| CVE-2025-71216 | 7.8 | — | — | — | trendmicro / apex one | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a lo | 161d ago |
| CVE-2025-71214 | 7.8 | — | — | — | trendmicro / apex one | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local | 161d ago |
| CVE-2025-71213 | 7.8 | — | — | — | trendmicro / apex one | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileg | 161d ago |
| CVE-2025-71212 | 7.8 | — | — | — | trendmicro / apex one | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate pr | 161d ago |
| CVE-2026-43502 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before t | 161d ago |
| CVE-2026-43499 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current i | 161d ago |
| CVE-2026-43498 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM | 161d ago |
| CVE-2026-43494exploited | 7.8 | 0.41% | 1/3 | +97d | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin | 161d ago |
| CVE-2026-45251 | 7.8 | — | — | — | freebsd / freebsd | A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descript | 161d ago |
| CVE-2026-28764 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability | 161d ago |
| CVE-2026-45250 | 7.8 | — | — | — | freebsd / freebsd | The setcred(2) system call is only available to privileged users. | 161d ago |
| CVE-2026-8632 | 7.8 | — | — | — | hp / linux imaging and printing | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. | 162d ago |
| CVE-2026-24216 | 7.8 | — | — | — | nvidia / bionemo framework | NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. | 162d ago |
| CVE-2026-22554 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability | 162d ago |
| CVE-2026-42834 | 7.8 | — | — | — | microsoft / windows admin center | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 162d ago |
| CVE-2026-41091zero day | 7.8 | 8.2% | 3/3 | 1d before | microsoft / malware protection engine | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker | 162d ago |
| CVE-2026-0856 | 7.8 | — | — | — | — | Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component en | 162d ago |
| CVE-2026-44933 | 7.8 | — | — | — | — | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system r | 162d ago |
| CVE-2026-41054 | 7.8 | — | — | — | — | In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/s | 162d ago |
| CVE-2026-23558 | 7.8 | — | — | — | xen / xen | The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a H | 163d ago |
| CVE-2026-47314 | 7.8 | — | — | — | samsung / escargot | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | 163d ago |
| CVE-2026-47311 | 7.8 | — | — | — | samsung / escargot | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | 163d ago |
| CVE-2026-47310 | 7.8 | — | — | — | samsung / escargot | Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. | 163d ago |
| CVE-2026-4137 | 7.8 | — | — | — | lfprojects / mlflow | In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.p | 164d ago |
| CVE-2026-47092 | 7.8 | — | — | — | jarrodwatts / claude hud | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local | 164d ago |
| CVE-2021-47974 | 7.8 | — | — | — | — | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterpris | 166d ago |
| CVE-2020-37247 | 7.8 | — | — | — | — | Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows loc | 166d ago |
| CVE-2020-37232 | 7.8 | — | — | — | — | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareS | 166d ago |
| CVE-2020-37231 | 7.8 | — | — | — | — | Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows l | 166d ago |
| CVE-2020-37230 | 7.8 | — | — | — | — | Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that | 166d ago |
| CVE-2020-37229 | 7.8 | — | — | — | — | OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allo | 166d ago |
| CVE-2026-45038 | 7.8 | — | — | — | tabby / tabby | Tabby (formerly Terminus) is a highly configurable terminal emulator. | 167d ago |
| CVE-2026-46508 | 7.8 | — | — | — | vercel / turborepo language server protocol | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. | 167d ago |
| CVE-2026-41702 | 7.8 | — | — | — | vmware / fusion | VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performe | 167d ago |
| CVE-2024-36333 | 7.8 | — | — | — | amd / radeon software | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation p | 167d ago |
| CVE-2026-43906 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 168d ago |
| CVE-2026-43905 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 168d ago |
| CVE-2026-43904 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 168d ago |
| CVE-2026-43903 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 168d ago |
| CVE-2026-44471 | 7.8 | — | — | — | gitoxidelabs / gix-fs | gitoxide is an implementation of git written in Rust. | 169d ago |
| CVE-2026-30906 | 7.8 | — | — | — | zoom / rooms | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated | 169d ago |
| CVE-2026-30905 | 7.8 | — | — | — | zoom / workplace virtual desktop infrastructure | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version | 169d ago |
| CVE-2026-0251 | 7.8 | — | — | — | paloaltonetworks / globalprotect | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user | 169d ago |
| CVE-2026-0247 | 7.8 | — | — | — | paloaltonetworks / prisma access agent | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local a | 169d ago |
| CVE-2026-0246 | 7.8 | — | — | — | paloaltonetworks / prisma access agent | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a loca | 169d ago |
| CVE-2026-0236 | 7.8 | — | — | — | paloaltonetworks / prisma browser | A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to | 169d ago |
| CVE-2026-0237 | 7.8 | — | — | — | paloaltonetworks / prisma browser | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to prop | 169d ago |
| CVE-2026-45033 | 7.8 | — | — | — | github / copilot-cli | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. | 169d ago |
| CVE-2026-44470 | 7.8 | — | — | — | anthropic / claude desktop | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side b | 169d ago |
| CVE-2026-43481 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlms | 169d ago |
| CVE-2026-43476 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in s | 169d ago |
| CVE-2026-42290 | 7.8 | — | — | — | protobufjs project / protobufjs-cli | protobufjs-cli is the command line add-on for protobuf.js. | 169d ago |
| CVE-2020-37223 | 7.8 | — | — | — | — | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows l | 169d ago |
| CVE-2024-47091 | 7.8 | — | — | — | checkmk / checkmk | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allo | 169d ago |
| CVE-2026-44612 | 7.8 | — | — | — | — | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. | 169d ago |
| CVE-2026-21020 | 7.8 | — | — | — | samsung / android | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers | 169d ago |
| CVE-2026-8108 | 7.8 | — | — | — | fujielectric / tellus | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions. | 169d ago |
| CVE-2025-65088 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share ve | 170d ago |
| CVE-2025-65087 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share ve | 170d ago |
| CVE-2025-65086 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v | 170d ago |
