| CVE-2026-52491 | 8.4 | — | — | — | — | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the | 63d ago |
| CVE-2026-79774 | 8.4 | — | — | — | — | Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twi | 63d ago |
| CVE-2026-55582 | 8.4 | — | — | — | — | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. | 63d ago |
| CVE-2026-55581 | 8.4 | — | — | — | — | mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. | 63d ago |
| CVE-2026-78675 | 8.4 | — | — | — | gitpython project / gitpython | GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose l | 64d ago |
| CVE-2026-72696 | 8.4 | — | — | — | — | Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows l | 64d ago |
| CVE-2026-59566 | 8.4 | — | — | — | — | A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscal | 64d ago |
| CVE-2026-74711 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in notificat | 66d ago |
| CVE-2026-74690 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during ism_de | 66d ago |
| CVE-2026-74631 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: smc: fix splice entry lifetime imbalance | 66d ago |
| CVE-2026-74614 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker loc | 66d ago |
| CVE-2026-74604 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding | 66d ago |
| CVE-2026-74589 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in s | 66d ago |
| CVE-2026-18842 | 8.4 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an o | 68d ago |
| CVE-2026-18824 | 8.4 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary com | 68d ago |
| CVE-2026-63388 | 8.4 | — | — | — | — | Libevent is an event notification library. | 68d ago |
| CVE-2026-17091 | 8.4 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through F | 69d ago |
| CVE-2026-16832 | 8.4 | — | — | — | ibm / power system e1080 \(9080-hex\) firmware | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 throu | 69d ago |
| CVE-2026-44901 | 8.4 | — | — | — | — | Wazuh is a free and open source platform used for threat prevention, detection, and response. | 69d ago |
| CVE-2026-58083 | 8.4 | — | — | — | freebsd / freebsd | While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on t | 69d ago |
| CVE-2026-49428 | 8.4 | — | — | — | freebsd / freebsd | Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in l | 70d ago |
| CVE-2026-49422 | 8.4 | — | — | — | freebsd / freebsd | The RACK setsockopt(2) handler drops the connection lock in order to copy option data from userspace, then reacqui | 70d ago |
| CVE-2026-76037 | 8.4 | — | — | — | google / chrome | Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attack | 70d ago |
| CVE-2026-70842 | 8.4 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 70d ago |
| CVE-2026-70840 | 8.4 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 70d ago |
| CVE-2026-70731 | 8.4 | — | — | — | oracle / autonomous health framework | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). | 70d ago |
| CVE-2026-60928 | 8.4 | — | — | — | oracle / webcenter content | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). | 70d ago |
| CVE-2026-64657 | 8.4 | — | — | — | — | Budibase is an open-source low-code platform. | 71d ago |
| CVE-2026-46345 | 8.4 | — | — | — | — | compliance-trestle is a tooling platform for managing compliance as code. | 71d ago |
| CVE-2026-75060 | 8.4 | — | — | — | — | In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools | 71d ago |
| CVE-2026-74497 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit- | 73d ago |
| CVE-2026-74492 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from | 73d ago |
| CVE-2026-74461 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave | 73d ago |
| CVE-2026-74383 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvme_set | 74d ago |
| CVE-2026-74333 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iter | 74d ago |
| CVE-2026-74332 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iterati | 74d ago |
| CVE-2026-74275 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix out-of-bounds access in cxl_ca | 74d ago |
| CVE-2026-74259 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super | 74d ago |
| CVE-2026-74256 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_ | 74d ago |
| CVE-2026-72489 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: staging: nvec: fix use-after-free in nvec_rx_c | 74d ago |
| CVE-2026-72478 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_ | 74d ago |
| CVE-2026-72426 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during ha | 74d ago |
| CVE-2026-72360 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ o | 74d ago |
| CVE-2026-72343 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer | 74d ago |
| CVE-2026-72342 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registratio | 74d ago |
| CVE-2026-72298 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix 32-bit integer overflow in qrtr | 74d ago |
| CVE-2026-72243 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on | 74d ago |
| CVE-2026-72204 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX_ROOT header validation | 74d ago |
| CVE-2026-72197 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation mem | 74d ago |
| CVE-2026-72196 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] inde | 74d ago |
| CVE-2026-72183 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on | 74d ago |
| CVE-2026-72151 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP complet | 74d ago |
| CVE-2026-72146 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request | 74d ago |
| CVE-2026-72133 | 8.4 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization o | 74d ago |
| CVE-2026-12364 | 8.4 | — | — | — | — | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-t | 74d ago |
| CVE-2026-56865 | 8.4 | — | — | — | — | A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to b | 75d ago |
| CVE-2026-18249 | 8.4 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improp | 75d ago |
| CVE-2026-67986 | 8.4 | — | — | — | — | amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection cond | 75d ago |
| CVE-2026-10534 | 8.4 | — | — | — | ibm / db2 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser | 76d ago |
| CVE-2025-59323 | 8.4 | — | — | — | — | CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-par | 76d ago |
