Skip to main content

FeedThreat feed CoverageCoverage gaps ScoringHow we score ManageManage subscription

UK cyber threats that need action now

Updated 3 Nov 2026, 00:00 UK time

See every Critical and High event

Skip to stories

Filter by product or application

Priority

Critical needs authoritative evidence or human approval before it is published, so it cannot be filtered yet.

Type

Vendorcraft

Show

Density

…

Loading feed…

Follow this feed in a reader: RSS or JSON Feed.

Apexward Pulse is a product of Apexward Group. Content is for general information only and is not official government or law-enforcement advice.

Website terms·Privacy policy·AI responsibility

0 new todaynew today
0 this weekthis week
0 CriticalCritical this week
0 claimsransomware claims today

No Critical or High events in this view.

Updated 9 Nov 2026, 03:15 UK time

Craft CMS Code Injection Vulnerability
Type Vulnerability
Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code. Known-exploited catalogue reports exploitation in the wild.
Craft CMS
CVE-2025-32432Updated 2h ago
A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries
Type Vulnerability
Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorised actions, or compromise data. Known-exploited catalogue reports exploitation in the wild.
MongoDB Server Advanced Manufacturing
CVE-2025-14847+1Updated 3h ago
Use after free in WebXR in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted…
Type Vulnerability
M-156, ChromeOS version 16836.32.0 (Browser version 156.0.8078.93）has rolled out to ChromeOS devices on the Stable channel.
Google Chrome
CVE-2026-121076+9Updated 2d ago
Authorisation Flaw in Input in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-76031Updated 4d ago
Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page
Type Vulnerability
A vulnerability in Google Chrome prior to version 156.0.8078.79 allowed a remote attacker to access cross-origin data through a crafted HTML page.
Google Chrome Microsoft Edge
CVE-2026-76027Updated 4d ago
Input Validation Flaw in Network in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic
Type Vulnerability
A vulnerability in Google Chrome's Network component before version 156.0.8078.79 allowed remote code execution inside the sandbox via crafted network traffic.
Google Chrome Microsoft Edge
CVE-2026-76029Updated 4d ago
Use after free in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
A vulnerability in Google Chrome's MediaStream allowed remote code execution inside the sandbox via a crafted HTML page.
Google Chrome Microsoft Edge
CVE-2026-76024Updated 4d ago
Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page
Type Vulnerability
A vulnerability in Google Chrome's Autofill feature prior to version 156.0.8078.79 allowed remote attackers to bypass web origin policies using crafted HTML pages.
Google Chrome Microsoft Edge
CVE-2026-76026Updated 4d ago
Use after free in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119267Updated 4d ago
Authorisation Flaw in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted…
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119272Updated 4d ago
Use after free in Editing in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119268Updated 4d ago
Authorisation Flaw in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119269Updated 4d ago
Use after free in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page
Type Vulnerability
A vulnerability in Google Chrome versions prior to 156.0.8078.79 could allow a remote attacker to execute arbitrary code outside the sandbox using a crafted HTML page.
Google Chrome Microsoft Edge
CVE-2026-119264Updated 4d ago
Use after free in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119263Updated 4d ago
Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119262Updated 4d ago
Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-119260+20Updated 4d ago
Use after free in Prerender in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page
Type Vulnerability
The Chrome team is delighted to announce the promotion of Chrome 157 to the stable channel for Windows, Mac and Linux.
Google Chrome Google Chrome
CVE-2026-121035+25Updated 5d ago
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database…
Type Vulnerability
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of…
Sqlite Financial Services Advanced Manufacturing+1 more
CVE-2026-11822+4Updated 6d ago
Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-106311Updated 6d ago
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrom…
Type Vulnerability
Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Google Chrome Microsoft Edge
CVE-2026-106312Updated 6d ago