Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.3 CRITICAL
CVE-2026-44212 — PrestaShop: Stored XSS executable in customer service view

PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer Service view. An u…

prestashop | Remote | Cross-Site Scripting
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
7.1 HIGH
CVE-2026-42847 — ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje…

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable through the type parameter on the auth…

Remote | Injection
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.7 HIGH
CVE-2026-42327 — rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UT…

rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as Open…

rust-openssl | Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
9.1 CRITICAL
CVE-2026-8634 — Crabbox < v0.12.0 Environment Variable Information Disclosure

Crabbox prior to v0.12.0 contains an environment variable exposure vulnerability that allows attackers with access to a malicious or compromised repository to forward local secrets such as API tokens…

Remote | Information Disclosure
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.1 HIGH
CVE-2026-8629 — Crabbox < v0.12.0 Privilege Escalation via Agent Ticket Endpoints

Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent tickets by sending POST requests t…

Remote | Authorization
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
7.2 HIGH
CVE-2026-8597 — Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK

Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code executio…

Remote | Supply Chain
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.5 HIGH
CVE-2026-8596 — Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve p…

Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract …

Remote | Cryptography
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.8 HIGH
CVE-2026-8587 — Google Chrome Extensions Use After Free Vulnerability

Use after free in Extensions in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome E…

Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
0.0 NA
CVE-2026-8586 — Google Chrome Chromoting File Path Traversal Vulnerability

Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: …

| Authorization
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
0.0 NA
CVE-2026-8585 — Google Chrome iOS Media Out-of-Bounds Memory Read Vulnerability

Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a …

| Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
4.2 MEDIUM
CVE-2026-8584 — Google Chrome iOS UI Spoofing Vulnerability

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page…

Remote | Misconfiguration
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
5.3 MEDIUM
CVE-2026-8583 — Google Chrome WebXR Information Disclosure

Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive informa…

Remote | Information Disclosure
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
5.3 MEDIUM
CVE-2026-8582 — Google Chrome Dawn Information Leak

Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium se…

Remote | Information Disclosure
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.8 HIGH
CVE-2026-8581 — Google Chrome GPU Use-After-Free Vulnerability

Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
9.6 CRITICAL
CVE-2026-8580 — Google Chrome Mojo Use-After-Free Vulnerability

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
0.0 NA
CVE-2026-8579 — Google Chrome Skia Out-of-Bounds Memory Write

Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write…

| Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
0.0 NA
CVE-2026-8578 — Google Chrome Linux GPU Out-of-Bounds Read Vulnerability

Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chro…

| Information Disclosure
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.8 HIGH
CVE-2026-8577 — Google Chrome Fonts Integer Overflow Vulnerability

Integer overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
0.0 NA
CVE-2026-8576 — Google Chrome CORS Cross-Origin Data Leak

Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…

| Misconfiguration
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
8.3 HIGH
CVE-2026-8575 — Google Chrome Use After Free in UI

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chro…

Remote | Memory Corruption
May 14, 2026 May 14, 2026
May 14, 2026
May 14, 2026
Showing 20 of 6345 Results