CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 Out-of-Bounds Read/Write Vulnerability (CVE-2026-11645) Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 149.0.7827.103
[Impact] Remote attackers can execute arbitrary code inside the V8 sandbox via a crafted HTML page
[Mitigation] Immediately update Google Chrome to the latest stable version (149.0.7827.103 or higher)
Citrix NetScaler ADC & Gateway SAML IDP Memory Overread Vulnerability (CVE-2026-3055) Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured to act as a SAML Identity Provider (IDP)
[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory read, potentially exposing highly sensitive session tokens, credentials, or SSL private keys, and facilitating remote code execution
[Mitigation] Immediately apply the official security updates provided by Citrix, or temporarily disable the SAML IDP configuration if patching cannot be performed immediately
Windows Common Log File System (CLFS) Driver Elevation of Privilege Vulnerability (CVE-2023-36424) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the CLFS driver, including Windows 10, 11, and Windows Server 2016, 2019, 2022
[Impact] A locally authenticated attacker can execute a specially crafted application to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the system
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft and monitor unpatched assets