CVEs
Browse the synced catalog, newest first.
- CVE-2026-124848Incorrect default permissions on session transcripts and prompt history in Kiro CLIAmazon Kiro CLI
- CVE-2026-125338Winter CMS: Stored XSS through cached Brand Settings and Editor Settings custom styleswintercms winter · winter/wn-backend-module
- CVE-2026-120803MongoDB SBE $locf Window Accumulator Use-After-Free Enables Heap OOB Read and Server CrashMongoDB Server
- CVE-2026-125337Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gatewintercms winter · winter/wn-backend-module
- CVE-2026-115538Docker Engine overlay-network encryption rules are not restored after a firewalld reloadDocker Engine · Moby
- CVE-2026-115539Cluster-API proxy overwrites forwarded client identity with its ownmoby SwarmKit · Docker Engine +1
- CVE-2026-104060Worklenz < 3.3.0 SQL Injection via Reporting Members Endpointworklenz
- CVE-2026-115483Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_fileswpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-50077Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-50078Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-95405In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an…Google Android
- CVE-2026-95404In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an…Google Android
- CVE-2026-95403In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing…Google Android
- CVE-2026-95402In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-95401In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-95400In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect…Google Android
- CVE-2026-95399In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a…Google Android
- CVE-2026-95397In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59637In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-59636In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature…Google Android
- CVE-2026-59635In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59632In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue…Google Android
- CVE-2026-59631In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59630In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection…Google Android
- CVE-2026-59628In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue…Google Android
- CVE-2026-59626In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after…Google Android
- CVE-2026-59625In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error.Google Android
- CVE-2026-124016postal-mime < 4.2.1 Algorithmic Complexity DoS via processLinepostalsys postal-mime
- CVE-2026-59624In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to…Google Android
- CVE-2026-59623In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an…Google Android