Skip to content
OpenAdvisories

Archive

27 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /27 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-118306 Public exploit

    Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary cod…

    Google Chrome chromium Browsers Debian
  • Critical 9.8
    CVE-2026-116692 Public exploit

    MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules

    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PART…

    MLflow MLflow mlflow PyPI
  • Critical 9.8
    CVE-2026-114595 Public exploit

    Integer overflow or wraparound in EPICS Base

    In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential r…

    The EPICS Community EPICS Base epics-base Ubuntu
  • High 8.8
    CVE-2026-111585 Public exploit

    Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

    An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, pot…

    TeamViewer Full Client Remote Control Portable
  • High 7.8
    CVE-2026-117561 Public exploit

    sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

    Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize backticks, $() substi…

    codefriar sf-mcp
  • Critical 9.8
    CVE-2026-117532 Public exploit

    REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

    REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state an…

    redaxo core