Skip to content
OpenAdvisories

Archive

April 2026

Vulnerabilities first published in this month (UTC), newest first.

← March 2026 2026 / April May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

124 results · Clear filters · Feed

  • High 7.4
    CVE-2026-4282 Public exploit

    Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

    A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creatio…

    Red Hat Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.4.11 Wolfi Maven
  • High 7.8
    CVE-2026-23415 Public exploit

    futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()

    In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() execution, vma->vm_policy is read under speculative mmap lock and RCU. Concurrently, mbi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2026-30332 Public exploit

    A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allow…

  • High 8.8
    CVE-2026-5281 Exploited Public exploit EPSS 14%

    Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the rende…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Apr 1, 2026