CVE & Exploit Intelligence Database

CVE-2026-3914

Integer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-472 Mar 11, 2026

CVE-2026-3538 8.8 HIGH EPSS 0.00

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)

CWE-191 Mar 04, 2026

CVE-2026-3536 8.8 HIGH EPSS 0.00

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)

CWE-472 Mar 04, 2026

CVE-2026-2649 8.8 HIGH EPSS 0.00

Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-472 Feb 18, 2026

CVE-2025-14750 EPSS 0.00

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges.

CWE-472 Jan 22, 2026

CVE-2025-67846 4.9 MEDIUM EPSS 0.00

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that contains unpatched vulnerabilities. By browsing directly to the specific git-ref or deployment-id subdomain, the attacker can force the application to load the vulnerable version.

CWE-472 Dec 19, 2025

CVE-2025-66385 1 Writeup EPSS 0.00

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a higher role such as admin) via the user-edit endpoint by supplying or modifying role_id or organisation_id fields in the edit request.

CWE-472 Nov 28, 2025

CVE-2025-10892 8.8 HIGH EPSS 0.00

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-190 Sep 24, 2025

CVE-2025-10891 8.8 HIGH EPSS 0.00

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-472 Sep 24, 2025

CVE-2025-54551 4.3 MEDIUM EPSS 0.00

Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the search function.

CWE-472 Aug 20, 2025

CVE-2025-54832 4.3 MEDIUM EPSS 0.00

OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.

CWE-472 Jul 31, 2025

CVE-2025-8198 7.5 HIGH EPSS 0.00

The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticated attackers to add items to the cart and adjust the quantity to a fractional amount, causing the price to change based on the fractional amount. The vulnerability cannot be exploited if WooCommerce version 9.8.2+ is installed.

CWE-472 Jul 26, 2025

CVE-2025-7656 8.8 HIGH EPSS 0.00

Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CWE-472 Jul 15, 2025

CVE-2025-43933 9.8 CRITICAL 1 Writeup EPSS 0.00

fblog through 983bede allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.

CWE-472 Jul 07, 2025

CVE-2025-43930 9.8 CRITICAL 1 Writeup EPSS 0.00

Hashview 0.8.1 allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.

CWE-472 Jul 07, 2025

CVE-2025-6191 8.8 HIGH EPSS 0.00

Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE-190 Jun 18, 2025

CVE-2025-43002 4.3 MEDIUM EPSS 0.00

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.

CWE-472 May 13, 2025

CVE-2025-47817 8.8 HIGH 1 Writeup EPSS 0.00

In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.

CWE-472 May 10, 2025

CVE-2025-35939 5.3 MEDIUM KEV EPSS 0.30

Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at '/var/lib/php/sessions'. Such session files are named 'sess_[session_value]', where '[session_value]' is provided to the client in a 'Set-Cookie' response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.

CWE-472 May 07, 2025

CVE-2025-47245 8.1 HIGH 1 Writeup EPSS 0.00

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

CWE-472 May 04, 2025