Aggregator

Currently trending CVE - Hype Score: 23

Currently trending CVE - Hype Score: 34 - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, ...

Currently trending CVE - Hype Score: 7

Currently trending CVE - Hype Score: 7 - Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

Currently trending CVE - Hype Score: 7 - In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently ...

Currently trending CVE - Hype Score: 24 - PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may ...

Currently trending CVE - Hype Score: 24 - PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request ...

Currently trending CVE - Hype Score: 13 - A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code ...

Currently trending CVE - Hype Score: 47 - A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the ...

Currently trending CVE - Hype Score: 16 - Microsoft Outlook Remote Code Execution Vulnerability

A vulnerability was found in Google Chrome. It has been rated as problematic. Affected is an unknown function of the component ANGLE. This manipulation causes uninitialized resource. The identification of this vulnerability is CVE-2026-106245. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Google Chrome. The impacted element is an unknown function of the component Permissions. Performing a manipulation results in improper access controls. This vulnerability is reported as CVE-2026-106244. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Google Chrome and classified as problematic. The impacted element is an unknown function of the component Omnibox. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2026-106242. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Google Chrome and classified as problematic. This impacts an unknown function of the component Proxy Auth. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-106243. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Google Chrome. Impacted is an unknown function of the component WebGL. Such manipulation leads to integer overflow. This vulnerability is traded as CVE-2026-106239. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as critical was found in Google Chrome. The affected element is an unknown function of the component V8. Such manipulation leads to type confusion. This vulnerability is documented as CVE-2026-106240. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability has been found in Google Chrome and classified as critical. The affected element is an unknown function of the component Search. Performing a manipulation results in improper authorization. This vulnerability is known as CVE-2026-106241. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability described as critical has been identified in Google Chrome. This issue affects some unknown processing of the component Fonts. The manipulation results in race condition. This vulnerability is cataloged as CVE-2026-106238. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.