Browse All CVEs
50,445 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-0149 |
high | 8.8 | 0.0029 | 2026-10-29 | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap buffer overf | |
CVE-2026-0148 |
high | 8.8 | 0.0028 | 2026-10-29 | In multiple functions of VideoRtpPayloadDecoderNode.cpp, there is a possible out of bounds | |
CVE-2026-0147 |
high | 8.8 | 0.0028 | 2026-10-29 | In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out | |
CVE-2026-0146 |
high | 8.8 | 0.0028 | 2026-10-29 | In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bou | |
CVE-2026-0145 |
medium | 4.0 | 0.0008 | 2026-10-29 | In keymint, there is a possible Permission Bypass due to a logic error in the code. This c | |
CVE-2026-0144 |
high | 7.5 | 0.0027 | 2026-10-29 | In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a | |
CVE-2026-0143 |
high | 7.8 | 0.0007 | 2026-10-29 | In lwis_device_external_event_emit of lwis_event.c, there is a possible memory corruption | |
CVE-2026-0142 |
medium | 4.0 | 0.0007 | 2026-10-29 | In iavb_parse_key_data of avb_rsa.c, there is a possible out of bounds read due to imprope | |
CVE-2026-0141 |
medium | 5.3 | 0.0021 | 2026-10-29 | In decodeAppPacket of RtcpAppPacket.cpp, there is a possible OOB read due to a missing bou | |
CVE-2026-0140 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overf | |
CVE-2026-0139 |
high | 8.8 | 0.0028 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a missing bounds check. This coul | |
CVE-2026-0138 |
high | 7.8 | 0.0007 | 2026-10-29 | In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due t | |
CVE-2026-0137 |
high | 7.8 | 0.0007 | 2026-10-29 | In edgetpu_sync_fence_group_shutdown() of edgetpu-dmabuf.c, there is a possible elevation | |
CVE-2026-0136 |
high | 7.5 | 0.0027 | 2026-10-29 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-0135 |
high | 7.8 | 0.0010 | 2026-10-29 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could | |
CVE-2026-0134 |
medium | 4.0 | 0.0008 | 2026-10-29 | In PostWipeData of recovery_ui.cpp, there is a possible data persistence issue after a fac | |
CVE-2026-0133 |
high | 7.8 | 0.0007 | 2026-10-29 | In smmu_attach_dev of arm-smmu-v3.c, there is a possible way to sign malicious Android Run | |
CVE-2026-0132 |
high | 8.8 | 0.0029 | 2026-10-29 | In Modem, there is a possible out of bounds write due to a heap buffer overflow. This coul | |
CVE-2026-0131 |
high | 7.3 | 0.0007 | 2026-10-29 | In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer ove | |
CVE-2026-0130 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtcpChunk::decodeRtcpChunk, there is a possible out of bounds read due to a heap buffer | |
CVE-2026-0129 |
medium | 4.3 | 0.0018 | 2026-10-29 | In RtcpByePacket::decodeByePacket, there is a possible due to a missing bounds check. Thi | |
CVE-2026-0128 |
medium | 6.5 | 0.0019 | 2026-10-29 | In RtcpFbPacket::decodeRtcpFbPacket, there is a possible out of bounds read due to an inte | |
CVE-2026-0127 |
medium | 6.5 | 0.0025 | 2026-10-29 | In NrmmMsgCodec::DecodeUPUTransparentContext of cn_NrmmDecoder.cpp, there is a possible ou | |
CVE-2026-0126 |
critical | 9.8 | 0.0028 | 2026-10-29 | In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This c | |
CVE-2026-0125 |
high | 7.0 | 0.0007 | 2026-10-29 | In multiple functions of vpu_ioctl.c, there is a possible use after free due to a race con | |
CVE-2026-53857 |
high | 8.6 | 0.0022 | 2026-10-29 | OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts w | |
CVE-2026-53855 |
high | 7.6 | 0.0026 | 2026-10-29 | OpenClaw before 2026.4.2 contains an inline-eval bypass vulnerability allowing authenticat | |
CVE-2026-53852 |
low | 2.3 | 0.0021 | 2026-10-29 | OpenClaw before 2026.4.25 contains a scope containment bypass vulnerability in device re-p | |
CVE-2026-53851 |
medium | 6.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reac | |
CVE-2026-53850 |
medium | 6.8 | 0.0009 | 2026-10-29 | OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the | |
CVE-2026-53848 |
low | 2.3 | 0.0019 | 2026-10-29 | OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authent | |
CVE-2026-53847 |
medium | 5.3 | 0.0018 | 2026-10-29 | OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memor | |
CVE-2026-53846 |
high | 7.0 | 0.0012 | 2026-10-29 | OpenClaw before 2026.4.29 contains a path traversal vulnerability in the install helper th | |
CVE-2026-53844 |
medium | 6.0 | 0.0021 | 2026-10-29 | OpenClaw before 2026.4.29 contains a session visibility check bypass vulnerability in shar | |
CVE-2026-50656 |
high | 7.8 | 0.1116 | 2026-10-29 | 4 PoC | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine |
CVE-2026-47964 |
high | 7.8 | 0.0021 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by a Heap-based Buffer Overflow vulne | |
CVE-2026-47963 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-47934 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-47927 |
medium | 5.5 | 0.0016 | 2026-10-29 | DNG SDK versions 1.7.1 2536 and earlier are affected by an out-of-bounds read vulnerabilit | |
CVE-2026-47749 |
high | 7.8 | 0.0020 | 2026-10-29 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion | |
CVE-2026-47748 |
medium | 5.5 | 0.0016 | 2026-10-29 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion | |
CVE-2026-10748 |
high | 8.6 | 0.0038 | 2026-10-29 | An authenticated user with the nx-licensing-create privilege can upload a specially crafte | |
CVE-2026-53776 |
critical | 9.3 | 0.0036 | 2026-10-29 | Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers | |
CVE-2026-44932 |
high | 8.8 | 0.0036 | 2026-10-29 | Passing of unsanitized strings from DHCP replies into the wicked dhcp client before wicked | |
CVE-2026-42089 |
high | 8.6 | 0.0017 | 2026-10-29 | Yeoman Environment provides an API to discover, create, and run generators, and to configu | |
CVE-2026-24228 |
high | 7.8 | 0.0016 | 2026-10-29 | NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deser | |
CVE-2026-24155 |
high | 7.8 | 0.0019 | 2026-10-29 | NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A success | |
CVE-2026-12003 |
medium | 5.3 | 0.0014 | 2026-10-29 | To allow builds of Python to be run from an in-tree layout (rather than an installed file | |
CVE-2026-9307 |
medium | 6.3 | 0.0030 | 2026-10-29 | A sensitive information disclosure security issue exists within the affected CompactLogix | |
CVE-2026-47684 |
high | 7.7 | 0.0022 | 2026-10-29 | Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, |