CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-122318Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificateskyverno
- CVE-2026-122316Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExistingkyverno
- CVE-2026-122315Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panickyverno
- CVE-2026-122314Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panickyverno
- CVE-2026-122313Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicykyverno
- CVE-2026-122312Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query Stringkyverno
- CVE-2026-122311Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argumentkyverno
- CVE-2026-122310Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPathkyverno
- CVE-2026-122309Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Costkyverno
- CVE-2026-122308Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequestkyverno
- CVE-2026-122307Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handlingkyverno
- CVE-2026-122306Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matchingkyverno
- CVE-2026-122305Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loopkyverno
- CVE-2026-122304Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loaderkyverno
- CVE-2026-122303Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicykyverno
- CVE-2026-122302Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Checkkyverno
- CVE-2026-122301Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 Information Disclosure via Object Create Responseparse-community parse-server
- CVE-2025-66365Incorrect handling of SIP packets leads to baseband crashesSamsung Semiconductor Exynos
- CVE-2026-122159Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.init path traversalEdge0-AI Audio8_TTS
- CVE-2026-122158InvoiceShelf MemberService.php create access controlInvoiceShelf
- CVE-2026-122157Purocean Yank Note Terminal index.ts checkPermission os command injectionPurocean Yank Note
- CVE-2025-66364Continuously sending control‑plane messages causes the baseband to crashes.Samsung Semiconductor Exynos
- CVE-2026-122154purocean Yank Note Settings Endpoint index.ts config.getAll information disclosurepurocean Yank Note
- CVE-2026-122151Presenton User Configuration user-config JSON.parse cross-site request forgeryPresenton
- CVE-2026-122146101arrowz fflate index.mjs unzipSync memory allocation101arrowz fflate
- CVE-2026-109849Incorrect privilege assignment issue exists in Hinemos.NTT DATA INTELLILINK Hinemos
- CVE-2026-122144nliautaud pico-content-editor cross-site request forgerynliautaud pico-content-editor
- CVE-2026-122052laspy LAS File lasreader.py memory allocationlaspy
- CVE-2026-106713An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
- CVE-2026-106714Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid…