Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Group: products Clear

ID	Title	Severity	Tags	Detected
CVE-2026-40419	Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.	High	Cwe 416 Microsoft 365 Apps Office +1	3 months ago
CVE-2026-40418	Use-After-Free in microsoft (CVE-2026-40418) vulnerability in microsoft (CVE-2026-40418). Successful exploitation can lead to full system takeover.	High	Cwe 416 Microsoft 365 Apps Office +1	3 months ago
CVE-2026-34687	Vulnerability in adobe (CVE-2026-34687) vulnerability in adobe (CVE-2026-34687). Successful exploitation can lead to full system takeover.	High	Cwe 122 Adobe Illustrator Apple +3	3 months ago
CVE-2026-35436	Vulnerability in microsoft (CVE-2026-35436) vulnerability in microsoft (CVE-2026-35436). Successful exploitation can lead to full system takeover.	High	Cwe 1220 Microsoft 365 Apps Office +1	3 months ago
CVE-2026-40361	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	High	Cwe 416 Microsoft 365 Apps Office +2	3 months ago
CVE-2026-40358	Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.	High	Cwe 416 Microsoft 365 Apps Office +1	3 months ago
CVE-2026-40359	Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.	High	Cwe 416 Microsoft 365 Apps Excel +3	3 months ago
CVE-2026-40364	Vulnerability in microsoft (CVE-2026-40364) vulnerability in microsoft (CVE-2026-40364). Successful exploitation can lead to full system takeover.	High	Cwe 122 Cwe 843 Cwe 908 Microsoft +4	3 months ago
CVE-2026-40363	Vulnerability in microsoft (CVE-2026-40363) vulnerability in microsoft (CVE-2026-40363). Successful exploitation can lead to full system takeover.	High	Cwe 122 Microsoft 365 Apps Office +1	3 months ago
CVE-2026-40362	Vulnerability in microsoft (CVE-2026-40362) vulnerability in microsoft (CVE-2026-40362). Successful exploitation can lead to full system takeover.	High	Cwe 122 Microsoft 365 Apps Excel +3	3 months ago
CVE-2026-35440	Vulnerability in microsoft (CVE-2026-35440) vulnerability in microsoft (CVE-2026-35440). Confidential information can be exposed externally.	Medium	Cwe 552 Microsoft 365 Apps Office +2	3 months ago
CVE-2026-40366	Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.	High	Cwe 416 Microsoft 365 Apps Office +2	3 months ago
CVE-2026-40360	Out-of-Bounds Read in microsoft (CVE-2026-40360) vulnerability in microsoft (CVE-2026-40360). Successful exploitation can lead to full system takeover.	High	Cwe 125 Microsoft 365 Apps Excel +3	3 months ago
CVE-2026-40367	Vulnerability in microsoft (CVE-2026-40367) vulnerability in microsoft (CVE-2026-40367). Successful exploitation can lead to full system takeover.	High	Cwe 822 Microsoft 365 Apps Office +3	3 months ago
CVE-2026-35439	Unsafe Deserialization in deserialization (CVE-2026-35439) vulnerability in deserialization (CVE-2026-35439). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	3 months ago
CVE-2026-40368	Unsafe Deserialization in deserialization (CVE-2026-40368) vulnerability in deserialization (CVE-2026-40368). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	3 months ago
CVE-2026-40357	Unsafe Deserialization in deserialization (CVE-2026-40357) vulnerability in deserialization (CVE-2026-40357). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	3 months ago
CVE-2026-40365	Vulnerability in microsoft (CVE-2026-40365) vulnerability in microsoft (CVE-2026-40365). Successful exploitation can lead to full system takeover.	High	Cwe 1220 Microsoft Sharepoint Server Insecure Deserialization	3 months ago
CVE-2026-35429	Vulnerability in microsoft (CVE-2026-35429) vulnerability in microsoft (CVE-2026-35429). Risk of unauthorized operations or information disclosure.	Medium	Cwe 451 Microsoft Edge	3 months ago
CVE-2026-34636	Out-of-Bounds Write in adobe (CVE-2026-34636) out-of-bounds write in adobe (CVE-2026-34636). Successful exploitation can lead to full system takeover.	High	Cwe 787 Adobe Premiere Pro Apple +3	3 months ago
CVE-2026-34661	Out-of-Bounds Write in adobe (CVE-2026-34661) out-of-bounds write in adobe (CVE-2026-34661). Successful exploitation can lead to full system takeover.	High	Cwe 787 Adobe Illustrator Apple +3	3 months ago
CVE-2026-34638	Use-After-Free in adobe (CVE-2026-34638) vulnerability in adobe (CVE-2026-34638). Successful exploitation can lead to full system takeover.	High	Cwe 416 Adobe Premiere Pro Apple +3	3 months ago
CVE-2026-34662	Vulnerability in adobe (CVE-2026-34662) vulnerability in adobe (CVE-2026-34662). Risk of unauthorized operations or information disclosure.	Medium	Cwe 476 Adobe Illustrator Apple +3	3 months ago
CVE-2026-34637	Out-of-Bounds Write in adobe (CVE-2026-34637) out-of-bounds write in adobe (CVE-2026-34637). Successful exploitation can lead to full system takeover.	High	Cwe 787 Adobe Premiere Pro Apple +3	3 months ago
CVE-2026-34663	Out-of-Bounds Read in adobe (CVE-2026-34663) vulnerability in adobe (CVE-2026-34663). Confidential information can be exposed externally.	Medium	Cwe 125 Adobe Illustrator Apple +3	3 months ago
CVE-2026-33110	Unsafe Deserialization in deserialization (CVE-2026-33110) vulnerability in deserialization (CVE-2026-33110). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	3 months ago
