CVEs published in May 2026
655 tracked CVEs from 23 vendors had their first vendor advisory published in May 2026: 169 critical, 357 high, 8 in CISA KEV. Newest first.
351 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-9941High
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9940High
Heap buffer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9939High
Heap buffer overflow in WebCodecs
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9938High
Inappropriate implementation in V8
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9937Critical
Use after free in UI
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9936Critical
Use after free in GFX
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9935High
Uninitialized Use in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9934High
Use after free in Aura
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9933High
Use after free in Input
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9932Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9931High
Use after free in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9930High
Out of bounds write in Dawn
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9929High
Inappropriate implementation in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9928Critical
Out of bounds read in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9927Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9926Critical
Heap buffer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9925High
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9924High
Heap buffer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9923High
Use after free in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9922Critical
Use after free in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9921High
Uninitialized Use in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9920High
Uninitialized Use in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9919High
Out of bounds read in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9918Critical
Inappropriate implementation in Tint
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9917High
Uninitialized Use in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9916High
Out of bounds write in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9915Critical
Heap buffer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9914Critical
Insufficient validation of untrusted input in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9913High
Inappropriate implementation in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9912High
Inappropriate implementation in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9911High
Integer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9910High
Out of bounds memory access in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9909High
Integer overflow in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9908High
Out of bounds read in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9907High
Out of bounds read in Dawn
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9906Critical
Out of bounds write in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9905Critical
Use after free in Accessibility
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9904Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9903High
Insufficient validation of untrusted input in Site Isolation
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9902Critical
Use after free in Accessibility
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9901Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9900High
Out of bounds write in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9899Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9898Critical
Insufficient validation of untrusted input in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9897Critical
Use after free in DOM
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9896Critical
Out of bounds write in V8
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9895High
Out of bounds read in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9894High
Use after free in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9893High
Use after free in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9892High
Inappropriate implementation in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9891Critical
Use after free in Extensions
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9890Critical
Use after free in XR
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9889Critical
Out of bounds read and write in Dawn
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9888Critical
Use after free in WebView
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9887Critical
Use after free in Proxy
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9886Critical
Use after free in Base
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9885Critical
Insufficient validation of untrusted input in UI
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9884Critical
Use after free in Browser
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9883Critical
Use after free in Base
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9882High
Integer overflow in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9881High
Use after free in Bluetooth
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9880High
Insufficient validation of untrusted input in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9879Critical
Out of bounds write in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9878High
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9877Critical
Use after free in ANGLE
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9876Critical
Use after free in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9875Critical
Out of bounds read in WebGL
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9874Critical
Use after free in Dawn
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9873Critical
Use after free in Network
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-9872Critical
Out of bounds write in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10016High
Use after free in DOM
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10015High
Integer overflow in WTF
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10014Critical
Use after free in WebMIDI
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10013Critical
Use after free in WebCodecs
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10012High
Use after free in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10011High
Inappropriate implementation in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10010High
Inappropriate implementation in Input
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10009Critical
Integer overflow in Skia
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10008High
Uninitialized Use in GPU
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10007High
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10006Critical
Race in WebAudio
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10005Critical
Use after free in WebAppInstalls
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10004High
Insufficient validation of untrusted input in Passwords
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10003High
Use after free in Views
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10002High
Use after free in PDFium
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10001High
Use after free in PerformanceManager
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-10000High
Use after free in Passwords
Palo Alto, Red Hat · 2 advisories - Added
CVE-2026-48710CriticalCISA KEV
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
NetApp, Red Hat · 3 advisories - Added
CVE-2026-48136Medium
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC)
Check Point · 1 advisory - Added
CVE-2026-48135Medium
Check Point HTTP-based service can incorrectly handle malformed HTTP requests
Check Point · 1 advisory - Added
CVE-2026-48134Medium
Check Point: When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow.
Check Point · 1 advisory - Added
CVE-2026-48133High
Check Point: When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user
Check Point · 1 advisory - Added
CVE-2026-48132High
Check Point: The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP).
Check Point · 1 advisory - Added
CVE-2026-48131High
Check Point: The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a…
Check Point · 1 advisory - Added
CVE-2026-4480Critical
Remote Code Execution in printing subsystem via unescaped job description
NetApp, Red Hat · 2 advisories - Added
CVE-2026-3592Medium
ISC BIND Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-5950Medium
Unbounded resend loop in BIND 9 resolver
NetApp, Red Hat · 2 advisories - Added
CVE-2026-4795Medium
missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv3 firmware versions through 1.00(ACPV.2)C0, and GS1200-10v3 firmware versions through 1.00(ACPW.2)C0 could allow a LAN-based, unauthenticated attacker to read the system configuration from a log file via a crafted HTTP request
Zyxel · 1 advisory - Added
CVE-2026-42496Critical
Path traversal via crafted symlinks allows arbitrary file access
NetApp, Red Hat · 2 advisories - Added
CVE-2026-4408Critical
Remote Code Execution in SAMR
NetApp, Red Hat · 2 advisories