| CVE-2026-43906 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 152d ago |
| CVE-2026-43905 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 152d ago |
| CVE-2026-43904 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 152d ago |
| CVE-2026-43903 | 7.8 | — | — | — | openimageio / openimageio | OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to V | 152d ago |
| CVE-2026-44471 | 7.8 | — | — | — | gitoxidelabs / gix-fs | gitoxide is an implementation of git written in Rust. | 153d ago |
| CVE-2026-30906 | 7.8 | — | — | — | zoom / rooms | Untrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow an authenticated | 153d ago |
| CVE-2026-30905 | 7.8 | — | — | — | zoom / workplace virtual desktop infrastructure | External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version | 153d ago |
| CVE-2026-0251 | 7.8 | — | — | — | paloaltonetworks / globalprotect | Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user | 153d ago |
| CVE-2026-0247 | 7.8 | — | — | — | paloaltonetworks / prisma access agent | Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local a | 153d ago |
| CVE-2026-0246 | 7.8 | — | — | — | paloaltonetworks / prisma access agent | A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a loca | 153d ago |
| CVE-2026-0236 | 7.8 | — | — | — | paloaltonetworks / prisma browser | A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to | 153d ago |
| CVE-2026-0237 | 7.8 | — | — | — | paloaltonetworks / prisma browser | An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to prop | 153d ago |
| CVE-2026-45033 | 7.8 | — | — | — | github / copilot-cli | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. | 153d ago |
| CVE-2026-44470 | 7.8 | — | — | — | anthropic / claude desktop | The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side b | 153d ago |
| CVE-2026-43481 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlms | 153d ago |
| CVE-2026-43476 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in s | 153d ago |
| CVE-2026-42290 | 7.8 | — | — | — | protobufjs project / protobufjs-cli | protobufjs-cli is the command line add-on for protobuf.js. | 153d ago |
| CVE-2020-37223 | 7.8 | — | — | — | — | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows l | 153d ago |
| CVE-2024-47091 | 7.8 | — | — | — | checkmk / checkmk | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allo | 154d ago |
| CVE-2026-44612 | 7.8 | — | — | — | — | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. | 154d ago |
| CVE-2026-21020 | 7.8 | — | — | — | samsung / android | Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers | 154d ago |
| CVE-2026-8108 | 7.8 | — | — | — | fujielectric / tellus | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions. | 154d ago |
| CVE-2025-65088 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share ve | 154d ago |
| CVE-2025-65087 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share ve | 154d ago |
| CVE-2025-65086 | 7.8 | — | — | — | ashlar / argon | An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v | 154d ago |
| CVE-2026-34690 | 7.8 | — | — | — | adobe / after effects | After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execu | 154d ago |
| CVE-2026-34684 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34683 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34682 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34681 | 7.8 | — | — | — | adobe / substance 3d designer | Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-42896 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges loc | 154d ago |
| CVE-2026-42831 | 7.8 | — | — | — | microsoft / 365 copilot | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. | 154d ago |
| CVE-2026-41611 | 7.8 | — | — | — | microsoft / visual studio code | Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unau | 154d ago |
| CVE-2026-41095 | 7.8 | — | — | — | microsoft / windows server 2012 | Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-41088 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock all | 154d ago |
| CVE-2026-40419 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40418 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40417 | 7.8 | — | — | — | microsoft / dynamics 365 business central | Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40408 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40407 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privi | 154d ago |
| CVE-2026-40399 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 154d ago |
| CVE-2026-40398 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40397 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privi | 154d ago |
| CVE-2026-40382 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40381 | 7.8 | — | — | — | microsoft / azure connected machine agent | Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges local | 154d ago |
| CVE-2026-40377 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges l | 154d ago |
| CVE-2026-40369 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-40362 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 154d ago |
| CVE-2026-40360 | 7.8 | — | — | — | microsoft / 365 apps | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 154d ago |
| CVE-2026-40359 | 7.8 | — | — | — | microsoft / 365 apps | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 154d ago |
| CVE-2026-35421 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally. | 154d ago |
| CVE-2026-35420 | 7.8 | — | — | — | microsoft / windows server 2012 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-35418 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 154d ago |
| CVE-2026-35417 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-35415 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows Storage Spaces Controller allows an authorized attacker to elevate privi | 154d ago |
| CVE-2026-34687 | 7.8 | — | — | — | adobe / illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that coul | 154d ago |
| CVE-2026-34676 | 7.8 | — | — | — | adobe / substance 3d painter | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34675 | 7.8 | — | — | — | adobe / substance 3d painter | Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34661 | 7.8 | — | — | — | adobe / illustrator | Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds write vulnerability that could resu | 154d ago |
| CVE-2026-34644 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability th | 154d ago |
