| | CVE-2026-3006 |  Red Hat | high | 7.0 | 0.0%
| | A flaw was found in winfsp. A local attacker could exploit a race condition vulnerability, which may… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-42371 | Red Hat | medium | 4.7 | 0.0%
| | A flaw was found in uriparser. This vulnerability occurs due to numeric truncation in text range com… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-40048 |  Apache | high | 7.8 | 0.3%
| | The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of `<keyId>.key` files in… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40453 | Apache | critical | 9.9 | 0.9%
| | The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40473 | Apache | high | 8.8 | 0.9%
| | The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40860 | Apache | critical | 9.8 | 1.2%
| | JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, des… | Apr 27, 2026 | Sep 9, 2026 |
| | CVE-2026-41635 | Apache | critical | 9.8 | 0.0%
| | Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them (for static classes… | Apr 27, 2026 | Apr 29, 2026 |
| | CVE-2026-41409 | Red Hat | low | 9.8 | 0.2%
| | A flaw was found in Apache MINA. An incomplete fix for a deserialization vulnerability in the `Abstr… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-33454 | Apache | critical | 9.4 | 0.6%
| | The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter s… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40022 | Apache | high | 8.2 | 0.6%
| | When authentication is enabled on the Apache Camel embedded HTTP server or embedded management serve… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40858 | Apache | high | 8.8 | 0.9%
| | The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data r… | Apr 27, 2026 | Sep 9, 2026 |
| | CVE-2026-27172 | Apache | high | 8.8 | 0.7%
| | The ConsulRegistry in the camel-consul component (class org.apache.camel.component.consul.ConsulRegi… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-33453 | Apache | critical | 10.0 | 6.2%
| | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apac… | Apr 27, 2026 | Jul 15, 2026 |
| | CVE-2026-40557 | Apache | medium | 4.8 | 0.0%
| | Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter… | Apr 27, 2026 | May 5, 2026 |
| | CVE-2026-41081 | Apache | medium | 6.5 | 0.0%
| | Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in … | Apr 27, 2026 | Apr 28, 2026 |
| | CVE-2026-6357 | Red Hat | medium | 5.8 | 0.0%
| | A flaw was found in pip. Prior to version 26.1, pip's self-update check functionality would execute … | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-7141 | Red Hat | medium | 5.6 | 0.1%
| | A flaw was found in vllm. A remote attacker can exploit a vulnerability in the `has_mamba_layers` fu… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-40970 | Red Hat | medium | 4.2 | 0.0%
| | A flaw was found in Spring Boot. When configured to use an SSL (Secure Sockets Layer) bundle, the El… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-40971 |  VMware | medium | 5.0 | 0.2%
| | When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hos… | Apr 27, 2026 | Jul 24, 2026 |
| | CVE-2026-42208 | Red Hat | critical | 9.8 | 54.3%
| ⚠ KEV | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7361 | Red Hat | high | 9.6 | 0.0%
| | Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentia… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7337 | Red Hat | high | 8.8 | 0.0%
| | Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute a… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7343 | Red Hat | high | 9.0 | 0.2%
| | Use after free in Views in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacke… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7355 | Red Hat | medium | 8.8 | 0.0%
| | Use after free in Media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execut… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7333 | Red Hat | high | 9.6 | 0.0%
| | Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentia… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7357 | Red Hat | high | 8.2 | 0.0%
| | Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had com… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7342 | Red Hat | high | 9.6 | 0.0%
| | Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attac… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7354 | Red Hat | high | 9.6 | 0.0%
| | Out of bounds read and write in Angle in Google Chrome prior to 147.0.7727.138 allowed a remote atta… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7350 | Red Hat | high | 9.0 | 0.0%
| | Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7344 | Red Hat | high | 9.0 | 0.0%
| | An use after free flaw was found in the Accessibility component of the Chromium browser.
Upstream bu… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7335 | Red Hat | high | 8.8 | 0.0%
| | Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execut… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7345 | Red Hat | high | 8.0 | 0.0%
| | Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allo… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7346 | Red Hat | high | 8.8 | 0.0%
| | Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attac… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7349 | Red Hat | high | 8.8 | 0.0%
| | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local net… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7363 | Red Hat | high | 9.6 | 0.0%
| | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remot… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7347 | Red Hat | high | 9.8 | 0.1%
| | Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to e… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7360 | Red Hat | high | 8.7 | 0.0%
| | An insufficient validation of untrusted input flaw was found in the Compositing component of the Chr… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7336 | Red Hat | high | 8.8 | 0.0%
| | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execu… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7348 | Red Hat | high | 8.8 | 0.0%
| | Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execu… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7359 | Red Hat | high | 9.0 | 0.0%
| | Use after free in ANGLE in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had c… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7352 | Red Hat | high | 9.0 | 0.0%
| | Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacke… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7356 | Red Hat | high | 9.6 | 0.0%
| | Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to e… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7358 | Red Hat | high | 9.6 | 0.0%
| | Use after free in Animation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to ex… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7340 | Red Hat | medium | 5.4 | 0.0%
| | An integer overflow flaw was found in the ANGLE component of the Chromium browser.
Upstream bug(s):
… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7334 | Red Hat | high | 8.8 | 0.0%
| | Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7338 | Red Hat | high | 8.8 | 0.0%
| | Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local net… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7341 | Red Hat | high | 8.8 | 0.0%
| | Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execu… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7339 | Red Hat | medium | 8.8 | 0.0%
| | Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to… | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7353 | Red Hat | high | 8.2 | 0.0%
| | Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who … | Apr 28, 2026 | Apr 28, 2026 |
| | CVE-2026-7351 | Red Hat | high | 5.5 | 0.0%
| | A race flaw was found in the MHTML component of the Chromium browser.
Upstream bug(s):
https://code.… | Apr 28, 2026 | Apr 28, 2026 |