CVEs
Browse the synced catalog, newest first.
- CVE-2026-41221Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.Intel(R) Slim Bootloader
- CVE-2026-40697Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of service.Intel(R) Wireless Software for Windows
- CVE-2026-40695Null pointer dereference for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-40694Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40626Uncontrolled search path for some Intel(R) Wireless Bluetooth(R) software for Windows within Ring 3: User Applications may allow an…Intel(R) Wireless Bluetooth(R) software for Windows
- CVE-2026-40433Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet Wireless Wi-Fi Software for Windows
- CVE-2026-40424Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40216Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40064Improper input validation for some Intel(R) oneAPI CLI Tool software within Ring 3: User Applications may allow a denial of service.Intel(R) oneAPI CLI Tool software
- CVE-2026-35500Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of…Intel(R) Slim Bootloader
- CVE-2026-34489Untrusted pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-34017Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-33275Improper resource shutdown or release for some Intel(R) PROSet/Wireless Wi-Fi Software for Windows within Ring 3: User Applications may…Intel(R) PROSet/Wireless Wi-Fi Software for Windows
- CVE-2026-33094Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-28746Out-of-bounds read in the AuthenticateComponent for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service.Intel(R) Slim Bootloader
- CVE-2026-28730Null pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-20703Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege.BigDL
- CVE-2026-120212Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags outputWeb-Simple
- CVE-2026-125322pgEdge Postgres MCP Server SQL injection in the count_rows where parameterpgedge-postgres-mcp
- CVE-2026-99285netfilter: nft_byteorder: remove multi-register supportLinux
- CVE-2026-125321pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied headerpgedge-postgres-mcp
- CVE-2026-125729Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never…Plack-Middleware-CSP
- CVE-2026-121691Unbounded decompression in the whatstk ZIP loader exhausts memory and disklucasrodes whatstk
- CVE-2026-125320pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebindingpgedge-postgres-mcp
- CVE-2026-125342Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-125349Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-125350Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125344Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125348Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-125343Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process…Google Chrome