| CVE-2026-63425 | 7.8 | — | — | — | — | During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Do | 62d ago |
| CVE-2026-63423 | 7.8 | — | — | — | — | During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display | 62d ago |
| CVE-2026-53803 | 7.8 | — | — | — | samba / rsync | rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary f | 62d ago |
| CVE-2026-0299 | 7.8 | — | — | — | paloaltonetworks / globalprotect | Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to esca | 63d ago |
| CVE-2026-19003 | 7.8 | — | — | — | — | A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Drive | 63d ago |
| CVE-2026-16695 | 7.8 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due | 63d ago |
| CVE-2026-13367 | 7.8 | — | — | — | ibm / informix dynamic server | IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setui | 63d ago |
| CVE-2026-13094 | 7.8 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when i | 63d ago |
| CVE-2026-59917 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu | 63d ago |
| CVE-2026-59916 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vu | 63d ago |
| CVE-2026-59914 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b | 63d ago |
| CVE-2026-46731 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass b | 63d ago |
| CVE-2026-73325 | 7.8 | — | — | — | — | Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allow | 63d ago |
| CVE-2026-14478 | 7.8 | — | — | — | autodesk / installer | A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker | 63d ago |
| CVE-2026-12234 | 7.8 | — | — | — | — | The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/socket | 64d ago |
| CVE-2026-68446 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::arr | 64d ago |
| CVE-2026-68445 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becom | 64d ago |
| CVE-2026-68442 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to | 64d ago |
| CVE-2026-68440 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading mod | 64d ago |
| CVE-2026-66150 | 7.8 | — | — | — | — | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance | 64d ago |
| CVE-2026-66149 | 7.8 | — | — | — | — | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance | 64d ago |
| CVE-2026-73234 | 7.8 | — | — | — | — | FreeCAD is a free and open-source multiplatform 3D parametric modeler. | 64d ago |
| CVE-2026-73231 | 7.8 | — | — | — | — | Faker generates massive amounts of fake data in the browser and Node.js. | 64d ago |
| CVE-2026-48410 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48409 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48408 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48407 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48406 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48405 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-48404 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code executio | 64d ago |
| CVE-2026-47940 | 7.8 | — | — | — | adobe / lightroom | Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary co | 64d ago |
| CVE-2026-70354 | 7.8 | — | — | — | microsoft / visual studio 2022 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-70347 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 64d ago |
| CVE-2026-70346 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 64d ago |
| CVE-2026-70345 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 64d ago |
| CVE-2026-70344 | 7.8 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 64d ago |
| CVE-2026-70338 | 7.8 | — | — | — | microsoft / powershell | Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker | 64d ago |
| CVE-2026-70335 | 7.8 | — | — | — | microsoft / visual studio code | Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and V | 64d ago |
| CVE-2026-70313 | 7.8 | — | — | — | microsoft / 365 apps | Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information l | 64d ago |
| CVE-2026-70311 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-69278 | 7.8 | — | — | — | microsoft / visual studio code | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally | 64d ago |
| CVE-2026-68817 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68816 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68815 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68814 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68812 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68811 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 64d ago |
| CVE-2026-68810 | 7.8 | — | — | — | microsoft / 365 apps | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68807 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68806 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68805 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68804 | 7.8 | — | — | — | microsoft / 365 apps | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68803 | 7.8 | — | — | — | microsoft / 365 apps | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized att | 64d ago |
| CVE-2026-68801 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68800 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68798 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68796 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68795 | 7.8 | — | — | — | microsoft / 365 apps | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68794 | 7.8 | — | — | — | microsoft / 365 apps | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
| CVE-2026-68793 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 64d ago |
