| CVE-2026-72105 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit ma | 75d ago |
| CVE-2026-72102 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_ | 75d ago |
| CVE-2026-72095 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust | 75d ago |
| CVE-2026-72093 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_g | 75d ago |
| CVE-2026-72090 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO | 75d ago |
| CVE-2026-72080 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount | 75d ago |
| CVE-2026-72072 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metad | 75d ago |
| CVE-2026-72071 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in use | 75d ago |
| CVE-2026-72067 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback e | 75d ago |
| CVE-2026-72066 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs outpu | 75d ago |
| CVE-2026-72042 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in event del | 75d ago |
| CVE-2026-72036 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue | 75d ago |
| CVE-2026-72034 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt | 75d ago |
| CVE-2026-72027 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() pro | 75d ago |
| CVE-2026-72024 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list del | 75d ago |
| CVE-2026-72018 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in mo | 75d ago |
| CVE-2026-72012 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when u | 75d ago |
| CVE-2026-72009 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as share | 75d ago |
| CVE-2026-72005 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work | 75d ago |
| CVE-2026-68479 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch boun | 75d ago |
| CVE-2026-68474 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: powerpc/spufs: fix out-of-bounds access in spu | 75d ago |
| CVE-2026-68473 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: powerpc/uaccess: correct check for CONFIG_PPC_ | 75d ago |
| CVE-2026-68467 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip c | 75d ago |
| CVE-2026-68462 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative const offsets for buffer | 75d ago |
| CVE-2026-68461 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fiel | 75d ago |
| CVE-2026-68458 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroe | 75d ago |
| CVE-2026-69414 | 7.8 | — | — | — | microsoft / malware protection engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender p | 75d ago |
| CVE-2026-50523 | 7.8 | — | — | — | microsoft / powershell | Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows | 75d ago |
| CVE-2026-46439 | 7.8 | — | — | — | — | compliance-trestle is a tooling platform for managing compliance as code. | 75d ago |
| CVE-2026-63700 | 7.8 | — | — | — | dell / wyse management suite | Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerabilit | 75d ago |
| CVE-2026-16898 | 7.8 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files | 76d ago |
| CVE-2026-18071 | 7.8 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege ma | 76d ago |
| CVE-2026-73505 | 7.8 | — | — | — | — | Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. | 76d ago |
| CVE-2026-68452 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES ciphe | 76d ago |
| CVE-2026-68451 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC priva | 76d ago |
| CVE-2026-63425 | 7.8 | — | — | — | — | During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Do | 76d ago |
| CVE-2026-63423 | 7.8 | — | — | — | — | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display | 76d ago |
| CVE-2026-53803 | 7.8 | — | — | — | samba / rsync | rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary f | 76d ago |
| CVE-2026-0299 | 7.8 | — | — | — | paloaltonetworks / globalprotect | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to esca | 77d ago |
| CVE-2026-19003 | 7.8 | — | — | — | — | A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Drive | 77d ago |
| CVE-2026-16695 | 7.8 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due | 77d ago |
| CVE-2026-13367 | 7.8 | — | — | — | ibm / informix dynamic server | IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setui | 77d ago |
| CVE-2026-13094 | 7.8 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when i | 77d ago |
| CVE-2026-59917 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu | 77d ago |
| CVE-2026-59916 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu | 77d ago |
| CVE-2026-59914 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b | 77d ago |
| CVE-2026-46731 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b | 77d ago |
| CVE-2026-73325 | 7.8 | — | — | — | — | Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allow | 77d ago |
| CVE-2026-14478 | 7.8 | — | — | — | autodesk / installer | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker | 77d ago |
| CVE-2026-12234 | 7.8 | — | — | — | — | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/socket | 78d ago |
| CVE-2026-68446 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::arr | 78d ago |
| CVE-2026-68445 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becom | 78d ago |
| CVE-2026-68442 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to | 78d ago |
| CVE-2026-68440 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading mod | 78d ago |
| CVE-2026-66150 | 7.8 | — | — | — | — | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance | 78d ago |
| CVE-2026-66149 | 7.8 | — | — | — | — | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance | 78d ago |
| CVE-2026-73234 | 7.8 | — | — | — | — | FreeCAD is a free and open-source multiplatform 3D parametric modeler. | 78d ago |
| CVE-2026-73231 | 7.8 | — | — | — | — | Faker generates massive amounts of fake data in the browser and Node.js. | 78d ago |
| CVE-2026-48410 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 78d ago |
| CVE-2026-48409 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 78d ago |
