| CVE-2026-23275 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task | 208d ago |
| CVE-2026-23274 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: reject rev0 reuse of | 208d ago |
| CVE-2026-23273 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvla | 208d ago |
| CVE-2026-23272 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally bump set | 208d ago |
| CVE-2026-23271 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remo | 208d ago |
| CVE-2026-32711 | 7.8 | — | — | — | pydicom / pydicom | pydicom is a pure Python package for working with DICOM files. | 208d ago |
| CVE-2026-30874 | 7.8 | — | — | — | openwrt / openwrt | OpenWrt Project is a Linux operating system targeting embedded devices. | 208d ago |
| CVE-2026-32032 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallb | 208d ago |
| CVE-2026-32016 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 on macOS contain a path validation bypass vulnerability in the exec-approval | 208d ago |
| CVE-2026-32015 | 7.8 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a path hijacking vulnerability in tools.exec.safeBins that | 208d ago |
| CVE-2026-23270 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact | 209d ago |
| CVE-2026-23268 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unprivileged local user can do p | 209d ago |
| CVE-2026-23262 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue coun | 209d ago |
| CVE-2026-23253 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of | 209d ago |
| CVE-2026-24062 | 7.8 | — | — | — | — | The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code s | 209d ago |
| CVE-2026-23248 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF | 210d ago |
| CVE-2026-23245 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with | 210d ago |
| CVE-2026-23243 | 7.8 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad | 210d ago |
| CVE-2026-4295 | 7.8 | — | — | — | — | Improper trust boundary enforcement in Kiro IDE before version 0.8.0 on all supported platforms might allow a remot | 210d ago |
| CVE-2025-66342 | 7.8 | — | — | — | canva / affinity | A type confusion vulnerability exists in the EMF functionality of Canva Affinity. | 210d ago |
| CVE-2025-64301 | 7.8 | — | — | — | canva / affinity | An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. | 210d ago |
| CVE-2026-3888 | 7.8 | — | — | — | canonical / ubuntu linux | Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's pri | 210d ago |
| CVE-2026-23862 | 7.8 | — | — | — | dell / thinos | Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used | 211d ago |
| CVE-2025-69783 | 7.8 | — | — | — | xcitium / openedr | A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a | 211d ago |
| CVE-2026-4255 | 7.8 | — | — | — | thermalright / tr-vision home | A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attack | 211d ago |
| CVE-2026-3476 | 7.8 | — | — | — | 3ds / solidworks | A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an a | 211d ago |
| CVE-2026-3086 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-3084 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-3082 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-3081 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-32708 | 7.8 | — | — | — | dronecode / px4 drone autopilot | PX4 autopilot is a flight control solution for drones. | 211d ago |
| CVE-2026-2923 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-2922 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-2921 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. | 211d ago |
| CVE-2026-2920 | 7.8 | — | — | — | gstreamer / gstreamer | GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. | 211d ago |
| CVE-2025-15554 | 7.8 | — | — | — | truesec / lapswebui | Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a wo | 211d ago |
| CVE-2025-15552 | 7.8 | — | — | — | truesec / lapswebui | Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a work | 211d ago |
| CVE-2017-20218 | 7.8 | — | — | — | — | Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to e | 211d ago |
| CVE-2016-20033 | 7.8 | — | — | — | wowza / streaming engine | Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users t | 211d ago |
| CVE-2026-0957 | 7.8 | — | — | — | ni / dasylab | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent | 214d ago |
| CVE-2026-0956 | 7.8 | — | — | — | ni / dasylab | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent D | 214d ago |
| CVE-2026-0955 | 7.8 | — | — | — | ni / dasylab | There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent D | 214d ago |
| CVE-2026-0954 | 7.8 | — | — | — | ni / dasylab | There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digil | 214d ago |
| CVE-2026-27940 | 7.8 | — | — | — | ggml / llama.cpp | llama.cpp is an inference of several LLM models in C/C++. | 215d ago |
| CVE-2026-3989 | 7.8 | — | — | — | lmsys / sglang | SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. | 215d ago |
| CVE-2025-12690 | 7.8 | — | — | — | forcepoint / next generation firewall | Execution with unnecessary privileges in Forcepoint NGFW Engine allows local privilege escalation.This issue affec | 216d ago |
| CVE-2026-63464 | 7.7 | — | — | — | — | nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. | 39d ago |
| CVE-2026-19306 | 7.7 | — | — | — | — | IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files from the server fil | 39d ago |
| CVE-2026-19304 | 7.7 | — | — | — | — | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information | 39d ago |
| CVE-2026-19283 | 7.7 | — | — | — | — | IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an aut | 39d ago |
| CVE-2026-18905 | 7.7 | — | — | — | — | IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could allow a remote authent | 39d ago |
| CVE-2026-81832 | 7.7 | — | — | — | — | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for | 39d ago |
| CVE-2026-75035 | 7.7 | — | — | — | — | A flaw was found in Rancher Manager. | 40d ago |
| CVE-2026-55658 | 7.7 | — | — | — | — | Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance poo | 40d ago |
| CVE-2026-85211 | 7.7 | — | — | — | — | Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.p | 40d ago |
| CVE-2026-85178 | 7.7 | — | — | — | — | Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint f | 40d ago |
| CVE-2026-75033 | 7.7 | — | — | — | — | A flaw was found in Rancher Manager. | 40d ago |
| CVE-2023-20576 | 7.7 | — | — | — | — | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially | 41d ago |
| CVE-2026-73775 | 7.7 | — | — | — | hpe / arubaos-cx | Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to a | 42d ago |
| CVE-2026-84199 | 7.7 | — | — | — | — | Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. | 42d ago |
