CVE-2026-47252Critical 9.0Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)0.7%
CVE-2026-54628High 8.6Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode0.6%
CVE-2026-50006Critical 9.1Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode1.0%
CVE-2026-54629High 7.5Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode1.0%
CVE-2026-47253High 7.3Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion0.4%