CISA Known Exploited Vulnerabilities

CVE-2026-125350: Google Chromium Use-After-Free Vulnerability

Tuesday, 10 November

Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web...

Summary from the publisher's feed.

Read at CISA Known Exploited Vulnerabilities All news

More in Exploited now

13 NovCVE-2026-114713: UnrealIRCd Improper Neutralization of Delimiters VulnerabilityCISA Known Exploited Vulnerabilities
13 NovCVE-2026-123039: Check Point Multiple Products Incorrect Permission Assignment for Critical Resource VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities
9 NovCVE-2026-102895: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities