| CVE-2026-64588 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On w | 70d ago |
| CVE-2026-64585 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: kill anchored URBs before freein | 70d ago |
| CVE-2026-64584 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work be | 70d ago |
| CVE-2026-64583 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func | 70d ago |
| CVE-2026-55522 | 7.8 | — | — | — | — | PraisonAI is a multi-agent teams system. | 70d ago |
| CVE-2026-18485 | 7.8 | — | — | — | — | There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. | 70d ago |
| CVE-2026-12410 | 7.8 | — | — | — | — | Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local | 71d ago |
| CVE-2026-71266 | 7.8 | — | — | — | — | tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file in | 71d ago |
| CVE-2026-71261 | 7.8 | — | — | — | — | dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata pars | 71d ago |
| CVE-2026-16022 | 7.8 | — | — | — | — | @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. | 71d ago |
| CVE-2026-64582 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxe_ | 71d ago |
| CVE-2026-64581 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix sk_dst_cache double-free in xfrm_use | 71d ago |
| CVE-2026-64580 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double | 71d ago |
| CVE-2026-64575 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch rea | 71d ago |
| CVE-2026-64574 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif upd | 71d ago |
| CVE-2026-64570 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free | 71d ago |
| CVE-2026-64568 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp dou | 71d ago |
| CVE-2026-64567 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entri | 71d ago |
| CVE-2026-18657 | 7.8 | — | — | — | amazon / kiro cli | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthentica | 71d ago |
| CVE-2026-18656 | 7.8 | — | — | — | amazon / kiro ide | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthentic | 71d ago |
| CVE-2026-24083 | 7.8 | — | — | — | qualcomm / qam8295p firmware | Memory Corruption while processing IOCTL device driver requests with invalid arguments. | 72d ago |
| CVE-2026-24080 | 7.8 | — | — | — | qualcomm / qam8295p firmware | Memory Corruption when handling malformed request parameters in the fingerprint TA. | 72d ago |
| CVE-2026-21366 | 7.8 | — | — | — | qualcomm / lemans au lgit firmware | Memory corruption while processing a packet with a size close to the maximum allowed value. | 72d ago |
| CVE-2026-10710 | 7.8 | — | — | — | autodesk / fbx software development kit | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vu | 72d ago |
| CVE-2026-10709 | 7.8 | — | — | — | autodesk / fbx software development kit | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vu | 72d ago |
| CVE-2026-64563 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter->p on table resta | 72d ago |
| CVE-2026-41447 | 7.8 | — | — | — | — | FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability that allows local attackers to execute | 72d ago |
| CVE-2026-59913 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for | 72d ago |
| CVE-2026-59912 | 7.8 | — | — | — | dell / display and peripheral manager | Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control v | 72d ago |
| CVE-2026-18606 | 7.8 | — | — | — | — | A weakness has been identified in Razer RzUpdateService 1.10.14.0. | 73d ago |
| CVE-2026-67609 | 7.8 | — | — | — | — | Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege esc | 73d ago |
| CVE-2026-18642 | 7.8 | — | — | — | — | Deserialization of untrusted data vulnerability in TUBITAK BILGEM Software Technologies Research Institute eta-otp | 73d ago |
| CVE-2026-20495 | 7.8 | — | — | — | mediatek / mt7925 firmware | In Bluetooth driver, there is a possible permission bypass due to a missing permission check. | 73d ago |
| CVE-2026-34641 | 7.8 | — | — | — | adobe / premiere | Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in | 75d ago |
| CVE-2026-18157 | 7.8 | — | — | — | — | A flaw was found in yggdrasil-worker-package-manager. | 76d ago |
| CVE-2026-44106 | 7.8 | — | — | — | — | A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user t | 77d ago |
| CVE-2026-44099 | 7.8 | — | — | — | — | A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arb | 77d ago |
| CVE-2026-44096 | 7.8 | — | — | — | — | A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as ro | 77d ago |
| CVE-2026-44095 | 7.8 | — | — | — | — | A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user | 77d ago |
| CVE-2026-44093 | 7.8 | — | — | — | — | A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local | 77d ago |
| CVE-2026-16524 | 7.8 | — | — | — | — | A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persock | 77d ago |
| CVE-2026-17864 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to | 77d ago |
| CVE-2026-17863 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Browser in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacke | 77d ago |
| CVE-2026-17862 | 7.8 | — | — | — | google / chrome | Use after free in Tracing in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform O | 77d ago |
| CVE-2026-17861 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local atta | 77d ago |
| CVE-2026-17654 | 7.8 | — | — | — | google / chrome | Race in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform OS-level privil | 77d ago |
| CVE-2026-6102 | 7.8 | — | — | — | — | MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. | 77d ago |
| CVE-2026-5056 | 7.8 | — | — | — | — | GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. | 77d ago |
| CVE-2026-13268 | 7.8 | — | — | — | — | G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. | 77d ago |
| CVE-2026-14266 | 7.8 | — | — | — | 7-zip / 7-zip | 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. | 77d ago |
| CVE-2026-64560 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-le | 78d ago |
| CVE-2026-64559 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK io | 78d ago |
| CVE-2026-64558 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler | 78d ago |
| CVE-2026-16463 | 7.8 | — | — | — | autodesk / advance steel | A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerabilit | 78d ago |
| CVE-2026-18220 | 7.8 | — | — | — | — | An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binut | 78d ago |
| CVE-2026-64556 | 7.8 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_o | 78d ago |
| CVE-2026-54656 | 7.8 | — | — | — | koxudaxi / datamodel-code-generator | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JS | 78d ago |
| CVE-2026-54655 | 7.8 | — | — | — | — | datamodel-code-generator generates Python data models from schema definitions. | 78d ago |
| CVE-2026-54654 | 7.8 | — | — | — | — | datamodel-code-generator generates Python data models from schema definitions. | 78d ago |
| CVE-2026-54621 | 7.8 | — | — | — | — | datamodel-code-generator generates Python data models from schema definitions. | 78d ago |
