| CVE-2026-41859 | 7.8 | — | — | — | — | A network man-in-the-middle between nats-sync and the BOSH director can steal the director credentials (Basic auth | 132d ago |
| CVE-2026-46271 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary | 132d ago |
| CVE-2026-46267 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before f | 132d ago |
| CVE-2026-46263 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream enco | 132d ago |
| CVE-2026-46260 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2n | 132d ago |
| CVE-2026-46259 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when readin | 132d ago |
| CVE-2026-46253 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ | 132d ago |
| CVE-2026-46246 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free | 132d ago |
| CVE-2026-40290 | 7.8 | — | — | — | trustedfirmware / op-tee | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; | 132d ago |
| CVE-2026-36574 | 7.8 | — | — | — | — | A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges | 133d ago |
| CVE-2022-49042 | 7.8 | — | — | — | synology / hyper backup explorer | An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper | 133d ago |
| CVE-2022-49036 | 7.8 | — | — | — | synology / active backup for business recovery media creator | An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Act | 133d ago |
| CVE-2026-40715 | 7.8 | — | — | — | dell / thinos | Dell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. | 133d ago |
| CVE-2026-24237 | 7.8 | — | — | — | nvidia / nvtabular | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data | 133d ago |
| CVE-2026-24221 | 7.8 | — | — | — | nvidia / nvtabular | NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data | 133d ago |
| CVE-2026-40619 | 7.8 | — | — | — | — | A high security vulnerability affecting Security Center main server installations has been identified. | 134d ago |
| CVE-2026-10047 | 7.8 | — | — | — | bitdefender / napoca | The Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the real-mode hook h | 134d ago |
| CVE-2026-10046 | 7.8 | — | — | — | bitdefender / napoca | Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 | 134d ago |
| CVE-2026-25260 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. | 134d ago |
| CVE-2026-25259 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory corruption while processing multiple IOCTL command for escape operations. | 134d ago |
| CVE-2026-25258 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory corruption while processing IOCTL calls for escape operations. | 134d ago |
| CVE-2025-59606 | 7.8 | — | — | — | qualcomm / cologne firmware | Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data | 134d ago |
| CVE-2025-59605 | 7.8 | — | — | — | qualcomm / snapdragon g1 gen 2 gaming platform firmware | Memory Corruption when processing device identifier strings that exceed the expected maximum length. | 134d ago |
| CVE-2025-59604 | 7.8 | — | — | — | qualcomm / snapdragon 480 5g mobile platform firmware | Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer. | 134d ago |
| CVE-2026-28580 | 7.8 | — | — | — | google / android | In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. | 134d ago |
| CVE-2026-28577 | 7.8 | — | — | — | google / android | In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 134d ago |
| CVE-2026-0100 | 7.8 | — | — | — | google / android | In Load of LoadedArsc.cpp, there is a possible out of bounds write due to a heap buffer overflow. | 134d ago |
| CVE-2026-0099 | 7.8 | — | — | — | google / android | In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background du | 134d ago |
| CVE-2026-0098 | 7.8 | — | — | — | google / android | In getCallingPackageName of Shared.java, there is a possible way to bypass activity start restrictions due to a con | 134d ago |
| CVE-2026-0096 | 7.8 | — | — | — | google / android | In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due | 134d ago |
| CVE-2026-0094 | 7.8 | — | — | — | google / android | In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to | 134d ago |
| CVE-2026-0093 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible misleading UI due to obfuscation. | 134d ago |
| CVE-2026-0091 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged sh | 134d ago |
| CVE-2026-0089 | 7.8 | — | — | — | google / android | In multiple functions of PackageInstallerService.java, there is a possible way to install unverified apps due to a | 134d ago |
| CVE-2026-0088 | 7.8 | — | — | — | google / android | In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to m | 134d ago |
| CVE-2026-0087 | 7.8 | — | — | — | google / android | In approvalLevelForDomainInternal of DomainVerificationService.java, there is a possible way to hijack an arbitrary | 134d ago |
| CVE-2026-0078 | 7.8 | — | — | — | google / android | In setGlobalProxy of DevicePolicyManagerService.java, there is a possible desync in persistence due to improper inp | 134d ago |
| CVE-2026-0077 | 7.8 | — | — | — | google / android | In resumeConfigurationDispatch of ActivityRecord.java, there is a possible background application launch (bal) due | 134d ago |
| CVE-2026-0076 | 7.8 | — | — | — | google / android | In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. | 134d ago |
| CVE-2026-0045 | 7.8 | — | — | — | google / android | In bta_jv_rfcomm_connect of bta_jv_act.cc, there is a possible bypass of bonding for a secure connection due to a l | 134d ago |
| CVE-2026-0036 | 7.8 | — | — | — | google / android | In startAnimation of StageCoordinator.java, there is a possible tapjacking issue due to a tapjacking/overlay attack | 134d ago |
| CVE-2026-0009 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible tapjacking due to a logic error in the code. | 134d ago |
| CVE-2025-48652 | 7.8 | — | — | — | google / android | In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic er | 134d ago |
| CVE-2025-48649 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reset user-selected permissions selections due to a permissions | 134d ago |
| CVE-2025-48570 | 7.8 | — | — | — | google / android | In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background | 134d ago |
| CVE-2025-32348 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible background activity launch due to a missing permission check. | 134d ago |
| CVE-2025-26418 | 7.8 | — | — | — | google / android | In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog | 134d ago |
| CVE-2025-22426 | 7.8 | — | — | — | google / android | In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error | 134d ago |
| CVE-2025-22424 | 7.8 | — | — | — | google / android | In multiple locations, there is a possible way to reveal images across users due to improper input validation. | 134d ago |
| CVE-2026-43958 | 7.8 | — | — | — | — | A flaw was found in rrdcached, a component of rrdtool. | 134d ago |
| CVE-2026-0072 | 7.8 | — | — | — | google / android xr | In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permissio | 134d ago |
| CVE-2026-8501 | 7.8 | — | — | — | — | Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode | 134d ago |
| CVE-2026-38950 | 7.8 | — | — | — | — | An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint f | 134d ago |
| CVE-2026-10118 | 7.8 | — | — | — | — | A flaw was found in Poppler's Splash backend. | 134d ago |
| CVE-2026-32325 | 7.8 | — | — | — | — | Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. | 135d ago |
| CVE-2026-27788 | 7.8 | — | — | — | — | Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and | 135d ago |
| CVE-2026-20455 | 7.8 | — | — | — | mediatek / mt6739 firmware | In geniezone, there is a possible out of bounds write due to a missing bounds check. | 135d ago |
| CVE-2026-46242 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_remove struct eventpoll / st | 137d ago |
| CVE-2026-49366 | 7.8 | — | — | — | jetbrains / intellij idea | In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion | 137d ago |
| CVE-2026-45555 | 7.8 | — | — | — | — | Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. | 138d ago |
