Browse All CVEs
50,489 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-122313 |
critical | 9.4 | 0.0032 | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allow | |
CVE-2026-122312 |
high | 8.3 | 0.0029 | 2026-11-05 | Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() | |
CVE-2026-122311 |
critical | 9.4 | 0.0046 | 2026-11-05 | Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument | |
CVE-2026-122310 |
critical | 9.4 | 0.0037 | 2026-11-05 | Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after clean | |
CVE-2026-122309 |
high | 8.2 | 0.0021 | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-sco | |
CVE-2026-122308 |
high | 8.4 | 0.0022 | 2026-11-05 | Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Han | |
CVE-2026-122307 |
high | 8.3 | 0.0023 | 2026-11-05 | Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerat | |
CVE-2026-122306 |
high | 8.3 | 0.0031 | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced po | |
CVE-2026-122305 |
high | 8.3 | 0.0031 | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfA | |
CVE-2026-122304 |
critical | 9.4 | 0.0039 | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allo | |
CVE-2026-122303 |
critical | 9.4 | 0.0032 | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allo | |
CVE-2026-122302 |
critical | 9.3 | 0.0028 | 2026-11-05 | Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace | |
CVE-2026-122301 |
low | 2.3 | 0.0021 | 2026-11-05 | Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object | |
CVE-2025-66365 |
medium | 5.3 | 0.0029 | 2026-11-05 | Incorrect handling of SIP packets leads to baseband crashes | |
CVE-2026-48179 |
high | 7.5 | 0.0026 | 2026-11-05 | In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Ser | |
CVE-2026-48176 |
high | 7.5 | 0.0021 | 2026-11-05 | A memory corruption vulnerability caused by improper validation of messages | |
CVE-2026-35495 |
medium | 6.5 | 0.0021 | 2026-11-05 | In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabi | |
CVE-2026-33972 |
critical | 9.8 | 0.0036 | 2026-11-05 | In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. | |
CVE-2026-33971 |
critical | 9.8 | 0.0041 | 2026-11-05 | In the LTE RRC component, improper handling of messages before authentication triggers a d | |
CVE-2026-33969 |
high | 7.5 | 0.0037 | 2026-11-05 | In the NAS Authentication Request message decoding procedure, a missing lower bound check | |
CVE-2026-33958 |
high | 7.5 | 0.0032 | 2026-11-05 | Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, | |
CVE-2026-122992 |
critical | 9.2 | 0.0032 | 2026-11-05 | In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUt | |
CVE-2026-122160 |
low | 2.1 | 0.0031 | 2026-11-05 | A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerab | |
CVE-2025-66368 |
high | 7.5 | 0.0032 | 2026-11-05 | Incorrect handling of SDP payload leads to a Denial of Service | |
CVE-2026-69068 |
critical | 9.1 | 0.0026 | 2026-11-05 | Insufficient length validation in the GNSS firmware loader may lead to corruption of kerne | |
CVE-2026-69066 |
high | 8.4 | 0.0012 | 2026-11-05 | Memory corruption in GPU driver due to improper validation of VMID reservation. | |
CVE-2026-69050 |
critical | 9.8 | 0.0029 | 2026-11-05 | Out-of-bounds memory access in a device driver due to improper resource state tracking. | |
CVE-2026-69044 |
high | 8.4 | 0.0012 | 2026-11-05 | In the Samsung GPU driver, improper reference count handling during command submission can | |
CVE-2026-69043 |
critical | 9.1 | 0.0026 | 2026-11-05 | In the Samsung Exynos GPU driver, improper synchronization during buffer object creation a | |
CVE-2026-69025 |
high | 7.5 | 0.0026 | 2026-11-05 | In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead | |
CVE-2026-69006 |
critical | 9.1 | 0.0026 | 2026-11-05 | Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑ | |
CVE-2026-69005 |
high | 7.3 | 0.0019 | 2026-11-05 | Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | |
CVE-2026-69002 |
high | 7.5 | 0.0020 | 2026-11-05 | Incorrect authorization in Samsung framework services due to missing permission checks | |
CVE-2026-68994 |
high | 7.3 | 0.0019 | 2026-11-05 | A double free vulnerability in NPU driver due to improper pointer management (941) | |
CVE-2026-68993 |
medium | 6.3 | 0.0014 | 2026-11-05 | A double free vulnerability in NPU driver due to improper pointer management (940) | |
CVE-2026-68991 |
critical | 9.8 | 0.0029 | 2026-11-05 | In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request pro | |
CVE-2026-68990 |
high | 7.8 | 0.0011 | 2026-11-05 | In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations | |
CVE-2026-68985 |
high | 7.5 | 0.0026 | 2026-11-05 | In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler c | |
CVE-2026-68984 |
high | 8.1 | 0.0021 | 2026-11-05 | In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged applic | |
CVE-2026-48186 |
critical | 9.1 | 0.0026 | 2026-11-05 | Improper handling of messages before AS security activation can cause unexpected behavior | |
CVE-2026-48183 |
critical | 9.1 | 0.0024 | 2026-11-05 | Improper permission handling during buffer operations allows untrusted applications to cre | |
CVE-2026-48178 |
high | 8.8 | 0.0021 | 2026-11-05 | Out of bound access in PPC due to race condition in global variable access | |
CVE-2026-48175 |
medium | 5.5 | 0.0010 | 2026-11-05 | Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-o | |
CVE-2026-48174 |
critical | 9.8 | 0.0033 | 2026-11-05 | In the NR RRC component, improper handling of messages before authentication triggers a da | |
CVE-2026-48173 |
critical | 9.8 | 0.0029 | 2026-11-05 | In the NAS message handler, improper validation of the length field in NAS message causes | |
CVE-2026-35494 |
high | 7.5 | 0.0026 | 2026-11-05 | In the baseband, memory corruption during NAS packet processing can cause a denial of serv | |
CVE-2026-33965 |
medium | 5.3 | 0.0023 | 2026-11-05 | An attacker may send a malicious IMS message to the target device, potentially leading to | |
CVE-2025-66367 |
high | 7.5 | 0.0032 | 2026-11-05 | Improper handling of NAS DLTransport messages may lead to a baseband crash. | |
CVE-2025-66366 |
high | 7.5 | 0.0026 | 2026-11-05 | Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband t | |
CVE-2026-122188 |
low | 2.1 | 0.0036 | 2026-11-05 | A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d |