Skip to content
OpenAdvisories

Archive

28 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /28 June 2026 →
  1. 1256
  2. 282
  3. 349
  4. 4193
  5. 5203
  6. 6504
  7. 7223
  8. 8430
  9. 969
  10. 10104
  11. 11361
  12. 12555
  13. 13349
  14. 14312
  15. 15214
  16. 1648
  17. 1764
  18. 18112
  19. 19220
  20. 20204
  21. 21192
  22. 22153
  23. 2342
  24. 2465
  25. 25187
  26. 26276
  27. 27714
  28. 28545
  29. 29257
  30. 3051
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2026-9999 Public exploit

    Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to exec…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  • High 8.3
    CVE-2026-9998 Public exploit

    Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the ren…

    Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
  • High 8.3
    CVE-2026-9997 Public exploit

    Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the rend…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  • High 8.8
    CVE-2026-9973 Public exploit

    Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code …

    Google Chrome chromium chromium Browsers Debian Wolfi
  • High 8.5
    CVE-2026-44881 Public exploit

    Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

    Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer supports deploying sta…

    portainer portainer github.com/portainer/portainer Go
  • High 7.5
    CVE-2026-45332 Public exploit Scanner template

    Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

    Automad is a flat-file content management system and template engine. From 2.0.0-alpha.1 to 2.0.0-beta.27, a Broken Access Control vulnerability allows an unauthenticated attacker to retrieve the bcrypt password hash of every administrator account with a sing…

    marcantondahmen automad automad/automad Packagist
  • High 8.7
    CVE-2026-8697 Public exploit

    Improper Authentication Rate Limiting on TP-Link's Archer C64

    Due to improper enforcement of authentication rate-limiting on a debug SSH service in Archer C64 v1, the SSH service allows unlimited authentication attempts and uses the same credentials as the web interface. This enables an attacker to brute-force valid cre…

    TP-Link Systems Archer C64 v1.0 Network devices
  • High 8.7
    CVE-2026-47761 Public exploit

    TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection

    TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted data-mce-* attributes, which are executed when content is rendered. Impa…

    tinymce tinymce tinymce tinymce Ubuntu npm Packagist NuGet
  • High 7.8
    CVE-2026-46215 Public exploit

    drm: Set old handle to NULL before prime swap in change_handle

    In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in change_handle There was a potential race condition in change_handle. The ioctl briefly had a single object with two idr entries; a concurrent …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.3
    CVE-2026-32996 Public exploit

    This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.

    Veeam Backup and Replication
  • High 8.5
    CVE-2026-9789 Public exploit

    NitroSense V3: Security Vulnerability Information

    A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052. The vulnerability stems from the the PSAdminAgent service, which creates a Named Pipe with a weak Access Control List (ACL). This allows any authent…

    Acer NitrorSense V3