Skip to content
OpenAdvisories

Archive

3 September 2026

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 8.3
    CVE-2026-85048 Public exploit

    Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the…

  • High 7.5
    CVE-2026-85045 Public exploit

    Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside…

  • High 8.8
    CVE-2026-85046 Exploited Public exploit

    Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside…

    KEV Sep 4, 2026
  • Critical 9.8
    CVE-2026-84753 Public exploit

    WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions.

  • High 8.8
    CVE-2026-71963 Public exploit

    Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection

    Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an at…

  • High 7.7
    CVE-2026-85168 Public exploit

    n8n before 1.123.73 Remote Code Execution via Git Node

    n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-d…