| | CVE-2026-33227 |  Apache | medium | 4.3 | 0.1%
| | Improper validation and restriction of a classpath path name vulnerability in
Apache ActiveMQ Cli… | Apr 7, 2026 | Apr 20, 2026 |
| | CVE-2026-28810 |  Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in Erlang/OTP kernel. The built-in DNS resolver (inet_res) uses predictable 16-bit … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-1839 | Red Hat | medium | 6.7 | 0.0%
| | A flaw was found in HuggingFace Transformers. A remote attacker can exploit this vulnerability by su… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-31790 | Red Hat | medium | 5.9 | — | | A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely e… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5745 | Red Hat | medium | 5.5 | — | | A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing l… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-31789 | Red Hat | low | 5.8 | 0.0%
| ✓ Fix | Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-28389 | Red Hat | low | 5.9 | 0.1%
| ✓ Fix | Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyAgreeRecipientInfo a… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-28388 | Red Hat | low | 5.9 | 0.0%
| ✓ Fix | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension
is processed a NULL po… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-28387 | Red Hat | low | 3.7 | 0.0%
| ✓ Fix | Issue summary: An uncommon configuration of clients performing DANE TLSA-based
server authentication… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-28386 | Red Hat | medium | 5.9 | 0.0%
| ✓ Fix | Issue summary: Applications using AES-CFB128 encryption or decryption on
systems with AVX-512 and VA… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5914 | Red Hat | low | 5.0 | 0.0%
| | Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a us… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5868 | Red Hat | high | 8.8 | 0.1%
| | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attack… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5861 | Red Hat | high | 9.6 | 0.2%
| | Use after free in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute ar… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5877 | Red Hat | medium | 9.6 | 0.2%
| | Use after free in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to ex… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5864 | Red Hat | high | 6.5 | 0.0%
| | Heap buffer overflow in WebAudio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker t… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5902 | Red Hat | low | 3.7 | 0.1%
| | Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had c… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5897 | Red Hat | low | 4.3 | 0.0%
| | Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5903 | Red Hat | low | 6.1 | 0.0%
| | Policy bypass in IFrameSandbox in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5885 | Red Hat | medium | 6.5 | 0.0%
| | Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5908 | Red Hat | low | 8.8 | 0.1%
| | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to poten… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5907 | Red Hat | low | 5.4 | 0.1%
| | An insufficient data validation flaw was found in the Media component of the Chromium browser.
Upstr… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5909 | Red Hat | low | 9.6 | 0.1%
| | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to poten… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5893 | Red Hat | medium | 9.6 | 0.0%
| | Race in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5896 | Red Hat | low | 6.1 | 0.0%
| | Policy bypass in Audio in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinc… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5881 | Red Hat | medium | 5.4 | 0.0%
| | Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacke… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5919 | Red Hat | low | 7.7 | 0.0%
| | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 all… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5860 | Red Hat | high | 9.6 | 0.1%
| | Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execut… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5867 | Red Hat | high | 6.5 | 0.0%
| | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to o… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5878 | Red Hat | medium | 5.4 | 0.0%
| | Incorrect security UI in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to … | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5900 | Red Hat | low | 4.3 | 0.0%
| | Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypa… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5876 | Red Hat | medium | 7.4 | 0.0%
| | Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a rem… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5887 | Red Hat | medium | 4.3 | 0.0%
| | Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5862 | Red Hat | high | 8.8 | 0.1%
| | Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5883 | Red Hat | medium | 9.6 | 0.1%
| | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5890 | Red Hat | medium | 6.5 | 0.0%
| | A race flaw was found in the WebCodecs component of the Chromium browser.
Upstream bug(s):
https://c… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5891 | Red Hat | medium | 4.1 | 0.1%
| | Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remo… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5901 | Red Hat | low | 3.9 | 0.0%
| | Insufficient policy enforcement in DevTools in Google Chrome prior to 147.0.7727.55 allowed an attac… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5899 | Red Hat | low | 8.0 | 0.0%
| | Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowe… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5889 | Red Hat | medium | 6.2 | 0.0%
| | Cryptographic Flaw in PDFium in Google Chrome prior to 147.0.7727.55 allowed an attacker to read pot… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5912 | Red Hat | low | 9.6 | 0.1%
| | Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perf… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5869 | Red Hat | high | 6.5 | 0.0%
| | Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to o… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5879 | Red Hat | medium | 8.8 | 0.2%
| | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 a… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5905 | Red Hat | low | 4.3 | 0.0%
| | Incorrect security UI in Permissions in Google Chrome on Windows prior to 147.0.7727.55 allowed a re… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5886 | Red Hat | medium | 6.5 | 0.0%
| | Out of bounds read in WebAudio in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attac… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5865 | Red Hat | high | 9.6 | 0.1%
| | Type Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute ar… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5913 | Red Hat | low | 5.4 | 0.1%
| | Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to per… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5906 | Red Hat | low | 4.3 | 0.0%
| | An incorrect security ui flaw was found in the Omnibox component of the Chromium browser.
Upstream b… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5910 | Red Hat | low | 8.8 | 0.1%
| | Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to poten… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5866 | Red Hat | high | 9.6 | 0.2%
| | Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute… | Apr 7, 2026 | Apr 7, 2026 |
| | CVE-2026-5884 | Red Hat | medium | 8.0 | 0.1%
| | Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed … | Apr 7, 2026 | Apr 7, 2026 |