CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

15,513 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 8 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-61091	7.8	—	—	—	oracle / communications billing and revenue management	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (compon	99d ago
CVE-2026-61090	7.8	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous).	99d ago
CVE-2026-61055	7.8	—	—	—	oracle / peoplesoft enterprise scm order management	Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security)	99d ago
CVE-2026-61053	7.8	—	—	—	oracle / communications billing and revenue management elastic charging engine	Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (compone	99d ago
CVE-2026-60973	7.8	—	—	—	oracle / e-business tax	Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).	99d ago
CVE-2026-60661	7.8	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).	99d ago
CVE-2026-60625	7.8	—	—	—	oracle / data integrator	Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio).	99d ago
CVE-2026-60600	7.8	—	—	—	oracle / peoplesoft enterprise fin project costing	Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects).	99d ago
CVE-2026-60570	7.8	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Libraries).	99d ago
CVE-2026-60530	7.8	—	—	—	oracle / http server	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so).	99d ago
CVE-2026-60454	7.8	—	—	—	oracle / http server	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60271	7.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	99d ago
CVE-2026-60150	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	99d ago
CVE-2026-47054	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	99d ago
CVE-2026-47047	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	99d ago
CVE-2026-59146	7.8	—	—	—	—	Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucke	99d ago
CVE-2026-50757	7.8	—	—	—	—	Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitra	99d ago
CVE-2026-16493	7.8	—	—	—	—	A flaw was found in ansible-core.	99d ago
CVE-2026-8933	7.8	—	—	—	—	A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internall	99d ago
CVE-2026-15905	7.8	—	—	—	google / chrome	Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit he	100d ago
CVE-2026-64624	7.8	—	—	—	freerdp / freerdp	FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing	100d ago
CVE-2026-48389	7.8	—	—	—	adobe / dng software development kit	DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could res	100d ago
CVE-2026-64191	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with inv	100d ago
CVE-2026-64189	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip	100d ago
CVE-2026-64188	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-f	100d ago
CVE-2026-35591	7.8	—	—	—	libvips / libvips	libvips is a fast image processing library with low memory needs.	100d ago
CVE-2026-33327	7.8	—	—	—	libvips / libvips	libvips is a fast image processing library with low memory needs.	100d ago
CVE-2026-52349	7.8	—	—	—	—	Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a l	100d ago
CVE-2026-12484	7.8	—	—	—	—	A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pi	101d ago
CVE-2026-64181	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing s	101d ago
CVE-2026-64152	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is	101d ago
CVE-2026-64145	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acq	101d ago
CVE-2026-64137	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN ne	101d ago
CVE-2026-64134	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for sile	101d ago
CVE-2026-64133	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access a	101d ago
CVE-2026-64123	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RC	101d ago
CVE-2026-64114	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl	101d ago
CVE-2026-64112	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining o	101d ago
CVE-2026-64108	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Si	101d ago
CVE-2026-64103	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device remov	101d ago
CVE-2026-64099	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query a	101d ago
CVE-2026-64098	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for	101d ago
CVE-2026-64097	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table s	101d ago
CVE-2026-64086	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmb	101d ago
CVE-2026-64085	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records	101d ago
CVE-2026-64084	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_mu	101d ago
CVE-2026-64082	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitiali	101d ago
CVE-2026-64078	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unreg	101d ago
CVE-2026-64077	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal	101d ago
CVE-2026-64076	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module ini	101d ago
CVE-2026-64075	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RC	101d ago
CVE-2026-64074	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in	101d ago
CVE-2026-64073	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_singl	101d ago
CVE-2026-64071	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host	101d ago
CVE-2026-64063	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten I	101d ago
CVE-2026-64058	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on write	101d ago
CVE-2026-64057	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afs_get_link() Th	101d ago
CVE-2026-64054	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP	101d ago
CVE-2026-64053	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: block: don't overwrite bip_vcnt in bio_integri	101d ago
CVE-2026-64051	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_ra	101d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker