| CVE-2026-7451 | 7.8 | — | — | — | autodesk / 3ds max | A maliciously crafted TIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerabilit | 140d ago |
| CVE-2026-24194 | 7.8 | — | — | — | nvidia / gpu display driver | NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause | 140d ago |
| CVE-2026-24193 | 7.8 | — | — | — | nvidia / gpu display driver | NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bound | 140d ago |
| CVE-2026-24192 | 7.8 | — | — | — | nvidia / gpu display driver | NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion bet | 140d ago |
| CVE-2026-24191 | 7.8 | — | — | — | nvidia / gpu display driver | NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-u | 140d ago |
| CVE-2026-24190 | 7.8 | — | — | — | nvidia / gpu display driver | NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could | 140d ago |
| CVE-2026-48864 | 7.8 | — | — | — | opensuse / libsolv | A flaw was found in libsolv. | 140d ago |
| CVE-2026-24162 | 7.8 | — | — | — | nvidia / transformers4rec | NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization | 140d ago |
| CVE-2026-25112 | 7.8 | — | — | — | — | A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. | 140d ago |
| CVE-2026-40034 | 7.8 | — | — | — | — | gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in | 141d ago |
| CVE-2026-25713 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability | 141d ago |
| CVE-2026-25104 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability | 141d ago |
| CVE-2026-44469 | 7.8 | — | — | — | codesys / development system | The affected product extracts installation files to a temporary directory with incorrect default permissions durin | 141d ago |
| CVE-2026-44468 | 7.8 | — | — | — | codesys / development system | The affected product creates a directory with insecure default permissions during administrative installation. | 141d ago |
| CVE-2026-4372 | 7.8 | — | — | — | huggingface / transformers | A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior | 143d ago |
| CVE-2026-46300exploited | 7.8 | 2.4% | 1/3 | +72d | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker durin | 144d ago |
| CVE-2026-9255 | 7.8 | — | — | — | amazon / kiro cli | Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker | 144d ago |
| CVE-2026-45208 | 7.8 | — | — | — | trendmicro / apex one | A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privi | 146d ago |
| CVE-2026-45207 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2026-45206 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2026-34930 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2026-34929 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2026-34928 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2026-34927 | 7.8 | — | — | — | trendmicro / apex one | An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges o | 146d ago |
| CVE-2025-71217 | 7.8 | — | — | — | trendmicro / apex one | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could a | 146d ago |
| CVE-2025-71216 | 7.8 | — | — | — | trendmicro / apex one | A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a lo | 146d ago |
| CVE-2025-71214 | 7.8 | — | — | — | trendmicro / apex one | An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local | 146d ago |
| CVE-2025-71213 | 7.8 | — | — | — | trendmicro / apex one | An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileg | 146d ago |
| CVE-2025-71212 | 7.8 | — | — | — | trendmicro / apex one | A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate pr | 146d ago |
| CVE-2026-43502 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before t | 146d ago |
| CVE-2026-43499 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current i | 146d ago |
| CVE-2026-43498 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM | 146d ago |
| CVE-2026-43494exploited | 7.8 | 0.19% | 1/3 | +97d | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin | 146d ago |
| CVE-2026-45251 | 7.8 | — | — | — | freebsd / freebsd | A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descript | 146d ago |
| CVE-2026-28764 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib LXF element parsing heap-based buffer overflow vulnerability | 146d ago |
| CVE-2026-45250 | 7.8 | — | — | — | freebsd / freebsd | The setcred(2) system call is only available to privileged users. | 146d ago |
| CVE-2026-8632 | 7.8 | — | — | — | hp / linux imaging and printing | A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. | 146d ago |
| CVE-2026-24216 | 7.8 | — | — | — | nvidia / bionemo framework | NVIDIA BioNemo for Linux contains a vulnerability where a user could cause a deserialization of untrusted data. | 146d ago |
| CVE-2026-22554 | 7.8 | — | — | — | mediaarea / mediainfolib | MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability | 147d ago |
| CVE-2026-42834 | 7.8 | — | — | — | microsoft / windows admin center | Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network | 147d ago |
| CVE-2026-41091zero day | 7.8 | 0.44% | 3/3 | 1d before | microsoft / malware protection engine | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker | 147d ago |
| CVE-2026-0856 | 7.8 | — | — | — | — | Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component en | 147d ago |
| CVE-2026-44933 | 7.8 | — | — | — | — | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system r | 147d ago |
| CVE-2026-41054 | 7.8 | — | — | — | — | In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/s | 147d ago |
| CVE-2026-23558 | 7.8 | — | — | — | xen / xen | The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a H | 148d ago |
| CVE-2026-47314 | 7.8 | — | — | — | samsung / escargot | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | 148d ago |
| CVE-2026-47311 | 7.8 | — | — | — | samsung / escargot | Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers. | 148d ago |
| CVE-2026-47310 | 7.8 | — | — | — | samsung / escargot | Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. | 148d ago |
| CVE-2026-4137 | 7.8 | — | — | — | lfprojects / mlflow | In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.p | 148d ago |
| CVE-2026-47092 | 7.8 | — | — | — | jarrodwatts / claude hud | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local | 148d ago |
| CVE-2021-47974 | 7.8 | — | — | — | — | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterpris | 150d ago |
| CVE-2020-37247 | 7.8 | — | — | — | — | Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows loc | 150d ago |
| CVE-2020-37232 | 7.8 | — | — | — | — | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareS | 150d ago |
| CVE-2020-37231 | 7.8 | — | — | — | — | Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows l | 150d ago |
| CVE-2020-37230 | 7.8 | — | — | — | — | Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that | 150d ago |
| CVE-2020-37229 | 7.8 | — | — | — | — | OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allo | 150d ago |
| CVE-2026-45038 | 7.8 | — | — | — | tabby / tabby | Tabby (formerly Terminus) is a highly configurable terminal emulator. | 151d ago |
| CVE-2026-46508 | 7.8 | — | — | — | vercel / turborepo language server protocol | Turborepo is a high-performance build system for JavaScript and TypeScript codebases. | 151d ago |
| CVE-2026-41702 | 7.8 | — | — | — | vmware / fusion | VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performe | 152d ago |
| CVE-2024-36333 | 7.8 | — | — | — | amd / radeon software | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation p | 152d ago |
