Browse All CVEs
14,362 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-109351 |
high | 7.1 | 0.0032 | 2026-10-29 | Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability t | |
CVE-2026-109361 |
high | 7.0 | 0.0023 | 2026-10-29 | MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Run | |
CVE-2026-75888 |
high | 7.7 | 0.0044 | 2026-10-29 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Ser | |
CVE-2021-48012 |
high | 8.8 | 0.0041 | 2026-10-29 | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers | |
CVE-2026-109427 |
high | 7.1 | 0.0021 | 2026-10-29 | Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability | |
CVE-2026-109556 |
high | 7.3 | 0.0065 | 2026-10-29 | EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in | |
CVE-2024-58390 |
high | 8.7 | 0.0027 | 2026-10-29 | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vu | |
CVE-2026-109782 |
high | 8.3 | 0.0027 | 2026-10-29 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox | |
CVE-2026-109783 |
high | 8.3 | 0.0027 | 2026-10-29 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox | |
CVE-2026-109938 |
high | 7.1 | 0.0033 | 2026-10-29 | Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compro | |
CVE-2026-109939 |
high | 7.1 | 0.0033 | 2026-10-29 | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitm | |
CVE-2026-109941 |
high | 7.1 | 0.0033 | 2026-10-29 | FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_ | |
CVE-2026-109942 |
high | 7.1 | 0.0032 | 2026-10-29 | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libf | |
CVE-2026-109943 |
high | 7.1 | 0.0029 | 2026-10-29 | FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message p | |
CVE-2026-109944 |
high | 7.1 | 0.0029 | 2026-10-29 | FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext | |
CVE-2026-109956 |
high | 8.3 | 0.0032 | 2026-10-29 | NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows | |
CVE-2026-109961 |
high | 8.4 | 0.0022 | 2026-10-29 | Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authen | |
CVE-2026-74041 |
high | 8.6 | 0.0046 | 2026-10-29 | Wazuh 4.14.3 before 4.14.8 and 4.10.4 contains a case-sensitivity mismatch between the oss | |
CVE-2026-95127 |
high | 7.5 | 0.0043 | 2026-10-29 | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the | |
CVE-2026-110117 |
high | 7.1 | 0.0028 | 2026-10-29 | SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectCo | |
CVE-2025-57739 |
high | 8.8 | 0.0031 | 2026-10-29 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vu | |
CVE-2026-23705 |
high | 7.2 | 0.0031 | 2026-10-29 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vu | |
CVE-2026-102218 |
high | 7.8 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allo | |
CVE-2026-102220 |
high | 7.8 | 0.0037 | 2026-10-29 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate pri | |
CVE-2026-102225 |
high | 8.8 | 0.0089 | 2026-10-29 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code | |
CVE-2026-102227 |
high | 7.8 | 0.0035 | 2026-10-29 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized at | |
CVE-2026-102231 |
high | 7.7 | 0.0038 | 2026-10-29 | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attac | |
CVE-2026-102870 |
high | 8.8 | 0.0091 | 2026-10-29 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauth | |
CVE-2026-103553 |
high | 7.8 | 0.0035 | 2026-10-29 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to | |
CVE-2026-103554 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-103555 |
high | 7.0 | 0.0028 | 2026-10-29 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized | |
CVE-2026-103558 |
high | 7.5 | 0.0098 | 2026-10-29 | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack | |
CVE-2026-103565 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-103568 |
high | 7.8 | 0.0021 | 2026-10-29 | Concurrent execution using shared resource with improper synchronization ('race condition' | |
CVE-2026-103569 |
high | 7.5 | 0.0111 | 2026-10-29 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose in | |
CVE-2026-103575 |
high | 8.8 | 0.0085 | 2026-10-29 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code ov | |
CVE-2026-103577 |
high | 7.5 | 0.0057 | 2026-10-29 | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker | |
CVE-2026-105003 |
high | 7.8 | 0.0034 | 2026-10-29 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate pr | |
CVE-2026-105004 |
high | 7.8 | 0.0035 | 2026-10-29 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate priv | |
CVE-2026-105005 |
high | 8.1 | 0.0075 | 2026-10-29 | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code ov | |
CVE-2026-105007 |
high | 8.8 | 0.0085 | 2026-10-29 | An elevation of privilege vulnerability exists in the Network Driver Interface Specificati | |
CVE-2026-105009 |
high | 7.5 | 0.0032 | 2026-10-29 | Incorrect default permissions in Windows Server Update Service allows an authorized attack | |
CVE-2026-105722 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elev | |
CVE-2026-105723 |
high | 7.5 | 0.0132 | 2026-10-29 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthori | |
CVE-2026-105733 |
high | 8.8 | 0.0033 | 2026-10-29 | Improper access control in Windows Hyper-V allows an authorized attacker to execute code l | |
CVE-2026-108130 |
high | 7.8 | 0.0037 | 2026-10-29 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows a | |
CVE-2026-108132 |
high | 7.0 | 0.0028 | 2026-10-29 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locall | |
CVE-2026-108133 |
high | 7.8 | 0.0035 | 2026-10-29 | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows a | |
CVE-2026-108134 |
high | 7.0 | 0.0028 | 2026-10-29 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges lo | |
CVE-2026-108135 |
high | 7.0 | 0.0030 | 2026-10-29 | Improper link resolution before file access ('link following') in Windows Backup Engine al |