| CVE-2026-74332 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iterati | 58d ago |
| CVE-2026-74275 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_ca | 58d ago |
| CVE-2026-74259 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super | 58d ago |
| CVE-2026-74256 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_ | 58d ago |
| CVE-2026-72489 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_c | 58d ago |
| CVE-2026-72478 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_ | 58d ago |
| CVE-2026-72426 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during ha | 58d ago |
| CVE-2026-72360 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ o | 58d ago |
| CVE-2026-72343 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer | 58d ago |
| CVE-2026-72342 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registratio | 58d ago |
| CVE-2026-72298 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr | 58d ago |
| CVE-2026-72243 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on | 58d ago |
| CVE-2026-72204 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation | 58d ago |
| CVE-2026-72197 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation mem | 58d ago |
| CVE-2026-72196 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] inde | 58d ago |
| CVE-2026-72183 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on | 58d ago |
| CVE-2026-72151 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP complet | 58d ago |
| CVE-2026-72146 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request | 58d ago |
| CVE-2026-72133 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization o | 58d ago |
| CVE-2026-12364 | 8.4 | — | — | — | — | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-t | 58d ago |
| CVE-2026-56865 | 8.4 | — | — | — | — | A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to b | 59d ago |
| CVE-2026-18249 | 8.4 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improp | 59d ago |
| CVE-2026-67986 | 8.4 | — | — | — | — | amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection cond | 60d ago |
| CVE-2026-10534 | 8.4 | — | — | — | ibm / db2 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser | 60d ago |
| CVE-2025-59323 | 8.4 | — | — | — | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-par | 60d ago |
| CVE-2026-18634 | 8.4 | — | — | — | — | An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9. | 61d ago |
| CVE-2026-70130 | 8.4 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 61d ago |
| CVE-2026-34635 | 8.4 | — | — | — | adobe / coldfusion | is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. | 61d ago |
| CVE-2026-67180 | 8.4 | — | — | — | — | Google Turbinia allows arbitrary command execution via worker tasks. | 61d ago |
| CVE-2026-8718 | 8.4 | — | — | — | — | tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_T | 62d ago |
| CVE-2026-72734 | 8.4 | — | — | — | — | Dokploy is a free, self-hostable Platform as a Service (PaaS). | 62d ago |
| CVE-2026-68371 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_no | 63d ago |
| CVE-2026-68179 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock er | 63d ago |
| CVE-2026-68149 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_ca | 63d ago |
| CVE-2026-59090 | 8.4 | — | — | — | gimp / gimp | A flaw was found in GIMP's PSD file format plugin. | 63d ago |
| CVE-2026-55978 | 8.4 | — | — | — | — | An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect | 67d ago |
| CVE-2026-17583 | 8.4 | — | — | — | thermofisher / abi prism 310 data collection software | The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can | 67d ago |
| CVE-2026-51400 | 8.4 | — | — | — | vim / vim | An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfil | 68d ago |
| CVE-2026-67323 | 8.4 | — | — | — | gitpython project / gitpython | GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() | 72d ago |
| CVE-2026-10535 | 8.4 | — | — | — | ibm / db2 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flac | 73d ago |
| CVE-2026-11885 | 8.4 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A c | 73d ago |
| CVE-2026-58043 | 8.4 | — | — | — | nodejs / node.js | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundarie | 74d ago |
| CVE-2026-17877 | 8.4 | — | — | — | google / chrome | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attack | 74d ago |
| CVE-2026-17716 | 8.4 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privi | 74d ago |
| CVE-2026-12436 | 8.4 | — | — | — | gitlab / gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, | 74d ago |
| CVE-2026-64552 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rec | 76d ago |
| CVE-2026-64548 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in | 76d ago |
| CVE-2026-66396 | 8.4 | — | — | — | — | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List value when rendering Gallery and Kanb | 76d ago |
| CVE-2026-59688 | 8.4 | — | — | — | progress / connection manager for objectscale | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connec | 77d ago |
| CVE-2026-59687 | 8.4 | — | — | — | progress / connection manager for objectscale | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connec | 77d ago |
| CVE-2026-59686 | 8.4 | — | — | — | progress / connection manager for objectscale | An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connec | 77d ago |
| CVE-2026-64520 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_RE | 79d ago |
| CVE-2026-64490 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from t | 79d ago |
| CVE-2026-64247 | 8.4 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when q | 79d ago |
| CVE-2026-66140 | 8.4 | — | — | — | exim / exim | Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain pri | 80d ago |
| CVE-2026-64809 | 8.4 | — | — | — | jetbrains / phpstorm | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the co | 81d ago |
| CVE-2026-64808 | 8.4 | — | — | — | jetbrains / phpstorm | In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via projec | 81d ago |
| CVE-2026-64806 | 8.4 | — | — | — | jetbrains / webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the co | 81d ago |
| CVE-2026-64805 | 8.4 | — | — | — | jetbrains / webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via projec | 81d ago |
| CVE-2026-64804 | 8.4 | — | — | — | jetbrains / webstorm | In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via projec | 81d ago |
