KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security…
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Błąd autoryzacji w ServiceWorker w Google Chrome umożliwia obejście izolacji stron przez złośliwą stronę.
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Brak autoryzacji w rozszerzeniach Google Chrome umożliwia zdalnemu atakującemu uzyskanie wrażliwych danych.
Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Przepełnienie bufora w cjose umożliwia zdalne wykonanie kodu przez nieautoryzowanego atakującego.
An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service (DoS). The (*WinEvents).readELAMAggregation function recurses for every…
W Maravel występuje podatność na powtórne użycie tokenów, co może prowadzić do nieautoryzowanego dostępu.
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression. The pattern ^(./).git(/.)$…
Wstrzyknięcie kodu w n8n umożliwia wykonanie złośliwego kodu przez manipulację JSON.stringify.
Przepełnienie bufora w n8n pozwala na wyczerpanie pamięci bazy danych przez nieautoryzowanych użytkowników.
W n8n przed wersjami 1.123.76, 2.37.7 i 2.38.2 złośliwy kod może być wykonany przez manipulację sanitizera.
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to…
Błąd w Waves Central na macOS pozwala na lokalną eskalację uprawnień do poziomu roota.
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user…
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-87481 Incorrect authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary… |
Monitoruj |
CVSS 8,3EPSS 0,41 % | ||
| CVE-2026-87467 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program.… |
Monitoruj |
CVSS 8,1EPSS 0,1 % | ||
| CVE-2026-87471 Błąd autoryzacji w ServiceWorker w Google Chrome umożliwia obejście izolacji stron przez złośliwą stronę. |
Monitoruj |
CVSS 8,1EPSS 0,32 % | ||
| CVE-2026-87457 Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium… |
Monitoruj |
CVSS 8,1EPSS 0,1 % | ||
| CVE-2026-87460 Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security… |
Monitoruj |
CVSS 8,8EPSS 0,41 % | ||
| CVE-2026-87450 Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome… |
Monitoruj |
CVSS 7,5EPSS 0,32 % | ||
| CVE-2026-87440 Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security… |
Monitoruj |
CVSS 8,8EPSS 0,41 % | ||
| CVE-2026-87444 Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security… |
Monitoruj |
CVSS 8,8EPSS 0,41 % | ||
| CVE-2026-87430 Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium… |
Monitoruj |
CVSS 8,8EPSS 0,57 % | ||
| CVE-2026-87431 Brak autoryzacji w rozszerzeniach Google Chrome umożliwia zdalnemu atakującemu uzyskanie wrażliwych danych. |
Monitoruj |
CVSS 7,5EPSS 0,32 % | ||
| CVE-2026-87433 Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.… |
Monitoruj |
CVSS 8,8EPSS 0,28 % | ||
| CVE-2026-53938 Przepełnienie bufora w cjose umożliwia zdalne wykonanie kodu przez nieautoryzowanego atakującego. |
Monitoruj |
CVSS 8,2EPSS 0,24 % | ||
| CVE-2026-19201 An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service… |
Monitoruj |
CVSS 7,5EPSS 0,27 % | ||
| CVE-2026-55250 W Maravel występuje podatność na powtórne użycie tokenów, co może prowadzić do nieautoryzowanego dostępu. |
Monitoruj |
CVSS 8,7EPSS 0,87 % | ||
| CVE-2026-86081 n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default… |
Monitoruj |
CVSS 7,1EPSS 0,56 % | ||
| CVE-2026-86083 Wstrzyknięcie kodu w n8n umożliwia wykonanie złośliwego kodu przez manipulację JSON.stringify. |
Monitoruj |
CVSS 8,8EPSS 0,66 % | ||
| CVE-2026-86075 Przepełnienie bufora w n8n pozwala na wyczerpanie pamięci bazy danych przez nieautoryzowanych użytkowników. |
Monitoruj |
CVSS 7,5EPSS 0,61 % | ||
| CVE-2026-86076 W n8n przed wersjami 1.123.76, 2.37.7 i 2.38.2 złośliwy kod może być wykonany przez manipulację sanitizera. |
Monitoruj |
CVSS 8,8EPSS 0,79 % | ||
| CVE-2026-85983 The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration.… |
Monitoruj |
CVSS 7,8EPSS 0,2 % | ||
| CVE-2026-86819 Błąd w Waves Central na macOS pozwala na lokalną eskalację uprawnień do poziomu roota. |
Monitoruj |
CVSS 8,4EPSS 0,1 % | ||
| CVE-2026-81996 Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain… |
Monitoruj |
CVSS 8,8EPSS 0,24 % | ||
| CVE-2026-81985 Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user… |
Monitoruj |
CVSS 7,8EPSS 0,38 % | ||
| CVE-2026-81986 Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user… |
Monitoruj |
CVSS 7,8EPSS 0,38 % | ||
| CVE-2026-81987 Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… |
Monitoruj |
CVSS 7,8EPSS 0,31 % | ||
| CVE-2026-81988 Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user… |
Monitoruj |
CVSS 7,8EPSS 0,38 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 11.11.2026, 11:32 UTC – 11.11.2026, 13:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.