Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-49924 | medium | 6.2 | No | In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. T... | 2026-11-03 |
| CVE-2026-28643 | medium | 6.2 | No | In multiple locations, there is a possible denial of service due to a missing permission check. This could lead to local denial of service w... | 2026-11-03 |
| CVE-2026-121580 | not reported | — | No | Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-pr... | 2026-11-03 |
| CVE-2026-121517 | medium | 5.0 | No | A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIF... | 2026-11-03 |
| CVE-2026-121502 | high | 7.3 | No | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file facultyde... | 2026-11-03 |
| CVE-2026-121253 | not reported | — | No | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass... | 2026-11-03 |
| CVE-2026-121248 | not reported | — | No | Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a... | 2026-11-03 |
| CVE-2026-121242 | not reported | — | No | Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via... | 2026-11-03 |
| CVE-2026-121240 | not reported | — | No | Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictio... | 2026-11-03 |
| CVE-2026-121237 | not reported | — | No | Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to b... | 2026-11-03 |
| CVE-2026-121231 | not reported | — | No | Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions v... | 2026-11-03 |
| CVE-2026-121227 | not reported | — | No | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to... | 2026-11-03 |
| CVE-2026-121225 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to by... | 2026-11-03 |
| CVE-2026-121223 | not reported | — | No | Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HT... | 2026-11-03 |
| CVE-2026-121220 | not reported | — | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t... | 2026-11-03 |
| CVE-2026-121209 | not reported | — | No | UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page... | 2026-11-03 |
| CVE-2026-121207 | not reported | — | No | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbo... | 2026-11-03 |
| CVE-2026-121197 | not reported | — | No | Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox v... | 2026-11-03 |
| CVE-2026-121196 | not reported | — | No | Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictio... | 2026-11-03 |
| CVE-2026-121193 | not reported | — | No | Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions... | 2026-11-03 |