| CVE-2026-64304 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengt | 96d ago |
| CVE-2026-64300 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_rang | 96d ago |
| CVE-2026-64296 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir | 96d ago |
| CVE-2026-64293 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hd | 96d ago |
| CVE-2026-64279 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Ada | 96d ago |
| CVE-2026-64277 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F3A keymap t | 96d ago |
| CVE-2026-64276 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap t | 96d ago |
| CVE-2026-64274 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported cont | 96d ago |
| CVE-2026-64273 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported forc | 96d ago |
| CVE-2026-64272 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S | 96d ago |
| CVE-2026-64271 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ev | 96d ago |
| CVE-2026-64270 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device pac | 96d ago |
| CVE-2026-64266 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fu | 96d ago |
| CVE-2026-64265 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse | 96d ago |
| CVE-2026-64261 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring | 96d ago |
| CVE-2026-64260 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set | 96d ago |
| CVE-2026-64259 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only | 96d ago |
| CVE-2025-71408 | 7.8 | — | — | — | nltk / nltk | NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocat | 96d ago |
| CVE-2026-64251 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_deb | 96d ago |
| CVE-2026-64249 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regi | 96d ago |
| CVE-2026-64246 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-af | 96d ago |
| CVE-2026-64245 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_m | 96d ago |
| CVE-2026-64242 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe | 96d ago |
| CVE-2026-64239 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in | 96d ago |
| CVE-2026-64226 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn | 96d ago |
| CVE-2026-64225 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_spe | 96d ago |
| CVE-2026-64224 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_ | 96d ago |
| CVE-2026-64221 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA set | 96d ago |
| CVE-2026-64218 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backb | 96d ago |
| CVE-2026-64217 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user | 96d ago |
| CVE-2026-49745 | 7.8 | — | — | — | imaginationtech / ddk | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger | 97d ago |
| CVE-2026-49744 | 7.8 | — | — | — | imaginationtech / ddk | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger | 97d ago |
| CVE-2026-49743 | 7.8 | — | — | — | imaginationtech / ddk | Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifeti | 97d ago |
| CVE-2026-14172 | 7.8 | — | — | — | — | Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment wi | 97d ago |
| CVE-2026-38764 | 7.8 | — | — | — | — | An issue in Unistal Systems Pvt. | 97d ago |
| CVE-2026-65706 | 7.8 | — | — | — | ffmpeg / ffmpeg | FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter tha | 97d ago |
| CVE-2026-65705 | 7.8 | — | — | — | ffmpeg / ffmpeg | FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter th | 97d ago |
| CVE-2026-65704 | 7.8 | — | — | — | ffmpeg / ffmpeg | FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption | 97d ago |
| CVE-2026-65703 | 7.8 | — | — | — | ffmpeg / ffmpeg | FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allo | 97d ago |
| CVE-2026-60122 | 7.8 | — | — | — | — | gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utili | 97d ago |
| CVE-2026-64811 | 7.8 | — | — | — | jetbrains / intellij idea | In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via d | 98d ago |
| CVE-2026-64807 | 7.8 | — | — | — | jetbrains / webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configurat | 98d ago |
| CVE-2026-64803 | 7.8 | — | — | — | jetbrains / goland | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the conf | 98d ago |
| CVE-2026-64802 | 7.8 | — | — | — | jetbrains / goland | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Mo | 98d ago |
| CVE-2026-16287 | 7.8 | — | — | — | — | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITA | 98d ago |
| CVE-2026-64600 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycl | 98d ago |
| CVE-2026-38766 | 7.8 | — | — | — | — | An issue in Unistal Systems Pvt. | 98d ago |
| CVE-2026-38765 | 7.8 | — | — | — | — | An issue in Unistal Systems Pvt. | 98d ago |
| CVE-2025-60835 | 7.8 | — | — | — | — | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. | 98d ago |
| CVE-2026-14881 | 7.8 | — | — | — | — | When importing connections in Compass it is possible to override some connection options that are otherwise can't | 98d ago |
| CVE-2026-16157 | 7.8 | — | — | — | — | Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectori | 98d ago |
| CVE-2026-16607 | 7.8 | — | — | — | — | A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 | 98d ago |
| CVE-2026-14985 | 7.8 | — | — | — | — | The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability i | 98d ago |
| CVE-2026-44191 | 7.8 | — | — | — | — | A flaw was found in the Visual Studio Code Ansible Lightspeed extension. | 99d ago |
| CVE-2026-44190 | 7.8 | — | — | — | — | A flaw was found in the Ansible Lightspeed Visual Studio Code extension. | 99d ago |
| CVE-2026-44189 | 7.8 | — | — | — | — | A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider. | 99d ago |
| CVE-2026-16414 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local | 99d ago |
| CVE-2026-62574 | 7.8 | — | — | — | oracle / jre | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle J | 99d ago |
| CVE-2026-62561 | 7.8 | — | — | — | oracle / human resources management system | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). | 99d ago |
| CVE-2026-61126 | 7.8 | — | — | — | oracle / communications billing and revenue management | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (compon | 99d ago |