CVE-2026-33112	Unsafe Deserialization in deserialization (CVE-2026-33112) vulnerability in deserialization (CVE-2026-33112). Successful exploitation can lead to full system takeover.	High	Insecure Deserialization Cwe 502 Microsoft Sharepoint Server	3 months ago
CVE-2026-29204	Vulnerability in CVE-2026-29204 (CVE-2026-29204) vulnerability in CVE-2026-29204 (CVE-2026-29204). Confidential information can be exposed externally. Exploitable via ``clientarea.php``.	Critical	PHP Cwe 639	3 months ago
CVE-2025-43524	Vulnerability in apple (CVE-2025-43524) vulnerability in apple (CVE-2025-43524). Successful exploitation can lead to full system takeover.	High	Cwe 284 Apple macOS	3 months ago
CVE-2025-46311	Vulnerability in apple (CVE-2025-46311) vulnerability in apple (CVE-2025-46311). Confidential information can be exposed externally.	High	Cwe 451 Apple Ipados Iphone Os	3 months ago
CVE-2025-53844	Out-of-Bounds Write in fortinet (CVE-2025-53844) out-of-bounds write in fortinet (CVE-2025-53844). Successful exploitation can lead to full system takeover.	High	Cwe 787 Fortinet Fortios	3 months ago
CVE-2025-67604	Vulnerability in fortinet (CVE-2025-67604) vulnerability in fortinet (CVE-2025-67604). Risk of unauthorized operations or information disclosure.	Medium	Cwe 676 Fortinet Fortianalyzer Fortimanager	3 months ago
CVE-2026-42899	Vulnerability in dotnet (CVE-2026-42899) vulnerability in dotnet (CVE-2026-42899). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.27, 9.0.16, 10.0.8` or later.	High	C# Cwe 835 Microsoft Net +5	3 months ago
CVE-2026-42048	Path Traversal in langflow (CVE-2026-42048) path traversal in langflow (CVE-2026-42048). Data can be tampered with by attackers. Exploitable via `DELETE /api/v1/knowledge_bases`. Mitigation: upgrade to `1.9.0` or later.	Critical	Path Traversal Cwe 22 Langflow	3 months ago
CVE-2026-35433	Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433) vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-35433). Confidential information can be exposed externally. Mitigation: upgrade to `10.0.8` or later.	High	C# Cwe 20 Cwe 190 Microsoft +15	3 months ago
CVE-2026-32175	Path Traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175) path traversal in Microsoft.NetCore.App.Runtime.win-arm (CVE-2026-32175). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.0.8` or later.	Medium	C# Cwe 36 Cwe 22 Microsoft +4	3 months ago
CVE-2026-32177	Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally. Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.	High	C# Cwe 20 Cwe 122 Cwe 787 +20	3 months ago
CVE-2026-43513	Vulnerability in tomcat (CVE-2026-43513) vulnerability in tomcat (CVE-2026-43513). Confidential information can be exposed externally. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	High	Apache Tomcat Cwe 178	3 months ago
CVE-2026-43514	Vulnerability in tomcat (CVE-2026-43514) vulnerability in tomcat (CVE-2026-43514). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Low	Apache Tomcat Cwe 208	3 months ago
CVE-2026-43515	Vulnerability in tomcat (CVE-2026-43515) vulnerability in tomcat (CVE-2026-43515). Confidential information can be exposed externally. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 285	3 months ago
CVE-2026-41293	Vulnerability in tomcat (CVE-2026-41293) vulnerability in tomcat (CVE-2026-41293). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Cwe 20	3 months ago
CVE-2026-42498	Information Disclosure in tomcat (CVE-2026-42498) vulnerability in tomcat (CVE-2026-42498). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	High	Apache Tomcat Cwe 200	3 months ago
CVE-2026-43512	Authentication Bypass in tomcat (CVE-2026-43512) authentication bypass in tomcat (CVE-2026-43512). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	Critical	Apache Tomcat Authentication Bypass Cwe 592	3 months ago
CVE-2026-41284	Vulnerability in tomcat (CVE-2026-41284) vulnerability in tomcat (CVE-2026-41284). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `10.1.55, 11.0.22, 9.0.118` or later.	High	Apache Tomcat Cwe 770	3 months ago
CVE-2023-27753	Unrestricted File Upload in CVE-2023-27753 (CVE-2023-27753) vulnerability in CVE-2023-27753 (CVE-2023-27753). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434	3 months ago
CVE-2026-8401	Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3. Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3.	Critical	Cwe 693 Mozilla Firefox Cwe 653	3 months ago
CVE-2026-7432	Vulnerability in ivanti (CVE-2026-7432) vulnerability in ivanti (CVE-2026-7432). Successful exploitation can lead to full system takeover.	High	Cwe 362 Ivanti Secure Access Client Microsoft +1	3 months ago
CVE-2026-8051	OS Command Injection in ivanti (CVE-2026-8051) OS command injection in ivanti (CVE-2026-8051). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 78 Ivanti Virtual Traffic Manager	3 months ago
CVE-2026-7431	Vulnerability in ivanti (CVE-2026-7431) vulnerability in ivanti (CVE-2026-7431). Risk of unauthorized operations or information disclosure.	Medium	Cwe 732 Ivanti Secure Access Client Microsoft +1	3 months ago
CVE-2026-8390	Use-After-Free in mozilla (CVE-2026-8390) vulnerability in mozilla (CVE-2026-8390). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 416 Mozilla Firefox +1	3 months ago

Vulnerabilities

🍪 About cookies