| CVE-2026-46324 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for net | 142d ago |
| CVE-2026-46323 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_recei | 142d ago |
| CVE-2026-46319 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock | 142d ago |
| CVE-2026-8795 | 7.8 | — | — | — | — | A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before ve | 142d ago |
| CVE-2026-46311 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr map | 143d ago |
| CVE-2026-46308 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scps | 143d ago |
| CVE-2026-46301 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbin | 143d ago |
| CVE-2026-46294 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing | 143d ago |
| CVE-2026-46285 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_releas | 143d ago |
| CVE-2026-46281 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_ | 143d ago |
| CVE-2026-46280 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file clos | 143d ago |
| CVE-2026-46279 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocate | 143d ago |
| CVE-2026-46277 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio afte | 143d ago |
| CVE-2026-46275 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditi | 143d ago |
| CVE-2026-46274 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: io-wq: check that the predecessor is hashed in | 143d ago |
| CVE-2026-50264 | 7.8 | — | — | — | x.org / x server | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. | 146d ago |
| CVE-2026-50261 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). | 146d ago |
| CVE-2026-50260 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). | 146d ago |
| CVE-2026-50259 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 146d ago |
| CVE-2026-50258 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 146d ago |
| CVE-2026-50257 | 7.8 | — | — | — | x.org / x server | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). | 146d ago |
| CVE-2026-50256 | 7.8 | — | — | — | x.org / x server | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. | 146d ago |
| CVE-2026-21031 | 7.8 | — | — | — | samsung / android | Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activ | 146d ago |
| CVE-2026-21030 | 7.8 | — | — | — | samsung / android | Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger pr | 146d ago |
| CVE-2026-21029 | 7.8 | — | — | — | samsung / android | Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows | 146d ago |
| CVE-2026-11332 | 7.8 | — | — | — | — | A flaw was found in ansible-core. | 146d ago |
| CVE-2026-20245exploited | 7.8 | 25.3% | 3/3 | +1d | cisco / catalyst sd-wan manager | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Mana | 146d ago |
| CVE-2026-11103 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Installer in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attac | 146d ago |
| CVE-2026-11072 | 7.8 | — | — | — | google / chrome | Use after free in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to execute a | 146d ago |
| CVE-2026-10942 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in UI in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to | 146d ago |
| CVE-2026-25551 | 7.8 | — | — | — | — | Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows l | 147d ago |
| CVE-2025-12694 | 7.8 | — | — | — | forcepoint / vpn client | A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative | 147d ago |
| CVE-2026-50209 | 7.8 | — | — | — | acer / connect m6e 5g firmware | Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint | 147d ago |
| CVE-2026-50207 | 7.8 | — | — | — | acer / connect m6e 5g firmware | The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to rea | 147d ago |
| CVE-2026-49189 | 7.8 | — | — | — | acer / connect m6e 5g firmware | Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to i | 147d ago |
| CVE-2026-41859 | 7.8 | — | — | — | — | A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth | 147d ago |
| CVE-2026-46271 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary | 148d ago |
| CVE-2026-46267 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before f | 148d ago |
| CVE-2026-46263 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream enco | 148d ago |
| CVE-2026-46260 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2n | 148d ago |
| CVE-2026-46259 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when readin | 148d ago |
| CVE-2026-46253 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ | 148d ago |
| CVE-2026-46246 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free | 148d ago |
| CVE-2026-40290 | 7.8 | — | — | — | trustedfirmware / op-tee | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; | 148d ago |
| CVE-2026-36574 | 7.8 | — | — | — | — | A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges | 148d ago |
| CVE-2022-49042 | 7.8 | — | — | — | synology / hyper backup explorer | An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper | 148d ago |
| CVE-2022-49036 | 7.8 | — | — | — | synology / active backup for business recovery media creator | An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Act | 148d ago |
| CVE-2026-40715 | 7.8 | — | — | — | dell / thinos | Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. | 149d ago |
| CVE-2026-24237 | 7.8 | — | — | — | nvidia / nvtabular | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data | 149d ago |
| CVE-2026-24221 | 7.8 | — | — | — | nvidia / nvtabular | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data | 149d ago |
| CVE-2026-40619 | 7.8 | — | — | — | — | A high security vulnerability affecting Security Center main server installations has been identified. | 149d ago |
| CVE-2026-10047 | 7.8 | — | — | — | bitdefender / napoca | The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook h | 149d ago |
| CVE-2026-10046 | 7.8 | — | — | — | bitdefender / napoca | Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 | 149d ago |
| CVE-2026-25260 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. | 149d ago |
| CVE-2026-25259 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory corruption while processing multiple IOCTL command for escape operations. | 149d ago |
| CVE-2026-25258 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory corruption while processing IOCTL calls for escape operations. | 149d ago |
| CVE-2025-59606 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data | 149d ago |
| CVE-2025-59605 | 7.8 | — | — | — | qualcomm / snapdragon g1 gen 2 gaming platform firmware | Memory Corruption when processing device identifier strings that exceed the expected maximum length. | 149d ago |
| CVE-2025-59604 | 7.8 | — | — | — | qualcomm / snapdragon 480 5g mobile platform firmware | Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | 149d ago |
| CVE-2026-28580 | 7.8 | — | — | — | google / android | In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. | 149d ago |
