Recent Advisories

Severity ID Title Vendor Product Date Type
LOW 3.1 MS:CVE-2026-8556

Chromium: CVE-2026-8556 Inappropriate implementation in ANGLE_MS:CVE-2026-8556

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
LOW 3.1 MS:CVE-2026-8568

Chromium: CVE-2026-8568 Insufficient policy enforcement in AI_MS:CVE-2026-8568

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
LOW 3.1 MS:CVE-2026-8572

Chromium: CVE-2026-8572 Insufficient policy enforcement in Network_MS:CVE-2026-8572

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
LOW 3.1 MS:CVE-2026-8579

Chromium: CVE-2026-8579 Insufficient validation of untrusted input in Skia_MS:CVE-2026-8579

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
LOW 3.1 MS:CVE-2026-8578

Chromium: CVE-2026-8578 Out of bounds read in GPU_MS:CVE-2026-8578

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
LOW 3.5 CVE-2026-45316

Open WebUI: Read-Only Users Can Toggle Note Pin Status via Incorrect Permission Check (Write via Read-Only Access)_CVE-2026-45316

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the POST /api/v1/notes/{id}/pin ...

open-webui open-webui < 0.9.3 CVE
LOW 3.1 CVE-2026-4053

post edit time limit is not enforced on some post update operations_CVE-2026-4053

Mattermost versions 11.5.x

Mattermost Mattermost 11.5.0 CVE
LOW 3.5 CVE-2026-45803

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection_CVE-2026-45803

`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could all...

cli cli >= 1.6.0, < 2.92.0 CVE
LOW 3.1 CVE-2026-8579

CVE-2026-8579_CVE-2026-8579

Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the rende...

Google Chrome 148.0.7778.168 CVE
LOW 3.1 CVE-2026-8578

CVE-2026-8578_CVE-2026-8578

Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to l...

Google Chrome 148.0.7778.168 CVE