| CVE-2026-50496 | 7.5 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information o | 89d ago |
| CVE-2026-50470 | 7.5 | — | — | — | microsoft / windows 10 1607 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information o | 89d ago |
| CVE-2026-50463 | 7.5 | — | — | — | microsoft / windows 10 1809 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network. | 89d ago |
| CVE-2026-50424 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a | 89d ago |
| CVE-2026-50414 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 89d ago |
| CVE-2026-50411 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to den | 89d ago |
| CVE-2026-50379 | 7.5 | — | — | — | microsoft / windows 11 24h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allow | 89d ago |
| CVE-2026-50368 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 89d ago |
| CVE-2026-50355 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 89d ago |
| CVE-2026-50330 | 7.5 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a n | 89d ago |
| CVE-2026-50328 | 7.5 | — | — | — | microsoft / windows 10 1607 | Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a ne | 89d ago |
| CVE-2026-50304 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 89d ago |
| CVE-2026-45756 | 7.5 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 89d ago |
| CVE-2026-59886 | 7.5 | — | — | — | pyasn1 / pyasn1 | pyasn1 is a generic ASN.1 library for Python. | 89d ago |
| CVE-2026-59885 | 7.5 | — | — | — | pyasn1 / pyasn1 | pyasn1 is a generic ASN.1 library for Python. | 89d ago |
| CVE-2026-59884 | 7.5 | — | — | — | pyasn1 / pyasn1 | pyasn1 is a generic ASN.1 library for Python. | 89d ago |
| CVE-2026-59200 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 89d ago |
| CVE-2026-56170 | 7.5 | — | — | — | microsoft / .net | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 89d ago |
| CVE-2026-54983 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to den | 89d ago |
| CVE-2026-54119 | 7.5 | — | — | — | microsoft / windows 10 1607 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker | 89d ago |
| CVE-2026-50696 | 7.5 | — | — | — | microsoft / windows 10 1809 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny | 89d ago |
| CVE-2026-50695 | 7.5 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny servic | 89d ago |
| CVE-2026-50653 | 7.5 | — | — | — | microsoft / .net framework | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker t | 89d ago |
| CVE-2026-50652 | 7.5 | — | — | — | microsoft / .net framework | Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a | 89d ago |
| CVE-2026-50506 | 7.5 | — | — | — | microsoft / asp.net core odata | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 89d ago |
| CVE-2026-49788 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service ove | 89d ago |
| CVE-2026-49787 | 7.5 | — | — | — | microsoft / windows 10 1607 | Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny s | 89d ago |
| CVE-2026-49181 | 7.5 | — | — | — | microsoft / windows 10 1607 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privilege | 89d ago |
| CVE-2026-49171 | 7.5 | — | — | — | microsoft / windows 10 1607 | Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | 89d ago |
| CVE-2026-47296 | 7.5 | — | — | — | microsoft / sql server 2016 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an autho | 89d ago |
| CVE-2026-45646 | 7.5 | — | — | — | microsoft / asp.net core odata | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny servi | 89d ago |
| CVE-2026-40378 | 7.5 | — | — | — | microsoft / windows 10 1607 | Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows a | 89d ago |
| CVE-2026-9128 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the Ext | 89d ago |
| CVE-2026-9127 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A remote code execution security issue exists within Studio 5000 Logix Designer® due to incorrect authorization on | 89d ago |
| CVE-2026-9108 | 7.5 | — | — | — | rockwellautomation / studio 5000 logix designer | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths | 89d ago |
| CVE-2026-60081 | 7.5 | — | — | — | — | DBI::ProfileData versions before 1.651 for Perl do not limit the path index. | 89d ago |
| CVE-2026-59841 | 7.5 | — | — | — | fortinet / fortisiem | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAg | 89d ago |
| CVE-2026-59836 | 7.5 | — | — | — | fortinet / forticlientems | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4 | 89d ago |
| CVE-2026-59205 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 89d ago |
| CVE-2026-59204 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 89d ago |
| CVE-2026-59199 | 7.5 | — | — | — | python / pillow | Pillow is a Python imaging library. | 89d ago |
| CVE-2026-12707 | 7.5 | — | — | — | — | Summary Cloudflare quiche was discovered to be vulnerable to memory resource exhaustion due to unbounded queuing o | 89d ago |
| CVE-2026-12523 | 7.5 | — | — | — | cloudflare / quiche | Summary Cloudflare quiche's HTTP/3 layer was discovered to be vulnerable to resource exhaustion (i.e., memory) by | 89d ago |
| CVE-2025-53379 | 7.5 | — | — | — | fortinet / fortiauthenticator | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all | 89d ago |
| CVE-2026-60114 | 7.5 | — | — | — | dan-in-ca / sustainable irrigation platform | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path traversal vulnerability that allows a | 89d ago |
| CVE-2026-51105 | 7.5 | — | — | — | — | Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service | 89d ago |
| CVE-2026-15076 | 7.5 | — | — | — | eclipse / vert.x | In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Ecli | 89d ago |
| CVE-2026-15075 | 7.5 | — | — | — | eclipse / vert.x | In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler | 89d ago |
| CVE-2026-10051 | 7.5 | — | — | — | eclipse / jetty | In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent re | 89d ago |
| CVE-2024-7708 | 7.5 | — | — | — | eclipse / jetty | For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. | 89d ago |
| CVE-2026-58101 | 7.5 | — | — | — | jonasbn / crypt\ | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. | 90d ago |
| CVE-2026-62328 | 7.5 | — | — | — | — | 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerability that allows remote | 90d ago |
| CVE-2026-62184 | 7.5 | — | — | — | — | luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address fro | 90d ago |
| CVE-2026-61458 | 7.5 | — | — | — | — | PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks | 90d ago |
| CVE-2026-51539 | 7.5 | — | — | — | — | A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. | 90d ago |
| CVE-2026-39042 | 7.5 | — | — | — | — | An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a | 90d ago |
| CVE-2026-15685 | 7.5 | — | — | — | ollama / ollama | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. | 90d ago |
| CVE-2026-15683 | 7.5 | — | — | — | — | Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. | 90d ago |
| CVE-2026-15680 | 7.5 | — | — | — | — | Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. | 90d ago |
| CVE-2026-26396 | 7.5 | — | — | — | — | OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/app | 90d ago |
