Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from nearly 30 public sources, updated hourly.
- Tracked
- 409,440
- Last 24h
- 648
- Critical, 7 days
- 336
- Known exploited
- 1,779
97,636 results · Clear filters · Feed
-
High 7.5
PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout
PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to P…
-
High 8.7
NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool
In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed session pool for the first datagram from any unrecognised address and port, before the cookie exchange, and never releases a session…
-
High 8.2
NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full
In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-…
-
High 8.7
Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
Temporal Server compiles a Worker Controller Instance module, go.temporal.io/auto-scaled-workers, into its Worker Service, and that module registers a compute provider named k8s whose function is to manage workers running in a Kubernetes cluster. The k8s prov…
-
High 8.7
Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact…
-
High 8.8
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned f…
-
High 8.4
In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission …
-
High 7.1
Missing length validation in Absolute Secure Access
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.
-
High 8.8
ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser
ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a stack-based buffer overflow vulnerability that allows remote attackers to corrupt stack memory by crafting a malicious DFF audio file with an oversized PROP chunk size value that is used un…
-
High 7.1
Improper input handling in Secure Access servers
CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service.
-
High 7.8
An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when …
-
High 7.8
The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL s…
-
High 7.5
The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `Came…
-
High 7.8
An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an…
-
High 8.3
Improper input handling in Secure Access server
CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server.
-
High 7.8
CVE-2026-16305
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `exec…
-
High 7.1
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerabili…
-
High 7.4
In multiple locations, there is a possible memory corruption due to a race condition. This could lead to local escalati…
-
High 8.4
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local es…
-
High 7.4
In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. …
-
High 7.4
In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to…
-
High 8.4
In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy.…
-
High 8.4
In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This co…
-
High 8.4
In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local esc…
-
High 8.1
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Si…
-
High 8.4
In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check.…
-
High 8.4
In multiple locations, there is a possible permission bypass due to an uncaught exception. This could lead to local esc…
-
High 8.4
In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalat…
-
High 8.4
In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. This could…
-
High 8.4
In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. This…
-
High 8.4
In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission …
-
High 8.4
In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a miss…
-
High 8.4
In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalati…
-
High 8.4
In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. T…
-
High 8.4
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local …
-
High 8.4
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to loca…
-
High 8.4
In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This …
-
High 8.4
In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. This cou…
-
High 8.4
In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. Th…
-
High 8.4
In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. Th…