Browse All CVEs
33,469 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-53848 |
low | 2.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authent | |
CVE-2026-53850 |
medium | 6.8 | 0.0009 | 2026-10-29 | OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the | |
CVE-2026-53851 |
medium | 6.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reac | |
CVE-2026-53852 |
low | 2.3 | 0.0021 | 2026-10-29 | OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-p | |
CVE-2026-53855 |
high | 7.6 | 0.0026 | 2026-10-29 | OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticat | |
CVE-2026-53857 |
high | 8.6 | 0.0022 | 2026-10-29 | OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts w | |
CVE-2026-0125 |
high | 7.0 | 0.0007 | 2026-10-29 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race con | |
CVE-2026-0126 |
critical | 9.8 | 0.0028 | 2026-10-29 | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This c | |
CVE-2026-0127 |
medium | 6.5 | 0.0025 | 2026-10-29 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible ou | |
CVE-2026-0128 |
medium | 6.5 | 0.0019 | 2026-10-29 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an inte | |
CVE-2026-0129 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. Thi | |
CVE-2026-0130 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer | |
CVE-2026-0131 |
high | 7.3 | 0.0007 | 2026-10-29 | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer ove | |
CVE-2026-0132 |
high | 8.8 | 0.0029 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This coul | |
CVE-2026-0133 |
high | 7.8 | 0.0007 | 2026-10-29 | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Run | |
CVE-2026-0134 |
medium | 4.0 | 0.0008 | 2026-10-29 | In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a fac | |
CVE-2026-0135 |
high | 7.8 | 0.0010 | 2026-10-29 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-0136 |
high | 7.5 | 0.0027 | 2026-10-29 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-0137 |
high | 7.8 | 0.0007 | 2026-10-29 | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation | |
CVE-2026-0138 |
high | 7.8 | 0.0007 | 2026-10-29 | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due t | |
CVE-2026-0139 |
high | 8.8 | 0.0028 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overf | |
CVE-2026-0141 |
medium | 5.3 | 0.0021 | 2026-10-29 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bou | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-10-29 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to imprope | |
CVE-2026-0143 |
high | 7.8 | 0.0007 | 2026-10-29 | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption | |
CVE-2026-0144 |
high | 7.5 | 0.0027 | 2026-10-29 | In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a | |
CVE-2026-0145 |
medium | 4.0 | 0.0008 | 2026-10-29 | In keymint, there is a possible Permission Bypass due to a logic error in the code. This c | |
CVE-2026-0146 |
high | 8.8 | 0.0028 | 2026-10-29 | In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bou | |
CVE-2026-0147 |
high | 8.8 | 0.0028 | 2026-10-29 | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out | |
CVE-2026-0148 |
high | 8.8 | 0.0028 | 2026-10-29 | In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds | |
CVE-2026-0149 |
high | 8.8 | 0.0029 | 2026-10-29 | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overf | |
CVE-2026-0150 |
high | 7.8 | 0.0007 | 2026-10-29 | In ExecuteGraph command handler of EdgeTPU firmware, there is a possible out of bounds wri | |
CVE-2026-0151 |
high | 8.8 | 0.0023 | 2026-10-29 | In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due to an integ | |
CVE-2026-0152 |
high | 7.8 | 0.0007 | 2026-10-29 | In OSMMapPMRGeneric of pmr_os.c, there is a possible way to leverage a system call to syst | |
CVE-2026-0153 |
high | 7.8 | 0.0007 | 2026-10-29 | In Write of msg_to_host_buffer.cc, there is a possible out of bounds write due to an incor | |
CVE-2026-0154 |
high | 8.8 | 0.0023 | 2026-10-29 | In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due | |
CVE-2026-0155 |
medium | 5.3 | 0.0018 | 2026-10-29 | In ImsMediaBitReader::ReadByteBuffer, there is a possible OOB read due to a missing bounds | |
CVE-2026-0156 |
high | 7.5 | 0.0022 | 2026-10-29 | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due | |
CVE-2026-0157 |
medium | 4.3 | 0.0017 | 2026-10-29 | In RtcpHeader::decodeRtcpHeader, there is a possible OOB read due to a missing bounds chec | |
CVE-2026-0158 |
medium | 4.0 | 0.0007 | 2026-10-29 | In Camera, there is a possible unauthorized way to access photos due to a missing permissi | |
CVE-2026-0160 |
high | 8.8 | 0.0023 | 2026-10-29 | In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a poss | |
CVE-2026-0161 |
high | 8.8 | 0.0023 | 2026-10-29 | In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds write due to | |
CVE-2026-0162 |
high | 8.8 | 0.0023 | 2026-10-29 | In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type | |
CVE-2026-0164 |
high | 8.8 | 0.0023 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-0165 |
medium | 6.5 | 0.0018 | 2026-10-29 | In several functions of the RTCP packet decoder, there is a possible out-of-bounds read du | |
CVE-2026-10303 |
high | 7.4 | 0.0076 | 2026-10-29 | In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client | |
CVE-2026-11890 |
medium | 4.3 | 0.0023 | 2026-10-29 | Improper access control in PAM account discovery results in Devolutions Server 2026.2.5, | |
CVE-2026-12105 |
medium | 6.5 | 0.0030 | 2026-10-29 | Improper access control in Devolutions Server 2026.2.5, 2026.1.21 allows an authenticated | |
CVE-2026-12117 |
medium | 4.3 | 0.0026 | 2026-10-29 | Improper access control in the social login connection endpoint in Devolutions Server 202 | |
CVE-2026-12425 |
medium | 5.7 | 0.0015 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting' |