Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-113217 CVE-2026-113217 - chromium-browser: chromium-browser: Use after free in WebAppInstalls HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113161 CVE-2026-113161 - chromium-browser: chromium-browser: Use after free in WebRTC HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113310 CVE-2026-113310 - chromium-browser: chromium-browser: Information disclosure in Bluetooth via crafted HTML page MEDIUM 4.3 Red Hat Unknown 1 Details
CVE-2026-113324 CVE-2026-113324 - chromium-browser: chromium-browser: Use after free in GPU HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113305 CVE-2026-113305 - chromium-browser: chromium-browser: Use after free in Privacy HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-113339 CVE-2026-113339 - chromium-browser: chromium-browser: Arbitrary code execution via use-after-free in SVG HIGH 8.8 Red Hat Unknown 1 Details
CVE-2026-112899 GHSA-vx6w-vv9f-6gvg - Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit MEDIUM - Pillow Pillow Unknown 1 Details
CVE-2026-112403 GHSA-8g5g-8vmr-9782 - Pillow: Heap buffer overflow in ImagingJpegDecode CRITICAL - Pillow Pillow Unknown 2 sources Details
CVE-2026-111753 GHSA-jfgx-762w-99vr - @angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035) MEDIUM - @angular @angular/common Unknown 1 Details
- 2026-018: Critical Vulnerabilities in PHP CRITICAL - Unknown 1 Details
CVE-2026-111758 GHSA-gfr2-rv44-r23c - markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0) HIGH 7.5 markdown-itRed Hat markdown-it Unknown 2 sources Details
CVE-2026-111770 GHSA-jm63-cq47-j5jp - MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another HIGH 7.7 @modelcontextprotocol @modelcontextprotocol/server Unknown 1 Details
CVE-2026-111768 GHSA-46jr-4wx8-v453 - MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation HIGH 7.5 @modelcontextprotocol @modelcontextprotocol/sdk@modelcontextprotocol/server Unknown 1 Details
CVE-2026-113725 CVE-2026-113725 - virtualenv: virtualenv: arbitrary code execution via crafted environment name HIGH 7.8 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-113724 CVE-2026-113724 - virtualenv: virtualenv: Insecure file permission modification via symlink following MEDIUM 4.5 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-112944 GHSA-r825-w8mm-5pxw - launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors MEDIUM - launch-editorvite launch-editorvite Unknown 3 sources Details
CVE-2026-113723 CVE-2026-113723 - virtualenv: virtualenv: Arbitrary code execution via malicious prompt text HIGH 7.8 Red Hat Unknown 1 Details
CVE-2026-113722 CVE-2026-113722 - virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers HIGH 7.8 Red Hatvirtualenv virtualenv Unknown 2 sources Details
CVE-2026-112942 GHSA-587h-7wmj-h5pm - launch-editor: `fs.existsSync()` existence check can be bypassed on Windows HIGH - launch-editorvite launch-editorvite Unknown 3 sources Details
CVE-2026-113721 CVE-2026-113721 - virtualenv: virtualenv: Arbitrary file overwrite via insecure symlink handling MEDIUM 4.5 Red Hatvirtualenv virtualenv Unknown 2 sources Details