chrome Exploit available: NO KEV: NO Use after free in USB in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11201 Severity: HIGH (CVSS 8.8) Software: Apple Macos, Google Chrome, Linux Linux Kernel, Microsoft Windows Exploit available: NO KEV: NO Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE: CVE-2026-11202 Severity: HIGH (CVSS 8.8) Software: Apple Iphone Os, Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE: CVE-2026-11203 Severity: MEDIUM (CVSS 6.5) Software: Apple Macos, Google Chrome Exploit available: NO KEV: NO Inappropriate implementation in GPU in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE ID: CVE-2026-9719 Severity: MEDIUM (CVSS 4.3) CWE: CWE-352 KEV (actively exploited): NO Description: The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the change_status function. This makes it possible for unauthenticated attackers to change the status of arbitrary invoices — including marking unpaid invoices as paid — without administrator consent via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVE ID: CVE-2026-9290 Severity: HIGH (CVSS 7.5) CWE: CWE-22 KEV (actively exploited): NO Description: The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.17 via the (profile template scope) function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
CVE ID: CVE-2026-8976 Severity: MEDIUM (CVSS 4.3) CWE: CWE-862 KEV (actively exploited): NO Description: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to create and execute RSS import jobs, purge (force-delete) all posts associated with any import job, clear import error logs, and enumerate taxonomy terms and post meta_key names. The nonce required to reach these sub-handlers is leaked to any user with the edit_posts capability via the feedzyjs localized script injected into the block editor, meaning no privileged nonce theft or separate exploit step is required for Contributor-level users.