Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-4150 |
|
Vulnerability in gimp (CVE-2026-4150)
vulnerability in gimp (CVE-2026-4150). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4151 |
|
Vulnerability in gimp (CVE-2026-4151)
vulnerability in gimp (CVE-2026-4151). Successful exploitation can lead to full system takeover.
|
| CVE-2026-31412 |
|
Vulnerability in linux (CVE-2026-31412)
vulnerability in linux (CVE-2026-31412). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5870 |
|
Vulnerability in google (CVE-2026-5870)
vulnerability in google (CVE-2026-5870). Successful exploitation can lead to full system takeover.
|
| CVE-2026-20889 |
|
Vulnerability in libraw (CVE-2026-20889)
vulnerability in libraw (CVE-2026-20889). Successful exploitation can lead to full system takeover.
|
| CVE-2026-24660 |
|
Vulnerability in libraw (CVE-2026-24660)
vulnerability in libraw (CVE-2026-24660). Successful exploitation can lead to full system takeover.
|
| CVE-2026-5732 |
|
Vulnerability in mozilla (CVE-2026-5732)
vulnerability in mozilla (CVE-2026-5732). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34589 |
|
Vulnerability in openexr (CVE-2026-34589)
vulnerability in openexr (CVE-2026-34589). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.7` or later.
|
| CVE-2026-34588 |
|
Out-of-Bounds Read in openexr (CVE-2026-34588)
vulnerability in openexr (CVE-2026-34588). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.2.7` or later.
|
| CVE-2026-5476 |
|
Vulnerability in c (CVE-2026-5476)
vulnerability in c (CVE-2026-5476). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-43238 |
|
Vulnerability in apple (CVE-2025-43238)
vulnerability in apple (CVE-2025-43238). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34545 |
|
Vulnerability in openexr (CVE-2026-34545)
vulnerability in openexr (CVE-2026-34545). Successful exploitation can lead to full system takeover.
|
| CVE-2026-35092 |
|
Vulnerability in dos (CVE-2026-35092)
vulnerability in dos (CVE-2026-35092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34219 |
|
Vulnerability in protocol (CVE-2026-34219)
vulnerability in protocol (CVE-2026-34219). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-3308 |
|
Vulnerability in c (CVE-2026-3308)
vulnerability in c (CVE-2026-3308). Successful exploitation can lead to full system takeover.
|
| CVE-2026-33983 |
|
Vulnerability in dos (CVE-2026-33983)
vulnerability in dos (CVE-2026-33983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5121 |
|
Vulnerability in libarchive (CVE-2026-5121)
vulnerability in libarchive (CVE-2026-5121). Confidential information can be exposed externally.
|
| CVE-2026-3945 |
|
Vulnerability in dos (CVE-2026-3945)
vulnerability in dos (CVE-2026-3945). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27889 |
|
Vulnerability in nats (CVE-2026-27889)
vulnerability in nats (CVE-2026-27889). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.11.14, 2.12.5` or later.
|
| CVE-2026-27784 |
|
Vulnerability in nginx-gateway (CVE-2026-27784)
vulnerability in nginx-gateway (CVE-2026-27784). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.3, 1.29.7` or later.
|
| CVE-2026-4694 |
|
Vulnerability in mozilla (CVE-2026-4694)
vulnerability in mozilla (CVE-2026-4694). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4690 |
|
Vulnerability in mozilla (CVE-2026-4690)
vulnerability in mozilla (CVE-2026-4690). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-4689 |
|
Vulnerability in mozilla (CVE-2026-4689)
vulnerability in mozilla (CVE-2026-4689). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4775 |
|
Vulnerability in dos (CVE-2026-4775)
vulnerability in dos (CVE-2026-4775). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32845 |
|
Vulnerability in dos (CVE-2026-32845)
vulnerability in dos (CVE-2026-32845). Successful exploitation can lead to full system takeover.
|
| CVE-2026-32875 |
|
Vulnerability in c (CVE-2026-32875)
vulnerability in c (CVE-2026-32875). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32759 |
|
Vulnerability in github.com/filebrowser/filebrowser/v2 (CVE-2026-32759)
vulnerability in github.com/filebrowser/filebrowser/v2 (CVE-2026-32759). Data can be tampered with by attackers. Exploitable via ``enableExec``. Mitigation: upgrade to `2.33.8` or later.
