| CVE-2026-31221 | 7.8 | — | — | — | lightningai / pytorch lightning | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the ch | 170d ago |
| CVE-2026-8110 | 7.8 | — | — | — | ivanti / endpoint manager | Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local aut | 170d ago |
| CVE-2026-7432 | 7.8 | — | — | — | ivanti / secure access client | A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privi | 170d ago |
| CVE-2026-32687 | 7.8 | — | — | — | elixir-ecto / postgrex | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto | 170d ago |
| CVE-2025-12659 | 7.8 | — | — | — | — | Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. | 170d ago |
| CVE-2026-44412 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). | 170d ago |
| CVE-2026-44411 | 7.8 | — | — | — | siemens / solid edge se2026 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). | 170d ago |
| CVE-2026-45393 | 7.8 | — | — | — | — | A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privil | 170d ago |
| CVE-2026-45391 | 7.8 | — | — | — | — | A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivilege | 170d ago |
| CVE-2026-42046 | 7.8 | — | — | — | — | libcaca is a colour ASCII art library. | 171d ago |
| CVE-2026-28951 | 7.8 | — | — | — | apple / ipados | An authorization issue was addressed with improved state management. | 171d ago |
| CVE-2026-28919 | 7.8 | — | — | — | apple / macos | A consistency issue was addressed with improved state handling. | 171d ago |
| CVE-2026-28915 | 7.8 | — | — | — | apple / macos | A parsing issue in the handling of directory paths was addressed with improved path validation. | 171d ago |
| CVE-2026-28840 | 7.8 | — | — | — | apple / macos | A permissions issue was addressed with additional restrictions. | 171d ago |
| CVE-2026-45004 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver | 171d ago |
| CVE-2026-3609 | 7.8 | — | — | — | wellbia / xigncode3 | Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation | 171d ago |
| CVE-2026-43500zero day | 7.8 | 94.1% | 1/3 | same day | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when | 171d ago |
| CVE-2021-47945 | 7.8 | — | — | — | — | Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows | 172d ago |
| CVE-2026-1995 | 7.8 | — | — | — | — | IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\P | 219d ago |
| CVE-2026-4775 | 7.8 | — | — | — | libtiff / libtiff | A flaw was found in the libtiff library. | 219d ago |
| CVE-2026-32647 | 7.8 | — | — | — | f5 / nginx plus | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an atta | 219d ago |
| CVE-2026-27784 | 7.8 | — | — | — | f5 / nginx open source | The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might | 219d ago |
| CVE-2026-4756 | 7.8 | — | — | — | molotovcherry / android-imagemagick7 | Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: be | 219d ago |
| CVE-2026-33851 | 7.8 | — | — | — | — | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.Thi | 219d ago |
| CVE-2026-33850 | 7.8 | — | — | — | — | Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54. | 219d ago |
| CVE-2026-33847 | 7.8 | — | — | — | linkingvision / rapidvms | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.Th | 219d ago |
| CVE-2026-33298 | 7.8 | — | — | — | ggml / llama.cpp | llama.cpp is an inference of several LLM models in C/C++. | 219d ago |
| CVE-2026-23554 | 7.8 | — | — | — | xen / xen | The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dro | 220d ago |
| CVE-2019-25612 | 7.8 | — | — | — | — | Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows l | 221d ago |
| CVE-2026-22163 | 7.8 | — | — | — | imaginationtech / ddk | Requires malware code to misuse the DDK kernel module IOCTL interface. | 222d ago |
| CVE-2026-33156 | 7.8 | — | — | — | screentogif / screentogif | ScreenToGif is a screen recording tool. | 223d ago |
| CVE-2026-33150 | 7.8 | — | — | — | libfuse project / libfuse | libfuse is the reference implementation of the Linux FUSE. | 223d ago |
| CVE-2025-63261 | 7.8 | — | — | — | awstats / awstats | AWStats 8.0 is vulnerable to Command Injection via the open function | 223d ago |
| CVE-2026-33139 | 7.8 | — | — | — | parzivalhack / pyspector | PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflow | 223d ago |
| CVE-2026-23278 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending | 223d ago |
| CVE-2026-23275 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task | 223d ago |
| CVE-2026-23274 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of | 223d ago |
| CVE-2026-23273 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvla | 223d ago |
| CVE-2026-23272 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set | 223d ago |
| CVE-2026-23271 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remo | 223d ago |
| CVE-2026-32711 | 7.8 | — | — | — | pydicom / pydicom | pydicom is a pure Python package for working with DICOM files. | 223d ago |
| CVE-2026-30874 | 7.8 | — | — | — | openwrt / openwrt | OpenWrt Project is a Linux operating system targeting embedded devices. | 223d ago |
| CVE-2026-32032 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallb | 224d ago |
| CVE-2026-32016 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval | 224d ago |
| CVE-2026-32015 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that | 224d ago |
| CVE-2026-23270 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact | 225d ago |
| CVE-2026-23268 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do p | 225d ago |
| CVE-2026-23262 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue coun | 225d ago |
| CVE-2026-23253 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of | 225d ago |
| CVE-2026-24062 | 7.8 | — | — | — | — | The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code s | 225d ago |
| CVE-2026-23248 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF | 225d ago |
| CVE-2026-23245 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with | 225d ago |
| CVE-2026-23243 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad | 225d ago |
| CVE-2026-4295 | 7.8 | — | — | — | — | Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remot | 226d ago |
| CVE-2025-66342 | 7.8 | — | — | — | canva / affinity | A type confusion vulnerability exists in the EMF functionality of Canva Affinity. | 226d ago |
| CVE-2025-64301 | 7.8 | — | — | — | canva / affinity | An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. | 226d ago |
| CVE-2026-3888 | 7.8 | — | — | — | canonical / ubuntu linux | Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's pri | 226d ago |
| CVE-2026-23862 | 7.8 | — | — | — | dell / thinos | Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used | 227d ago |
| CVE-2025-69783 | 7.8 | — | — | — | xcitium / openedr | A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a | 227d ago |
| CVE-2026-4255 | 7.8 | — | — | — | thermalright / tr-vision home | A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attack | 227d ago |
