Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-23306 |
|
Use-After-Free in Kernel (CVE-2026-23306)
vulnerability in Kernel (CVE-2026-23306). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-23294 |
|
Vulnerability in linux (CVE-2026-23294)
vulnerability in linux (CVE-2026-23294). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23280 |
|
Vulnerability in linux (CVE-2026-23280)
vulnerability in linux (CVE-2026-23280). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23281 |
|
Use-After-Free in linux (CVE-2026-23281)
vulnerability in linux (CVE-2026-23281). Successful exploitation can lead to full system takeover.
|
| CVE-2026-23392 |
|
Use-After-Free in Kernel (CVE-2026-23392)
vulnerability in Kernel (CVE-2026-23392). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.78, 6.18.20, 6.19.10` or later.
|
| CVE-2026-23391 |
|
Vulnerability in Kernel (CVE-2026-23391)
vulnerability in Kernel (CVE-2026-23391). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.78, 6.18.20, 6.19.10` or later.
|
| CVE-2026-23378 |
|
Out-of-Bounds Write in Kernel (CVE-2026-23378)
out-of-bounds write in Kernel (CVE-2026-23378). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-23359 |
|
Out-of-Bounds Write in Kernel (CVE-2026-23359)
out-of-bounds write in Kernel (CVE-2026-23359). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-23351 |
|
Use-After-Free in Kernel (CVE-2026-23351)
vulnerability in Kernel (CVE-2026-23351). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-23343 |
|
Out-of-Bounds Write in Kernel (CVE-2026-23343)
out-of-bounds write in Kernel (CVE-2026-23343). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-23340 |
|
Use-After-Free in Kernel (CVE-2026-23340)
vulnerability in Kernel (CVE-2026-23340). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.1.167, 6.6.130, 6.12.77, 6.18.17, 6.19.7` or later.
|
| CVE-2026-3608 |
|
Vulnerability in CVE-2026-3608 (CVE-2026-3608)
vulnerability in CVE-2026-3608 (CVE-2026-3608). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-2072 |
|
Cross-Site Scripting (XSS) in hitachi (CVE-2026-2072)
cross-site scripting in hitachi (CVE-2026-2072). Confidential information can be exposed externally.
|
| CVE-2026-20622 |
|
Vulnerability in apple (CVE-2026-20622)
vulnerability in apple (CVE-2026-20622). Confidential information can be exposed externally.
|
| CVE-2026-4371 |
|
Vulnerability in mozilla (CVE-2026-4371)
vulnerability in mozilla (CVE-2026-4371). Confidential information can be exposed externally.
|
| CVE-2026-33331 |
|
Cross-Site Scripting (XSS) in orpc (CVE-2026-33331)
cross-site scripting in orpc (CVE-2026-33331). Confidential information can be exposed externally.
|
| CVE-2026-1995 |
|
In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory. The UTF16-LE encoded conte...
In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory. The UTF16-LE encoded contents of these files are used as arguments for starting a process, but they can be edited by any stand...
|
| CVE-2026-32853 |
|
Out-of-Bounds Read in libvncserver-project (CVE-2026-32853)
vulnerability in libvncserver-project (CVE-2026-32853). Confidential information can be exposed externally.
