CVEs published in May 2026

CVE-2026-41863Medium

Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to…

CVE-2026-14164High

Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack

CVE-2026-43503High

propagate shared-frag marker through frag-transfer helpers

CVE-2026-45659HighCISA KEV

Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability

CVE-2026-26147High

Azure Stack HCI Information Disclosure Vulnerability

CVE-2026-5843High

Docker Desktop: The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directories via the model_file configuration field in config.json

CVE-2026-5817High

Docker Desktop: The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing

CVE-2026-6406High

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop

CVE-2026-8992High

improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6

CVE-2026-27136Critical

Cross-Site Scripting via HTML parsing bypass

CVE-2026-42506Critical

Cross-Site Scripting (XSS) via arbitrary HTML parsing

CVE-2026-39821Critical

Privilege escalation via incorrect Punycode label processing

CVE-2026-25681Critical

Arbitrary code execution via Cross-Site Scripting

CVE-2026-25680Critical

Denial of Service due to excessive HTML parsing

CVE-2026-9256Critical

code execution and denial of service

CVE-2026-44417High

Remote Code Execution via untrusted JMS configuration

CVE-2026-44930Critical

org.apache.cxf.services.xkms/cxf-services-xkms-x509-repo-ldap: Apache CXF: Information Disclosure via LDAP Injection

CVE-2026-46595Critical

Authorization bypass due to skipped source-address validation

CVE-2026-42508Critical

Revocation bypass via unchecked SignatureKey

CVE-2026-39830Critical

Denial of Service via resource leak from unsolicited SSH responses

CVE-2026-39829Critical

Denial of Service via crafted public key with excessive parameters

CVE-2026-39835Critical

Denial of Service via crafted SSH certificate

CVE-2026-39832Critical

Security bypass due to improper handling of key restrictions

CVE-2026-39828Critical

Unauthorized command execution via discarded SSH permissions

CVE-2026-5946High

Denial of Service via specially crafted DNS messages

CVE-2026-3039High

ISC BIND Vulnerability in NetApp Products

CVE-2026-5947High

SIG(0) validation during query flood may lead to undefined behavior

CVE-2026-3593High

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

CVE-2026-43501Critical

reserve mac_len headroom when recompressed SRH grows

CVE-2026-20223Critical

Cisco Secure Workload Unauthorized API Access Vulnerability

CVE-2026-20206Medium

Cisco ThousandEyes Enterprise Agent BrowserBot Command Injection Vulnerability

CVE-2026-20199Medium

Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

CVE-2026-20171Medium

Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability

CVE-2026-43618High

Remote memory disclosure via integer overflow in compressed-token decoding

CVE-2026-29518High

TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.

CVE-2026-45585Medium

Windows BitLocker Security Feature Bypass Vulnerability

CVE-2025-20362UnratedCISA KEV

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

CVE-2025-20333UnratedCISA KEV

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

CVE-2026-8711Critical

NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*, $cookie_*) and a location invoking the ngx.fetch operation from NGINX JavaScript

CVE-2026-47323Critical

Remote Code Execution via header injection due to missing inbound filtering

CVE-2026-45434Unrated

Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE

CVE-2026-35086Unrated

Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services

CVE-2026-9120Critical

Use after free in WebRTC

CVE-2026-9118Critical

Use after free in XR

CVE-2026-9117High

Type Confusion in GFX

CVE-2026-9116High

Insufficient policy enforcement in ServiceWorker

CVE-2026-9115Critical

Insufficient policy enforcement in Service Worker

CVE-2026-9114Critical

Use after free in QUIC

CVE-2026-9113High

Out of bounds read in GPU

CVE-2026-9112High

Use after free in GPU

CVE-2026-9111High

Use after free in WebRTC

CVE-2026-46331High

extend the writable skb range per key

CVE-2026-41702High

VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID…

CVE-2026-46333High

Read root-owned files as an unprivileged user

CVE-2026-7009Medium

Libcurl Vulnerability in NetApp Products

CVE-2026-2391Critical

Qs Vulnerability in NetApp Products

CVE-2026-8559High

Integer overflow in Internationalization

CVE-2026-8557Critical

Use after free in Accessibility

CVE-2026-8556High

Inappropriate implementation in ANGLE

CVE-2026-8555High

Use after free in GTK

CVE-2026-8554Critical

Type Confusion in ANGLE

CVE-2026-8553Critical

Use after free in GPU

CVE-2026-8552High

Heap buffer overflow in GPU

CVE-2026-8551High

Use after free in Downloads

CVE-2026-8550High

Use after free in Google Lens

CVE-2026-8549High

Use after free in Media

CVE-2026-8548Critical

Out of bounds write in Media

CVE-2026-8547Critical

Insufficient policy enforcement in Passwords

CVE-2026-8546High

Out of bounds read in GPU

CVE-2026-8545High

Object corruption in Compositing

CVE-2026-8544High

Use after free in Media

CVE-2026-8543High

Out of bounds read in FileSystem

CVE-2026-8542High

Use after free in Core

CVE-2026-8541High

Out of bounds read in UI

CVE-2026-8540High

Type Confusion in V8

CVE-2026-8539High

Script injection in SanitizerAPI

CVE-2026-8538High

Insufficient validation of untrusted input in GPU

CVE-2026-8537High

Insufficient policy enforcement in ViewTransitions

CVE-2026-8536High

Insufficient validation of untrusted input in ReadingMode

CVE-2026-8535High

Out of bounds read in Media

CVE-2026-8534Critical

Integer overflow in GPU

CVE-2026-8533Critical

Use after free in Accessibility

CVE-2026-8532High

Integer overflow in XML

CVE-2026-8531Critical

Heap buffer overflow in WebML

CVE-2026-8530Critical

Use after free in Network

CVE-2026-8529High

Heap buffer overflow in Codecs

CVE-2026-8528High

Insufficient validation of untrusted input in SiteIsolation

CVE-2026-8527High

Insufficient validation of untrusted input in Downloads

CVE-2026-8526Critical

Out of bounds write in WebRTC

CVE-2026-8525Critical

Heap buffer overflow in ANGLE

CVE-2026-8558High

Out of bounds write in Fonts

CVE-2026-8524Critical

Out of bounds write in WebAudio

CVE-2026-8523Critical

Use after free in Mojo

CVE-2026-8522High

Use after free in Downloads

CVE-2026-8521High

Use after free in Tab Groups

CVE-2026-8520High

Race in Payments

CVE-2026-8519High

Integer overflow in ANGLE

CVE-2026-8518Critical

Use after free in Blink

CVE-2026-8517Critical

Object lifecycle issue in WebShare

CVE-2026-8516High

Insufficient validation of untrusted input in DataTransfer