CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-53477	7.8	—	—	—	dell / command update	Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vu	56d ago
CVE-2026-49817	7.8	—	—	—	dell / command update	Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.	56d ago
CVE-2026-49816	7.8	—	—	—	dell / command update	Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.	56d ago
CVE-2026-16703	7.8	—	—	—	ibm / vios	IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to impr	56d ago
CVE-2026-43961	7.8	—	—	—	—	A flaw was found in Vim's netrw plugin.	56d ago
CVE-2026-58087	7.8	—	—	—	freebsd / freebsd	The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in the target set, dropped the lock	57d ago
CVE-2026-49430	7.8	—	—	—	freebsd / freebsd	The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to a 32-bit intege	57d ago
CVE-2026-49429	7.8	—	—	—	freebsd / freebsd	The ZFS_IOC_USERSPACE_MANY ioctl, used by zfs-userspace(8), truncated a 64-bit output buffer size to a 32-bit inte	57d ago
CVE-2026-71126	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	57d ago
CVE-2026-71111	7.8	—	—	—	oracle / identity manager	Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer).	57d ago
CVE-2026-71101	7.8	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Tax Issues).	57d ago
CVE-2026-71097	7.8	—	—	—	oracle / business intelligence	Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platf	57d ago
CVE-2026-71028	7.8	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	57d ago
CVE-2026-71010	7.8	—	—	—	oracle / commerce experience manager	Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce	57d ago
CVE-2026-70879	7.8	—	—	—	oracle / hyperion data relationship management	Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an	57d ago
CVE-2026-70866	7.8	—	—	—	oracle / application testing suite	Vulnerability in Oracle Application Testing Suite.	57d ago
CVE-2026-70798	7.8	—	—	—	oracle / purchasing	Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).	57d ago
CVE-2026-70750	7.8	—	—	—	oracle / hyperion financial reporting	Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).	57d ago
CVE-2026-62581	7.8	—	—	—	oracle / hyperion infrastructure technology	Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation	57d ago
CVE-2026-62454	7.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).	57d ago
CVE-2026-61300	7.8	—	—	—	oracle / enterprise manager base platform	Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agen	57d ago
CVE-2026-61291	7.8	—	—	—	oracle / webcenter content	Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server).	57d ago
CVE-2026-60991	7.8	—	—	—	oracle / identity manager connector	Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).	57d ago
CVE-2026-60822	7.8	—	—	—	oracle / enterprise manager for systems infrastructure	Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (co	57d ago
CVE-2026-60753	7.8	—	—	—	oracle / siebel crm	Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).	57d ago
CVE-2026-60414	7.8	—	—	—	oracle / outside in technology	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)	57d ago
CVE-2026-60413	7.8	—	—	—	oracle / outside in technology	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)	57d ago
CVE-2026-60412	7.8	—	—	—	oracle / outside in technology	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core)	57d ago
CVE-2026-60392	7.8	—	—	—	oracle / outside in technology	Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF E	57d ago
CVE-2026-55426	7.8	—	—	—	—	linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and L	57d ago
CVE-2026-24183	7.8	—	—	—	nvidia / cumulus linux	NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could u	57d ago
CVE-2026-71551	7.8	—	—	—	—	Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities.	57d ago
CVE-2026-67846	7.8	—	—	—	—	Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrec	57d ago
CVE-2026-75911	7.8	—	—	—	—	CodeWhale versions before 0.8.64 fail to properly validate the allow_shell configuration parameter from project co	57d ago
CVE-2026-75858	7.8	—	—	—	—	CodeWhale (packages codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain a remote code execution vul	57d ago
CVE-2026-67961	7.8	—	—	—	—	An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the I	58d ago
CVE-2026-34399	7.8	—	—	—	—	FreeCAD is a free and open-source multiplatform 3D parametric modeler.	58d ago
CVE-2026-34398	7.8	—	—	—	—	FreeCAD is a free and open-source multiplatform 3D parametric modeler.	58d ago
CVE-2026-54758	7.8	—	—	—	—	Notepad++ is a free and open-source source code editor.	58d ago
CVE-2026-50773	7.8	—	—	—	—	An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirar	58d ago
CVE-2026-75056	7.8	—	—	—	—	In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible	58d ago
CVE-2026-59910	7.8	—	—	—	dell / objectscale	Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an	58d ago
CVE-2026-56686	7.8	—	—	—	dell / objectscale	Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an	58d ago
CVE-2026-74574	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix fdev setup failure cleanu	60d ago
CVE-2026-74565	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: make nft_object rhltable	60d ago
CVE-2026-74563	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: rds: tcp: hold the RCU lock across ipv6_chk_ad	60d ago
CVE-2026-74551	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align output buffer S	60d ago
CVE-2026-74549	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775-core) Prevent access to unsupp	60d ago
CVE-2026-74548	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove	60d ago
CVE-2026-74544	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to preve	60d ago
CVE-2026-74529	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_	60d ago
CVE-2026-74519	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized	60d ago
CVE-2026-74518	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix list corruption in allocate_fi	60d ago
CVE-2026-74513	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopba	60d ago
CVE-2026-74512	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_d	60d ago
CVE-2026-74510	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix UAF in pair command cance	60d ago
CVE-2026-74506	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In afs_mak	60d ago
CVE-2026-74503	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once	60d ago
CVE-2026-74496	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create() fou_cr	60d ago
CVE-2026-74482	7.8	—	—	—	—	In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: unlock i_mmap_rwsem before rel	60d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker