Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-75824 | medium | 5.3 | No | The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowi... | 2026-09-30 |
| CVE-2026-75823 | high | 7.4 | No | The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauth... | 2026-09-30 |
| CVE-2026-100143 | medium | 6.5 | No | The FluentCart A New Era of eCommerce WordPress plugin before 1.6.5 does not verify that the person placing a guest checkout controls the em... | 2026-09-30 |
| CVE-2026-95325 | critical | 9.6 | No | Use after free in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the... | 2026-09-30 |
| CVE-2026-95331 | critical | 9.6 | No | Out of bounds write in ANGLE in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside... | 2026-09-30 |
| CVE-2026-95333 | high | 8.1 | No | Use after free in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox vi... | 2026-09-30 |
| CVE-2026-95334 | high | 8.3 | No | Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the rende... | 2026-09-30 |
| CVE-2026-95335 | high | 8.3 | No | Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentia... | 2026-09-30 |
| CVE-2026-95336 | medium | 6.5 | No | Information leak in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to... | 2026-09-30 |
| CVE-2026-103442 | not reported | — | No | External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code In... | 2026-09-30 |
| CVE-2026-103441 | not reported | — | No | Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in... | 2026-09-30 |
| CVE-2026-95338 | high | 8.8 | No | Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-09-30 |
| CVE-2026-95339 | critical | 9.6 | No | Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sand... | 2026-09-30 |
| CVE-2026-95341 | high | 8.3 | No | Improper input validation in Desktop in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer proc... | 2026-09-30 |
| CVE-2026-95343 | high | 8.8 | No | Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-09-30 |
| CVE-2026-95345 | high | 8.8 | No | Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-09-30 |
| CVE-2026-95346 | medium | 4.8 | No | UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via crafted networ... | 2026-09-30 |
| CVE-2026-95347 | critical | 9.6 | No | Use after free in Updater in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the... | 2026-09-30 |
| CVE-2026-95348 | high | 8.3 | No | Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to po... | 2026-09-30 |
| CVE-2026-95351 | high | 8.3 | No | Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execut... | 2026-09-30 |