| CVE-2026-14606 | 7.8 | — | — | — | — | A security flaw has been discovered in RT-Thread up to 5.0.2. | 103d ago |
| CVE-2026-14605 | 7.8 | — | — | — | — | A vulnerability was identified in RT-Thread up to 5.0.2. | 103d ago |
| CVE-2026-13079 | 7.8 | — | — | — | watchguard / mobile vpn with ssl | A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local | 104d ago |
| CVE-2026-38972 | 7.8 | — | — | — | rizonesoft / notepad3 | Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in s | 104d ago |
| CVE-2026-12168 | 7.8 | — | — | — | — | An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to | 104d ago |
| CVE-2026-12167 | 7.8 | — | — | — | — | The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to ac | 104d ago |
| CVE-2026-54074 | 7.8 | — | — | — | — | Tina is a headless content management system. | 105d ago |
| CVE-2026-46680 | 7.8 | — | — | — | linuxfoundation / containerd | containerd is an open-source container runtime. | 105d ago |
| CVE-2026-24251 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami | 105d ago |
| CVE-2026-24250 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper validation of all | 105d ago |
| CVE-2026-24249 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-24248 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of code g | 105d ago |
| CVE-2026-24247 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-24246 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause improper control of dynami | 105d ago |
| CVE-2026-24245 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-24244 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-24243 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-24242 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forger | 105d ago |
| CVE-2026-24240 | 7.8 | — | — | — | nvidia / nemo megatron bridge | NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrust | 105d ago |
| CVE-2026-53356 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with of | 105d ago |
| CVE-2026-53341 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: fhandle: fix UAF due to unlocked ->mnt_ns read | 105d ago |
| CVE-2026-14191 | 7.8 | — | — | — | — | An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::Rea | 106d ago |
| CVE-2026-54672 | 7.8 | — | — | — | electron / electron-builder | electron-updater allows for automatic updates for Electron apps. | 106d ago |
| CVE-2026-14124 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to 150.0.7871.47 allowed a lo | 106d ago |
| CVE-2026-14094 | 7.8 | — | — | — | google / chrome | Use after free in Installer in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform | 106d ago |
| CVE-2026-14060 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 allowe | 106d ago |
| CVE-2026-14018 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 106d ago |
| CVE-2026-13927 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a loca | 106d ago |
| CVE-2026-13863 | 7.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in CustomTabs in Google Chrome on Android prior to 150.0.7871.47 allowe | 106d ago |
| CVE-2026-13844 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform O | 106d ago |
| CVE-2026-13827 | 7.8 | — | — | — | google / chrome | Use after free in Updater in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to perform privi | 106d ago |
| CVE-2026-13800 | 7.8 | — | — | — | google / chrome | Inappropriate implementation in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacke | 106d ago |
| CVE-2026-13778 | 7.8 | — | — | — | google / chrome | Use after free in WebUSB in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to execute arbitr | 106d ago |
| CVE-2025-7406 | 7.8 | — | — | — | nokia / mantaray nm | Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing admi | 106d ago |
| CVE-2025-24815 | 7.8 | — | — | — | nokia / mantaray nm | Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation | 106d ago |
| CVE-2026-56137 | 7.8 | — | — | — | — | RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. | 106d ago |
| CVE-2026-57919 | 7.8 | — | — | — | — | PBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) wit | 107d ago |
| CVE-2026-43724 | 7.8 | — | — | — | apple / ipados | The issue was addressed with improved input sanitization. | 107d ago |
| CVE-2026-11979 | 7.8 | — | — | — | xmlsoft / libxml2 | libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell m | 107d ago |
| CVE-2026-49416 | 7.8 | — | — | — | freebsd / freebsd | The CONS_HISTORY ioctl handler did not adequately validate the requested history size. | 109d ago |
| CVE-2026-49414 | 7.8 | — | — | — | freebsd / freebsd | The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes | 109d ago |
| CVE-2026-49412 | 7.8 | — | — | — | freebsd / freebsd | The kernel handler for IPV6_MSFILTER dropped a serializing lock in order to copy the source-filter list from users | 109d ago |
| CVE-2026-45258 | 7.8 | — | — | — | freebsd / freebsd | dsp_mmap_single() validated the requested mapping by checking the sum of the user-supplied offset and length again | 109d ago |
| CVE-2026-52884 | 7.8 | — | — | — | notepad-plus-plus / notepad\+\+ | Notepad++ is a free and open-source source code editor. | 110d ago |
| CVE-2026-48800 | 7.8 | — | — | — | notepad-plus-plus / notepad\+\+ | Notepad++ is a free and open-source source code editor. | 110d ago |
| CVE-2026-48778 | 7.8 | — | — | — | notepad-plus-plus / notepad\+\+ | Notepad++ is a free and open-source source code editor. | 110d ago |
| CVE-2026-46710 | 7.8 | — | — | — | notepad-plus-plus / notepad\+\+ | Notepad++ is a free and open-source source code editor. | 110d ago |
| CVE-2026-53300 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue | 110d ago |
| CVE-2026-53296 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe | 110d ago |
| CVE-2026-53294 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused c | 110d ago |
| CVE-2026-53290 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before | 110d ago |
| CVE-2026-53286 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in au | 110d ago |
| CVE-2026-45195 | 7.8 | — | — | — | imaginationtech / ddk | Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a | 110d ago |
| CVE-2026-45257 | 7.8 | — | — | — | freebsd / freebsd | The KTLS receive path decrypted each record in place, assuming that the mbufs holding received data were anonymous | 110d ago |
| CVE-2025-60464 | 7.8 | — | — | — | gpac / gpac | A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box befo | 111d ago |
| CVE-2026-53925 | 7.8 | — | — | — | — | Glances is an open-source system cross-platform monitoring tool. | 111d ago |
| CVE-2026-46607 | 7.8 | — | — | — | — | Glances is an open-source system cross-platform monitoring tool. | 111d ago |
| CVE-2026-46606 | 7.8 | — | — | — | — | Glances is an open-source system cross-platform monitoring tool. | 111d ago |
| CVE-2026-12921 | 7.8 | — | — | — | azeotech / daqfactory | In AzeoTech DAQFactory versions 21.1 and prior, a Use After Free vulnerability can be exploited by an attacker usi | 111d ago |
| CVE-2026-57456 | 7.8 | — | — | — | vim / vim | Vim is an open source, command line text editor. | 111d ago |
