| CVE-2026-41857 | 7.8 | — | — | — | cloudfoundry / bosh cli | A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when t | 112d ago |
| CVE-2026-55878 | 7.8 | — | — | — | — | Symfony UX is a JavaScript ecosystem for Symfony. | 112d ago |
| CVE-2026-39822 | 7.8 | — | — | — | golang / go | On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when th | 112d ago |
| CVE-2026-22927 | 7.8 | — | — | — | omnissa / workspace one tunnel | Omnissa Workspace ONE® Tunnel for Windows addresses a Local Privilege Escalation Vulnerability. | 113d ago |
| CVE-2026-57260 | 7.8 | — | — | — | foxit / pdf editor | The application opened a PDF file containing an abnormal Unity 3D object. | 113d ago |
| CVE-2026-57256 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, a | 113d ago |
| CVE-2026-57254 | 7.8 | — | — | — | foxit / pdf editor | There is an abnormal annotation within the PDF that is referenced by other objects. | 113d ago |
| CVE-2026-57252 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment ann | 113d ago |
| CVE-2026-57251 | 7.8 | — | — | — | foxit / pdf editor | The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an | 113d ago |
| CVE-2026-57250 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. | 113d ago |
| CVE-2026-57249 | 7.8 | — | — | — | foxit / pdf editor | After the application opened the PDF file, the script first reset the annotation status, then triggered the reset | 113d ago |
| CVE-2026-57248 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient o | 113d ago |
| CVE-2026-57247 | 7.8 | — | — | — | foxit / pdf editor | The application re-enters the document structure via field processing and deletes the current page, and then conti | 113d ago |
| CVE-2026-57246 | 7.8 | — | — | — | foxit / pdf editor | When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers sign | 113d ago |
| CVE-2026-57245 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to | 113d ago |
| CVE-2026-57244 | 7.8 | — | — | — | foxit / pdf editor | After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle ve | 113d ago |
| CVE-2026-57242 | 7.8 | — | — | — | foxit / pdf editor | The application opens the PDF, and JavaScript modifies the form. | 113d ago |
| CVE-2026-57240 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the o | 113d ago |
| CVE-2026-57238 | 7.8 | — | — | — | foxit / pdf editor | After the application opened the PDF, JavaScript deleted the form field object. | 113d ago |
| CVE-2026-57237 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the | 113d ago |
| CVE-2026-56000 | 7.8 | — | — | — | x.org / x server | Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xway | 113d ago |
| CVE-2026-13129 | 7.8 | — | — | — | foxit / pdf editor | When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resultin | 113d ago |
| CVE-2026-13128 | 7.8 | — | — | — | foxit / pdf editor | Embedding JavaScript within a PDF file will cause the page to be deleted. | 113d ago |
| CVE-2026-13127 | 7.8 | — | — | — | foxit / pdf editor | The application opens the PDF file. | 113d ago |
| CVE-2026-13126 | 7.8 | — | — | — | foxit / pdf editor | The embedded JavaScript in the PDF deleted the pages, making the object invalid. | 113d ago |
| CVE-2026-57895 | 7.8 | — | — | — | — | Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. | 113d ago |
| CVE-2026-56437 | 7.8 | — | — | — | — | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. | 113d ago |
| CVE-2026-49033 | 7.8 | — | — | — | — | The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execu | 113d ago |
| CVE-2026-42958 | 7.8 | — | — | — | — | The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while par | 113d ago |
| CVE-2026-57851 | 7.8 | — | — | — | — | MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver tha | 113d ago |
| CVE-2026-25271 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory Corruption when processing asynchronous input parameters due to improper handling of modified values betwee | 114d ago |
| CVE-2026-21379 | 7.8 | — | — | — | qualcomm / aqt1000 firmware | Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. | 114d ago |
| CVE-2026-6509 | 7.8 | — | — | — | — | Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Update allows | 116d ago |
| CVE-2026-53362exploited | 7.8 | 0.71% | 3/3 | +54d | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocat | 117d ago |
| CVE-2026-12252 | 7.8 | — | — | — | nltk / nltk | In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, St | 117d ago |
| CVE-2026-14606 | 7.8 | — | — | — | — | A security flaw has been discovered in RT-Thread up to 5.0.2. | 117d ago |
| CVE-2026-14605 | 7.8 | — | — | — | — | A vulnerability was identified in RT-Thread up to 5.0.2. | 117d ago |
| CVE-2026-13079 | 7.8 | — | — | — | watchguard / mobile vpn with ssl | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local | 118d ago |
| CVE-2026-38972 | 7.8 | — | — | — | rizonesoft / notepad3 | Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in s | 118d ago |
| CVE-2026-12168 | 7.8 | — | — | — | — | An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to | 119d ago |
| CVE-2026-12167 | 7.8 | — | — | — | — | The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to ac | 119d ago |
| CVE-2026-54074 | 7.8 | — | — | — | — | Tina is a headless content management system. | 119d ago |
| CVE-2026-46680 | 7.8 | — | — | — | linuxfoundation / containerd | containerd is an open-source container runtime. | 119d ago |
| CVE-2026-24251 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami | 120d ago |
| CVE-2026-24250 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of all | 120d ago |
| CVE-2026-24249 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-24248 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code g | 120d ago |
| CVE-2026-24247 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-24246 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami | 120d ago |
| CVE-2026-24245 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-24244 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-24243 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-24242 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forger | 120d ago |
| CVE-2026-24240 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 120d ago |
| CVE-2026-53356 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with of | 120d ago |
| CVE-2026-53341 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read | 120d ago |
| CVE-2026-14191 | 7.8 | — | — | — | — | An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::Rea | 120d ago |
| CVE-2026-54672 | 7.8 | — | — | — | electron / electron-builder | electron-updater allows for automatic updates for Electron apps. | 120d ago |
| CVE-2026-14124 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a lo | 120d ago |
| CVE-2026-14094 | 7.8 | — | — | — | google / chrome | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform | 120d ago |
