| CVE-2016-20088 | 7.8 | — | — | — | — | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater servic | 132d ago |
| CVE-2016-20087 | 7.8 | — | — | — | — | Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrar | 132d ago |
| CVE-2016-20086 | 7.8 | — | — | — | — | Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer | 132d ago |
| CVE-2016-20085 | 7.8 | — | — | — | — | Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local | 132d ago |
| CVE-2026-46461 | 7.8 | — | — | — | dell / server hardware manager | Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. | 132d ago |
| CVE-2026-25865 | 7.8 | — | — | — | — | Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attacker | 132d ago |
| CVE-2026-12390 | 7.8 | — | — | — | azeotech / daqfactory | In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker usi | 132d ago |
| CVE-2026-12505 | 7.8 | — | — | — | — | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges | 133d ago |
| CVE-2026-32652 | 7.8 | — | — | — | dell / aiops collector | Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. | 134d ago |
| CVE-2026-28615 | 7.8 | — | — | — | google / android | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. | 134d ago |
| CVE-2026-12449 | 7.8 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perfo | 134d ago |
| CVE-2026-0082 | 7.8 | — | — | — | google / android | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment d | 134d ago |
| CVE-2026-0081 | 7.8 | — | — | — | google / android | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. | 134d ago |
| CVE-2026-0071 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible missing permission check due to a logic error in the code. | 134d ago |
| CVE-2026-0068 | 7.8 | — | — | — | google / android | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a man | 134d ago |
| CVE-2026-0063 | 7.8 | — | — | — | google / android | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to | 134d ago |
| CVE-2026-0019 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible way to disable system components due to a logic error in the code. | 134d ago |
| CVE-2025-48643 | 7.8 | — | — | — | google / android | In multiple locations there is a possible provisioning bypass due to improper input validation. | 134d ago |
| CVE-2025-48617 | 7.8 | — | — | — | google / android | In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions by | 134d ago |
| CVE-2026-46888 | 7.8 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). | 134d ago |
| CVE-2026-47750 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 134d ago |
| CVE-2026-47747 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 134d ago |
| CVE-2026-0153 | 7.8 | — | — | — | google / android | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. | 134d ago |
| CVE-2026-0152 | 7.8 | — | — | — | google / android | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously ex | 134d ago |
| CVE-2026-0150 | 7.8 | — | — | — | google / android | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer over | 134d ago |
| CVE-2026-0143 | 7.8 | — | — | — | google / android | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. | 134d ago |
| CVE-2026-0138 | 7.8 | — | — | — | google / android | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. | 134d ago |
| CVE-2026-0137 | 7.8 | — | — | — | google / android | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use | 134d ago |
| CVE-2026-0135 | 7.8 | — | — | — | google / android | In Modem, there is a possible out of bounds read due to a missing bounds check. | 134d ago |
| CVE-2026-0133 | 7.8 | — | — | — | google / android | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts | 134d ago |
| CVE-2026-50656 | 7.8 | — | — | — | microsoft / malware protection engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender p | 134d ago |
| CVE-2026-47964 | 7.8 | — | — | — | adobe / dng software development kit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resu | 134d ago |
| CVE-2026-47749 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 134d ago |
| CVE-2026-24228 | 7.8 | — | — | — | nvidia / nemo | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted | 135d ago |
| CVE-2026-24155 | 7.8 | — | — | — | nvidia / nemo | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. | 135d ago |
| CVE-2026-46331exploited | 7.8 | 0.64% | 1/3 | +71d | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to pa | 135d ago |
| CVE-2026-48723 | 7.8 | — | — | — | — | The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. | 135d ago |
| CVE-2026-36213 | 7.8 | — | — | — | — | An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuSer | 135d ago |
| CVE-2025-56814 | 7.8 | — | — | — | — | A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrar | 135d ago |
| CVE-2026-8357 | 7.8 | — | — | — | — | LibreOffice Calc compiles cell formulas when opening a spreadsheet. | 136d ago |
| CVE-2026-50100 | 7.8 | — | — | — | — | Multiple printer drivers provided by Ricoh Company, Ltd. | 136d ago |
| CVE-2026-12217 | 7.8 | — | — | — | — | A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. | 136d ago |
| CVE-2026-12214 | 7.8 | — | — | — | — | A security flaw has been discovered in Qihoo 360 Total Security 6.0. | 136d ago |
| CVE-2026-12193 | 7.8 | — | — | — | — | A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. | 136d ago |
| CVE-2026-12191 | 7.8 | — | — | — | — | A vulnerability was found in Comma AI Openpilot 0.11. | 136d ago |
| CVE-2026-54228 | 7.8 | — | — | — | — | A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. | 138d ago |
| CVE-2026-6676 | 7.8 | — | — | — | — | Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed POSIX tar archive | 138d ago |
| CVE-2025-9033 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow | 138d ago |
| CVE-2025-9032 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file ma | 138d ago |
| CVE-2025-14098 | 7.8 | — | — | — | — | Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine when scanning a ma | 138d ago |
| CVE-2026-41158 | 7.8 | — | — | — | — | Software installed and run as a non-privileged user may conduct GPU system calls to write to arbitrary freed physi | 138d ago |
| CVE-2025-7017 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file m | 138d ago |
| CVE-2025-7011 | 7.8 | — | — | — | — | Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allo | 138d ago |
| CVE-2025-7009 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow | 138d ago |
| CVE-2025-7008 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET | 138d ago |
| CVE-2025-7004 | 7.8 | — | — | — | — | Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allo | 138d ago |
| CVE-2025-7003 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow | 138d ago |
| CVE-2025-7002 | 7.8 | — | — | — | — | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow | 138d ago |
| CVE-2026-54057 | 7.8 | — | — | — | kovidgoyal / kitty | Kitty is a cross-platform GPU based terminal. | 138d ago |
| CVE-2026-42851 | 7.8 | — | — | — | kovidgoyal / kitty | Kitty is a cross-platform GPU based terminal. | 138d ago |
