Skip to content
OpenAdvisories

Archive

12 March 2026

Vulnerabilities first published on this day (UTC), newest first.

← February 2026 2026 / March /12 April 2026 →
  1. 121
  2. 2229
  3. 3166
  4. 4214
  5. 5495
  6. 6185
  7. 7112
  8. 881
  9. 9161
  10. 10348
  11. 11342
  12. 12202
  13. 13293
  14. 148
  15. 1569
  16. 16191
  17. 17113
  18. 18196
  19. 19248
  20. 20322
  21. 21162
  22. 2280
  23. 23201
  24. 24254
  25. 25629
  26. 26306
  27. 27242
  28. 2856
  29. 2954
  30. 30143
  31. 31273
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-3910 Exploited Public exploit

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitra…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Mar 13, 2026
  • High 8.8
    CVE-2026-3909 Exploited Public exploit

    Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds …

    Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
    KEV Mar 13, 2026
  • Critical 10.0
    CVE-2026-3611 Public exploit

    Honeywell IQ4x BMS Controller Missing authentication for critical function

    The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 1…

    Honeywell IQ3 IQ4E IQ422 ICS / OT
  • High 8.1
    CVE-2026-32247 Public exploit

    Graphiti vulnerable to Cypher Injection via unsanitized node_labels in search filters

    Graphiti is a framework for building and querying temporal context graphs for AI agents. Graphiti versions before 0.28.2 contained a Cypher injection vulnerability in shared search-filter construction for non-Kuzu backends. Attacker-controlled label values su…

    getzep graphiti graphiti-core PyPI
  • High 7.8
    CVE-2026-27940 Public exploit

    llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix

    llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread() writes 528+ bytes of attacker-con…

    ggml-org llama.cpp llama.cpp llama.cpp Debian Ubuntu
  • Low 3.3
    CVE-2026-4040 Public exploit

    OpenClaw File Existence tools.exec.safeBins information exposure

    A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed local…

    openclaw npm
  • Medium 6.5
    CVE-2025-66955 Public exploit

    Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated…