Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 04:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

156-74% vs 7-day avg of 598

2 critical, 44 high, 62 medium, 28 low

Expand	Severity	Score	Advisory	Title	Source	Flags	Published
	High	8.8	CVE-2026-115895	Happy DOM is a JavaScript implementation of a web browser without its graphical user interface capricorn86, Happy DOMcapricorn86 happy-dom, Happy DOM	NVD		Oct 23 22:16 UTC
CVE-2026-115895Happy DOM is a JavaScript implementation of a web browser without its graphical user interface Executive summary The advisory covers a fix in Happy DOM, a JavaScript browser implementation, that changes how module import aliases are handled so they are not run as executable code. The advisory text provided is a code diff and does not state a severity rating or explicitly describe an exploit impact. Vendor recommendations beyond the code change are not stated. Technical summary The diff changes ECMAScriptModuleCompiler.ts so that import alias names are validated against a Unicode-aware identifier pattern and property names are emitted through JSON.stringify rather than raw string interpolation, which the added test describes as preventing unsanitized import aliases from being interpolated as executable code. A test named for this case checks that a marker global is not set after execution. The advisory does not state a CVE description, vulnerability class label, attack vector, preconditions, affected versions, fixed versions, CVSS score, workarounds, or detection guidance. The remaining diff mostly adds public suffix list entries and CSS property mappings, which are not described as security fixes. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/capricorn86/happy-dom/commit…91f7b4e4f46d6cccbe13 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction Required Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affects capricorn86 Happy DOM capricorn86 happy-dom Happy DOM NIST National Vulnerability DatabasePublished Oct 23, 2026 22:16 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee