| CVE-2026-12782 | 7.8 | — | — | — | — | A security flaw has been discovered in EaseUS Partition Master up to 14.5. | 115d ago |
| CVE-2026-12781 | 7.8 | — | — | — | — | A vulnerability was identified in EaseUS Partition Master up to 14.5. | 115d ago |
| CVE-2026-12780 | 7.8 | — | — | — | — | A vulnerability was determined in AOMEI Backupper up to 8.3.0. | 115d ago |
| CVE-2026-12779 | 7.8 | — | — | — | — | A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. | 115d ago |
| CVE-2026-12778 | 7.8 | — | — | — | — | A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. | 115d ago |
| CVE-2026-52910 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: bpf: Free reuseport cBPF prog after RCU grace | 117d ago |
| CVE-2026-52909 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback d | 117d ago |
| CVE-2026-52908 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: RDMA: During rereg_mr ensure that REREG_ACCESS | 117d ago |
| CVE-2025-71326 | 7.8 | — | — | — | — | AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local | 117d ago |
| CVE-2023-54353 | 7.8 | — | — | — | — | Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local | 117d ago |
| CVE-2022-50971 | 7.8 | — | — | — | malwarebytes / malwarebytes | Malwarebytes 4.5 contains an unquoted service path vulnerability in the MBAMService executable that allows local a | 117d ago |
| CVE-2021-47985 | 7.8 | — | — | — | — | Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows | 117d ago |
| CVE-2020-37254 | 7.8 | — | — | — | — | Wondershare PDFelement 5.2.9 contains a privilege escalation vulnerability due to an unquoted service path in the | 117d ago |
| CVE-2020-37253 | 7.8 | — | — | — | — | Winstep 18.06.0096 contains an unquoted service path vulnerability in the Winstep Xtreme Service that allows local | 117d ago |
| CVE-2020-37252 | 7.8 | — | — | — | — | Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allow | 117d ago |
| CVE-2020-37251 | 7.8 | — | — | — | — | RealTimes Desktop Service 18.1.4 contains an unquoted service path vulnerability in the rpdsvc.exe binary that all | 117d ago |
| CVE-2020-37250 | 7.8 | — | — | — | — | TFTP Broadband 4.3.0.1465 contains an unquoted service path vulnerability in the tftpt.exe service binary that all | 117d ago |
| CVE-2019-25747 | 7.8 | — | — | — | — | Network Inventory Advisor 5.0.26.0 installs the niaservice service with an unquoted binary path that allows local | 117d ago |
| CVE-2016-20095 | 7.8 | — | — | — | — | Matrix42 Remote Control Host 3.20.0031 contains an unquoted service path vulnerability in the FastViewerRemoteServ | 117d ago |
| CVE-2016-20094 | 7.8 | — | — | — | anydesk / anydesk | AnyDesk 2.5.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary code wi | 117d ago |
| CVE-2016-20093 | 7.8 | — | — | — | — | Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssista | 117d ago |
| CVE-2016-20092 | 7.8 | — | — | — | — | NetDrive 2.6.12 contains an unquoted service path vulnerability in the Netdrive2_Service_Netdrive2 service that al | 117d ago |
| CVE-2016-20091 | 7.8 | — | — | — | — | Windows Firewall Control 4.8.6.0 contains an unquoted service path vulnerability that allows local attackers to es | 117d ago |
| CVE-2016-20090 | 7.8 | — | — | — | — | Comodo Dragon Browser versions up to 52.15.25.663 contain a privilege escalation vulnerability in the DragonUpdate | 117d ago |
| CVE-2016-20089 | 7.8 | — | — | — | — | Iperius Remote 1.7.0 contains an unquoted service path vulnerability that allows local users to execute arbitrary | 117d ago |
| CVE-2016-20088 | 7.8 | — | — | — | — | Comodo Chromodo Browser 52.15.25.664 contains an unquoted service path vulnerability in the ChromodoUpdater servic | 117d ago |
| CVE-2016-20087 | 7.8 | — | — | — | — | Fortitude HTTP 1.0.4.0 contains an unquoted service path vulnerability that allows local users to execute arbitrar | 117d ago |
| CVE-2016-20086 | 7.8 | — | — | — | — | Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackup_webServer | 117d ago |
| CVE-2016-20085 | 7.8 | — | — | — | — | Realtek High Definition Audio Driver 6.0.1.6730 contains an unquoted service path vulnerability that allows local | 117d ago |
| CVE-2026-46461 | 7.8 | — | — | — | dell / server hardware manager | Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. | 117d ago |
| CVE-2026-25865 | 7.8 | — | — | — | — | Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attacker | 118d ago |
| CVE-2026-12390 | 7.8 | — | — | — | azeotech / daqfactory | In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vulnerability can be exploited by an attacker usi | 118d ago |
| CVE-2026-12505 | 7.8 | — | — | — | — | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges | 118d ago |
| CVE-2026-32652 | 7.8 | — | — | — | dell / aiops collector | Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. | 119d ago |
| CVE-2026-28615 | 7.8 | — | — | — | google / android | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permissions bypass. | 119d ago |
| CVE-2026-12449 | 7.8 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perfo | 119d ago |
| CVE-2026-0082 | 7.8 | — | — | — | google / android | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment d | 119d ago |
| CVE-2026-0081 | 7.8 | — | — | — | google / android | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. | 119d ago |
| CVE-2026-0071 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible missing permission check due to a logic error in the code. | 119d ago |
| CVE-2026-0068 | 7.8 | — | — | — | google / android | In createSessionInternal of PackageInstallerService.java, there is a possible method to remove a DPC app from a man | 119d ago |
| CVE-2026-0063 | 7.8 | — | — | — | google / android | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable carrier restrictions due to | 119d ago |
| CVE-2026-0019 | 7.8 | — | — | — | google / android | In SettingsLib, there is a possible way to disable system components due to a logic error in the code. | 119d ago |
| CVE-2025-48643 | 7.8 | — | — | — | google / android | In multiple locations there is a possible provisioning bypass due to improper input validation. | 119d ago |
| CVE-2025-48617 | 7.8 | — | — | — | google / android | In overrideConfig of CarrierConfigLoader.java, there is a possible way to bypass UID check due to a permissions by | 119d ago |
| CVE-2026-46888 | 7.8 | — | — | — | oracle / siebel crm | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Database Upgrade). | 119d ago |
| CVE-2026-47750 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 120d ago |
| CVE-2026-47747 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 120d ago |
| CVE-2026-0153 | 7.8 | — | — | — | google / android | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incorrect bounds check. | 120d ago |
| CVE-2026-0152 | 7.8 | — | — | — | google / android | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to system call to maliciously ex | 120d ago |
| CVE-2026-0150 | 7.8 | — | — | — | google / android | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds write due to an integer over | 120d ago |
| CVE-2026-0143 | 7.8 | — | — | — | google / android | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption due to a use after free. | 120d ago |
| CVE-2026-0138 | 7.8 | — | — | — | google / android | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. | 120d ago |
| CVE-2026-0137 | 7.8 | — | — | — | google / android | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation of privilege due to a use | 120d ago |
| CVE-2026-0135 | 7.8 | — | — | — | google / android | In Modem, there is a possible out of bounds read due to a missing bounds check. | 120d ago |
| CVE-2026-0133 | 7.8 | — | — | — | google / android | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts | 120d ago |
| CVE-2026-50656 | 7.8 | — | — | — | microsoft / malware protection engine | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender p | 120d ago |
| CVE-2026-47964 | 7.8 | — | — | — | adobe / dng software development kit | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resu | 120d ago |
| CVE-2026-47749 | 7.8 | — | — | — | leejet / stable-diffusion.cpp | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, | 120d ago |
| CVE-2026-24228 | 7.8 | — | — | — | nvidia / nemo | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted | 120d ago |
| CVE-2026-24155 | 7.8 | — | — | — | nvidia / nemo | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. | 120d ago |