|
| CVE-2026-32854 |
|
Vulnerability in c (CVE-2026-32854)
vulnerability in c (CVE-2026-32854). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27654 |
|
Vulnerability in nginx (CVE-2026-27654)
vulnerability in nginx (CVE-2026-27654). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-27784 |
|
Vulnerability in nginx-gateway (CVE-2026-27784)
vulnerability in nginx-gateway (CVE-2026-27784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-32647 |
|
Out-of-Bounds Read in nginx-gateway (CVE-2026-32647)
vulnerability in nginx-gateway (CVE-2026-32647). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-27651 |
|
Vulnerability in nginx-gateway (CVE-2026-27651)
vulnerability in nginx-gateway (CVE-2026-27651). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-4697 |
|
Vulnerability in mozilla (CVE-2026-4697)
vulnerability in mozilla (CVE-2026-4697). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4699 |
|
Vulnerability in mozilla (CVE-2026-4699)
vulnerability in mozilla (CVE-2026-4699). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4695 |
|
Vulnerability in mozilla (CVE-2026-4695)
vulnerability in mozilla (CVE-2026-4695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4694 |
|
Vulnerability in mozilla (CVE-2026-4694)
vulnerability in mozilla (CVE-2026-4694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4684 |
|
Vulnerability in mozilla (CVE-2026-4684)
vulnerability in mozilla (CVE-2026-4684). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4687 |
|
Vulnerability in mozilla (CVE-2026-4687)
vulnerability in mozilla (CVE-2026-4687). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4690 |
|
Vulnerability in mozilla (CVE-2026-4690)
vulnerability in mozilla (CVE-2026-4690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4686 |
|
Vulnerability in mozilla (CVE-2026-4686)
vulnerability in mozilla (CVE-2026-4686). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4685 |
|
Vulnerability in mozilla (CVE-2026-4685)
vulnerability in mozilla (CVE-2026-4685). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4693 |
|
Vulnerability in mozilla (CVE-2026-4693)
vulnerability in mozilla (CVE-2026-4693). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4775 |
|
Vulnerability in dos (CVE-2026-4775)
vulnerability in dos (CVE-2026-4775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33554 |
|
Vulnerability in CVE-2026-33554 (CVE-2026-33554)
vulnerability in CVE-2026-33554 (CVE-2026-33554). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-64998 |
|
Vulnerability in checkmk (CVE-2025-64998)
vulnerability in checkmk (CVE-2025-64998). Successful exploitation can lead to full system takeover.
|
| CVE-2019-25634 |
|
Out-of-Bounds Write in 4mhz (CVE-2019-25634)
out-of-bounds write in 4mhz (CVE-2019-25634). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25075 |
|
Vulnerability in dos (CVE-2026-25075)
vulnerability in dos (CVE-2026-25075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32284 |
|
Out-of-Bounds Read in github.com/shamaton/msgpack (CVE-2026-32284)
vulnerability in github.com/shamaton/msgpack (CVE-2026-32284). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32845 |
|
Vulnerability in dos (CVE-2026-32845)
vulnerability in dos (CVE-2026-32845). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31847 |
|
Vulnerability in nexxtsolutions (CVE-2026-31847)
vulnerability in nexxtsolutions (CVE-2026-31847). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4602 |
|
Vulnerability in jsrsasign (CVE-2026-4602)
vulnerability in jsrsasign (CVE-2026-4602). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4598 |
|
Vulnerability in jsrsasign (CVE-2026-4598)
vulnerability in jsrsasign (CVE-2026-4598). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4600 |
|
Vulnerability in jsrsasign (CVE-2026-4600)
vulnerability in jsrsasign (CVE-2026-4600). Confidential information can be exposed externally. Mitigation: upgrade to `11.1.1` or later.
|
| CVE-2026-4601 |
|
Vulnerability in kjur (CVE-2026-4601)
vulnerability in kjur (CVE-2026-4601). Confidential information can be exposed externally.
|
| CVE-2026-23536 |
|
Path Traversal in CVE-2026-23536 (CVE-2026-23536)
path traversal in CVE-2026-23536 (CVE-2026-23536). Confidential information can be exposed externally.
|
| CVE-2026-33236 |
|
Path Traversal in path-traversal (CVE-2026-33236)
path traversal in path-traversal (CVE-2026-33236). Data can be tampered with by attackers. Exploitable via ``subdir``.
|
| CVE-2026-33231 |
|
Vulnerability in dos (CVE-2026-33231)
vulnerability in dos (CVE-2026-33231). Risk of unauthorized operations or information disclosure. Exploitable via `GET /SHUTDOWN`.
|
| CVE-2026-33180 |
|
Information Disclosure in CVE-2026-33180 (CVE-2026-33180)
vulnerability in CVE-2026-33180 (CVE-2026-33180). Confidential information can be exposed externally.
|
| CVE-2026-33150 |
|
Use-After-Free in libfuse-project (CVE-2026-33150)
vulnerability in libfuse-project (CVE-2026-33150). Successful exploitation can lead to full system takeover.
|