CVE-2026-13474: Citrix NetScaler HTTP/2 Denial-of-Service Vulnerability
A missing release of memory after effective lifetime vulnerability in Citrix NetScaler ADC and Gateway via malformed HTTP/2 requests, leading to denial-of-service.…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-3055 — Vulnerability brief
CVE-2026-3055 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing…
CVE-2026-14120 — Critical vulnerability brief
CVSS 9.6Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially…
CVE-2026-14109 — Critical vulnerability brief
CVSS 9.6Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-14101 — Critical vulnerability brief
CVSS 9.6Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer…
CVE-2026-14104 — Critical vulnerability brief
CVSS 9.8Insufficient validation of untrusted input in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside…
CVE-2026-14106 — Critical vulnerability brief
CVSS 9.6Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised…
CVE-2026-13782 — Critical vulnerability brief
CVSS 10Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to…
CVE-2026-13785 — Critical vulnerability brief
CVSS 9.6Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to…