|
| CVE-2026-2921 |
|
Vulnerability in gstreamer (CVE-2026-2921)
vulnerability in gstreamer (CVE-2026-2921). Successful exploitation can lead to full system takeover.
|
| CVE-2026-27281 |
|
Vulnerability in adobe (CVE-2026-27281)
vulnerability in adobe (CVE-2026-27281). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-26134 |
|
Vulnerability in microsoft (CVE-2026-26134)
vulnerability in microsoft (CVE-2026-26134). Successful exploitation can lead to full system takeover.
|
| CVE-2026-28693 |
|
Out-of-Bounds Read in imagemagick (CVE-2026-28693)
vulnerability in imagemagick (CVE-2026-28693). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.2-16` or later.
|
| CVE-2021-30952 KEV |
|
[KEV] Vulnerability in Apple multiple-products (CVE-2021-30952)
vulnerability in Apple multiple-products (CVE-2021-30952). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-20025 |
|
Vulnerability in dos (CVE-2026-20025)
vulnerability in dos (CVE-2026-20025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-27622 |
|
Out-of-Bounds Write in openexr (CVE-2026-27622)
out-of-bounds write in openexr (CVE-2026-27622). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.2.6` or later.
|
| CVE-2026-21385 KEV |
|
[KEV] Vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385)
vulnerability in Qualcomm multiple-chipsets (CVE-2026-21385). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-2762 |
|
Vulnerability in mozilla (CVE-2026-2762)
vulnerability in mozilla (CVE-2026-2762). Successful exploitation can lead to full system takeover.
|
| CVE-2026-2774 |
|
Vulnerability in mozilla (CVE-2026-2774)
vulnerability in mozilla (CVE-2026-2774). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25794 |
|
Vulnerability in c (CVE-2026-25794)
vulnerability in c (CVE-2026-25794). Risk of unauthorized operations or information disclosure. Exploitable via ``WriteUHDRImage``.
|
| CVE-2026-21354 |
|
Vulnerability in adobe (CVE-2026-21354)
vulnerability in adobe (CVE-2026-21354). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-21353 |
|
Vulnerability in adobe (CVE-2026-21353)
vulnerability in adobe (CVE-2026-21353). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21347 |
|
Vulnerability in adobe (CVE-2026-21347)
vulnerability in adobe (CVE-2026-21347). Successful exploitation can lead to full system takeover.
|
| CVE-2026-21321 |
|
Vulnerability in adobe (CVE-2026-21321)
vulnerability in adobe (CVE-2026-21321). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25210 |
|
Vulnerability in libexpat-project (CVE-2026-25210)
vulnerability in libexpat-project (CVE-2026-25210). Confidential information can be exposed externally.
|
| CVE-2018-14634 KEV |
|
[KEV] Vulnerability in Linux kernel (CVE-2018-14634)
vulnerability in Linux kernel (CVE-2018-14634). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-23876 |
|
Vulnerability in imagemagick (CVE-2026-23876)
vulnerability in imagemagick (CVE-2026-23876). Successful exploitation can lead to full system takeover.
|
| CVE-2025-14242 |
|
Vulnerability in dos (CVE-2025-14242)
vulnerability in dos (CVE-2025-14242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-0880 |
|
Vulnerability in mozilla (CVE-2026-0880)
vulnerability in mozilla (CVE-2026-0880). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73645 |
|
Vulnerability in @openzeppelin/confidential-contracts (CVE-2026-73645)
vulnerability in @openzeppelin/confidential-contracts (CVE-2026-73645). Risk of unauthorized operations or information disclosure. Exploitable via ``ERC7984``. Mitigation: upgrade to `0.3.1` or later.
|
| CVE-2025-65865 |
|
Vulnerability in dos (CVE-2025-65865)
vulnerability in dos (CVE-2025-65865). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-14512 |
|
Vulnerability in dos (CVE-2025-14512)
vulnerability in dos (CVE-2025-14512). Risk of unauthorized operations or information disclosure.
|