CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

21,446 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 6 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	EPSS	KEV sources	Patch window	Vendor / product	Summary	Published
CVE-2026-65706	7.8	—	—	—	ffmpeg / ffmpeg	FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter tha	83d ago
CVE-2026-65705	7.8	—	—	—	ffmpeg / ffmpeg	FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter th	83d ago
CVE-2026-65704	7.8	—	—	—	ffmpeg / ffmpeg	FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption	83d ago
CVE-2026-65703	7.8	—	—	—	ffmpeg / ffmpeg	FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allo	83d ago
CVE-2026-60122	7.8	—	—	—	—	gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utili	83d ago
CVE-2026-64811	7.8	—	—	—	jetbrains / intellij idea	In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via d	84d ago
CVE-2026-64807	7.8	—	—	—	jetbrains / webstorm	In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configurat	84d ago
CVE-2026-64803	7.8	—	—	—	jetbrains / goland	In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the conf	84d ago
CVE-2026-64802	7.8	—	—	—	jetbrains / goland	In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Mo	84d ago
CVE-2026-16287	7.8	—	—	—	—	Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITA	84d ago
CVE-2026-64600	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: xfs: resample the data fork mapping after cycl	84d ago
CVE-2026-38766	7.8	—	—	—	—	An issue in Unistal Systems Pvt.	84d ago
CVE-2026-38765	7.8	—	—	—	—	An issue in Unistal Systems Pvt.	84d ago
CVE-2025-60835	7.8	—	—	—	—	An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.	84d ago
CVE-2026-14881	7.8	—	—	—	—	When importing connections in Compass it is possible to override some connection options that are otherwise can't	84d ago
CVE-2026-16157	7.8	—	—	—	—	Duplicati v2.3.0.1 backup software gives Authenticated Users MODIFY permissions that propagate to all subdirectori	84d ago
CVE-2026-16607	7.8	—	—	—	—	A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00	85d ago
CVE-2026-14985	7.8	—	—	—	—	The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability i	85d ago
CVE-2026-44191	7.8	—	—	—	—	A flaw was found in the Visual Studio Code Ansible Lightspeed extension.	85d ago
CVE-2026-44190	7.8	—	—	—	—	A flaw was found in the Ansible Lightspeed Visual Studio Code extension.	85d ago
CVE-2026-44189	7.8	—	—	—	—	A flaw was found in the Visual Studio Code Ansible Lightspeed extension's AnsiblePlaybookRunProvider.	85d ago
CVE-2026-16414	7.8	—	—	—	google / chrome	Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local	85d ago
CVE-2026-62574	7.8	—	—	—	oracle / jre	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle J	85d ago
CVE-2026-62561	7.8	—	—	—	oracle / human resources management system	Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations).	85d ago
CVE-2026-61126	7.8	—	—	—	oracle / communications billing and revenue management	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (compon	85d ago
CVE-2026-61091	7.8	—	—	—	oracle / communications billing and revenue management	Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (compon	85d ago
CVE-2026-61090	7.8	—	—	—	oracle / e-business suite	Vulnerability in the Oracle Project Foundation product of Oracle E-Business Suite (component: Miscellaneous).	85d ago
CVE-2026-61055	7.8	—	—	—	oracle / peoplesoft enterprise scm order management	Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSoft (component: Security)	85d ago
CVE-2026-61053	7.8	—	—	—	oracle / communications billing and revenue management elastic charging engine	Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (compone	85d ago
CVE-2026-60973	7.8	—	—	—	oracle / e-business tax	Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: Internal Operations).	85d ago
CVE-2026-60661	7.8	—	—	—	oracle / solaris	Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).	85d ago
CVE-2026-60625	7.8	—	—	—	oracle / data integrator	Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio).	85d ago
CVE-2026-60600	7.8	—	—	—	oracle / peoplesoft enterprise fin project costing	Vulnerability in the PeopleSoft Enterprise FIN Project Costing product of Oracle PeopleSoft (component: Projects).	85d ago
CVE-2026-60570	7.8	—	—	—	oracle / goldengate	Vulnerability in Oracle GoldenGate (component: Libraries).	85d ago
CVE-2026-60530	7.8	—	—	—	oracle / http server	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so).	85d ago
CVE-2026-60454	7.8	—	—	—	oracle / http server	Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).	85d ago
CVE-2026-60271	7.8	—	—	—	oracle / coherence	Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core).	85d ago
CVE-2026-60150	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	85d ago
CVE-2026-47054	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	85d ago
CVE-2026-47047	7.8	—	—	—	oracle / vm virtualbox	Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).	85d ago
CVE-2026-59146	7.8	—	—	—	—	Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucke	85d ago
CVE-2026-50757	7.8	—	—	—	—	Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitra	85d ago
CVE-2026-16493	7.8	—	—	—	—	A flaw was found in ansible-core.	85d ago
CVE-2026-8933	7.8	—	—	—	—	A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internall	86d ago
CVE-2026-15905	7.8	—	—	—	google / chrome	Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit he	86d ago
CVE-2026-64624	7.8	—	—	—	freerdp / freerdp	FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing	86d ago
CVE-2026-48389	7.8	—	—	—	adobe / dng software development kit	DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could res	86d ago
CVE-2026-64191	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with inv	87d ago
CVE-2026-64189	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip	87d ago
CVE-2026-64188	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-f	87d ago
CVE-2026-35591	7.8	—	—	—	libvips / libvips	libvips is a fast image processing library with low memory needs.	87d ago
CVE-2026-33327	7.8	—	—	—	libvips / libvips	libvips is a fast image processing library with low memory needs.	87d ago
CVE-2026-52349	7.8	—	—	—	—	Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a l	87d ago
CVE-2026-12484	7.8	—	—	—	—	A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pi	87d ago
CVE-2026-64181	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing s	88d ago
CVE-2026-64152	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is	88d ago
CVE-2026-64145	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acq	88d ago
CVE-2026-64137	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN ne	88d ago
CVE-2026-64134	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for sile	88d ago
CVE-2026-64133	7.8	—	—	—	linux / linux kernel	In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access a	88d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE); CISA KEV, ENISA EUVD, CIRCL and VulnCheck (exploitation status, three catalogues counted; CIRCL shown as an aggregator); FIRST EPSS (exploitation probability). Patch window is the gap between CVE publication and the earliest KEV listing, so a negative value means a catalogue called it exploited before it was disclosed. Data refreshes every five hours.

Loading

CVE Tracker