| CVE-2026-34643 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could re | 154d ago |
| CVE-2026-34642 | 7.8 | — | — | — | adobe / after effects | After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that co | 154d ago |
| CVE-2026-34640 | 7.8 | — | — | — | adobe / media encoder | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability | 154d ago |
| CVE-2026-34639 | 7.8 | — | — | — | adobe / media encoder | Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could | 154d ago |
| CVE-2026-34638 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result | 154d ago |
| CVE-2026-34637 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could r | 154d ago |
| CVE-2026-34636 | 7.8 | — | — | — | adobe / premiere pro | Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could r | 154d ago |
| CVE-2026-34351 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 154d ago |
| CVE-2026-34344 | 7.8 | — | — | — | microsoft / windows 10 1607 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock all | 154d ago |
| CVE-2026-34343 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elev | 154d ago |
| CVE-2026-34338 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-34337 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 154d ago |
| CVE-2026-34336 | 7.8 | — | — | — | microsoft / windows 10 1607 | Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges loc | 154d ago |
| CVE-2026-34334 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allo | 154d ago |
| CVE-2026-34333 | 7.8 | — | — | — | microsoft / windows 10 1607 | Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-34330 | 7.8 | — | — | — | microsoft / windows 10 1607 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GR | 154d ago |
| CVE-2026-33841 | 7.8 | — | — | — | microsoft / windows 10 21h2 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-33840 | 7.8 | — | — | — | microsoft / windows 11 24h2 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-33838 | 7.8 | — | — | — | microsoft / windows 10 1607 | Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-33837 | 7.8 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 154d ago |
| CVE-2026-33835 | 7.8 | — | — | — | microsoft / windows 10 1809 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges local | 154d ago |
| CVE-2026-33834 | 7.8 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges local | 154d ago |
| CVE-2026-32204 | 7.8 | — | — | — | microsoft / azure monitor agent | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges l | 154d ago |
| CVE-2026-20767 | 7.8 | — | — | — | intel / quickassist technology | Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: Us | 154d ago |
| CVE-2026-20714 | 7.8 | — | — | — | intel / quickassist technology | Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App | 154d ago |
| CVE-2026-31221 | 7.8 | — | — | — | lightningai / pytorch lightning | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the ch | 154d ago |
| CVE-2026-8110 | 7.8 | — | — | — | ivanti / endpoint manager | Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local aut | 154d ago |
| CVE-2026-7432 | 7.8 | — | — | — | ivanti / secure access client | A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privi | 154d ago |
| CVE-2026-32687 | 7.8 | — | — | — | elixir-ecto / postgrex | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto | 154d ago |
| CVE-2025-12659 | 7.8 | — | — | — | — | Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. | 154d ago |
| CVE-2026-44412 | 7.8 | — | — | — | — | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). | 155d ago |
| CVE-2026-44411 | 7.8 | — | — | — | siemens / solid edge se2026 | A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). | 155d ago |
| CVE-2026-45393 | 7.8 | — | — | — | — | A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privil | 155d ago |
| CVE-2026-45391 | 7.8 | — | — | — | — | A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivilege | 155d ago |
| CVE-2026-42046 | 7.8 | — | — | — | — | libcaca is a colour ASCII art library. | 155d ago |
| CVE-2026-28951 | 7.8 | — | — | — | apple / ipados | An authorization issue was addressed with improved state management. | 155d ago |
| CVE-2026-28919 | 7.8 | — | — | — | apple / macos | A consistency issue was addressed with improved state handling. | 155d ago |
| CVE-2026-28915 | 7.8 | — | — | — | apple / macos | A parsing issue in the handling of directory paths was addressed with improved path validation. | 155d ago |
| CVE-2026-28840 | 7.8 | — | — | — | apple / macos | A permissions issue was addressed with additional restrictions. | 155d ago |
| CVE-2026-45004 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver | 155d ago |
| CVE-2026-3609 | 7.8 | — | — | — | wellbia / xigncode3 | Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation | 155d ago |
| CVE-2026-43500zero day | 7.8 | 2.3% | 1/3 | same day | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when | 156d ago |
| CVE-2021-47945 | 7.8 | — | — | — | — | Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows | 156d ago |
| CVE-2026-1995 | 7.8 | — | — | — | — | IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\P | 203d ago |
| CVE-2026-4775 | 7.8 | — | — | — | libtiff / libtiff | A flaw was found in the libtiff library. | 203d ago |
| CVE-2026-32647 | 7.8 | — | — | — | f5 / nginx plus | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an atta | 203d ago |
| CVE-2026-27784 | 7.8 | — | — | — | f5 / nginx open source | The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might | 203d ago |
| CVE-2026-4756 | 7.8 | — | — | — | molotovcherry / android-imagemagick7 | Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: be | 204d ago |
| CVE-2026-33851 | 7.8 | — | — | — | — | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.Thi | 204d ago |
| CVE-2026-33850 | 7.8 | — | — | — | — | Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54. | 204d ago |
| CVE-2026-33847 | 7.8 | — | — | — | linkingvision / rapidvms | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.Th | 204d ago |
| CVE-2026-33298 | 7.8 | — | — | — | ggml / llama.cpp | llama.cpp is an inference of several LLM models in C/C++. | 204d ago |
| CVE-2026-23554 | 7.8 | — | — | — | xen / xen | The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dro | 205d ago |
| CVE-2019-25612 | 7.8 | — | — | — | — | Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows l | 205d ago |
| CVE-2026-22163 | 7.8 | — | — | — | imaginationtech / ddk | Requires malware code to misuse the DDK kernel module IOCTL interface. | 207d ago |
| CVE-2026-33156 | 7.8 | — | — | — | screentogif / screentogif | ScreenToGif is a screen recording tool. | 207d ago |
| CVE-2026-33150 | 7.8 | — | — | — | libfuse project / libfuse | libfuse is the reference implementation of the Linux FUSE. | 207d ago |
| CVE-2025-63261 | 7.8 | — | — | — | awstats / awstats | AWStats 8.0 is vulnerable to Command Injection via the open function | 207d ago |
| CVE-2026-33139 | 7.8 | — | — | — | parzivalhack / pyspector | PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflow | 207d ago |
| CVE-2026-23278 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: always walk all pending | 208d ago |
