CVEs published January 13, 2026
444 CVEs were published on January 13, 2026: 41 critical, 242 high. 3 are now in CISA KEV.
- Published
- 444
- Critical
- 41
- High
- 242
- Medium
- 104
- Low
- 5
- Unrated
- 52
- Now in CISA KEV
- 3
- Fix available
- 217
Most affected products
- Linux
- 93
- Microsoft Windows
- 87
- Mozilla Firefox · Mozilla Thunderbird
- 16
- Hewlett Packard Enterprise (HPE) ArubaOS
- 12
- samrocketman jervis · net.gleske:jervis
- 7
- Adobe Substance3D - Modeler
- 6
- Adobe Dreamweaver Desktop
- 5
- Adobe InDesign Desktop
- 5
- e107 CMS
- 5
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 5
Critical 41
- CVE-2026-22686Sandbox Escape via Host Error Prototype Chain in enclave-vmagentfront enclave · enclave-vm
- CVE-2022-50893VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image UploadVIAVIWEB Wallpaper Admin
- CVE-2023-54339Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameterjokkedk Webgrind
- CVE-2023-54335eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)eXtplorer
- CVE-2023-54330Inbit Messenger 4.9.0 - Unauthenticated Remote SEH OverflowInbit Messenger
- CVE-2023-54329Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE)Inbit Messenger
- CVE-2022-50919Tdarr 2.00.15 - Command InjectionTdarr
- CVE-2022-50912ImpressCMS 1.4.4 - Unrestricted File UploadImpressCMS
- CVE-2020-36911Covenant 0.5 - Remote Code Execution (RCE)Cobbr Covenant
- CVE-2026-23478Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callbackcalcom cal.com
- CVE-2025-68271Unauthenticated Remote Code Execution in openc3-apiOpenC3 cosmos · openc3
- CVE-2026-20963Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2025-47855An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3Fortinet FortiFone
- CVE-2025-64155An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, ForFortinet FortiSIEM
- CVE-2025-25176GPU DDK - GPU Register value contents leaked from secure workloads to non-secure worldImagination Technologies Graphics DDK
- CVE-2025-12548Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333Red Hat OpenShift Dev Spaces (RHOSDS)
- CVE-2025-71095net: stmmac: fix the crash issue for zero copy XDP_TX actionLinux
- CVE-2025-71093e1000: fix OOB in e1000_tbi_should_accept()Linux
- CVE-2025-71068svcrdma: bound check rq_pages index in inline pathLinux
- CVE-2025-68817ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrencyLinux
- CVE-2025-68811svcrdma: use rc_pageoff for memcpy byte offsetLinux
- CVE-2025-68809ksmbd: vfs: fix race on m_flags in vfs_cacheLinux
- CVE-2025-68794iomap: adjust read range correctly for non-block-aligned positionsLinux
- CVE-2025-68775net/handshake: duplicate handshake cancellations leak socketLinux
- CVE-2026-22755Legacy Vivotek Camera Firmware Command Injection in upload_map.cgiVivotek Affected device model numbers are FD8365, FD8365v2,…
- CVE-2025-11250Authentication BypassZohocorp ManageEngine ADSelfService Plus
- CVE-2026-0892Memory safety bugs fixed in Firefox 147 and Thunderbird 147Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-0884Use-after-free in the JavaScript Engine componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0881Sandbox escape in the Messaging System componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0879Sandbox escape due to incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-40805Affected devices do not properly enforce user authentication on specific API endpoints.Siemens Industrial Edge Cloud Device · Siemens Industri… +52
- CVE-2025-14829e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File DeletionE-xact | Hosted Payment |
- CVE-2025-10915Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin InstallationDreamer Blog
- CVE-2026-0501SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)SAP_SE SAP S/4HANA Private Cloud and On-Premise
- CVE-2026-0500Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)SAP_SE SAP Wily Introscope Enterprise Manager
- CVE-2026-0498Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)SAP_SE SAP S/4HANA
- CVE-2026-0491Code Injection vulnerability in SAP Landscape TransformationSAP_SE SAP Landscape Transformation
- CVE-2025-65783An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows atta
- CVE-2025-69990phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php.
- CVE-2025-69991phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.
- CVE-2025-69992phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the ser
High 242
- CVE-2023-54333Social-Share-Buttons 2.2.3 - SQL Injection via project_id ParameterWordpress Social-Share-Buttons
- CVE-2022-50894VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.phpVIAVIWEB Wallpaper Admin
- CVE-2022-50892VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login PageVIAVIWEB Wallpaper Admin
- CVE-2023-54340WorkOrder CMS 0.1.0 - SQL InjectionWorkOrder CMS
- CVE-2023-54338Tftpd32_SE 4.60 - 'Tftpd32_svc' Unquoted Service PathPjo2 Tftpd32_SE
- CVE-2023-54336Mediconta 3.7.27 - 'servermedicontservice' Unquoted Service PathInfonetsoftware Mediconta
- CVE-2023-54334Explorer32++ 1.3.5.531 - Buffer overflowExplorerplusplus Explorer32++
- CVE-2023-54331Outline 1.6.0 - Unquoted Service PathGetoutline Outline
- CVE-2023-53984HotKey Clipboard 2.1.0.6 - Privilege Escalation Unquoted Service Pathclevo HotKey Clipboard
- CVE-2022-50939e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Overridee107 CMS
- CVE-2022-50938CONTPAQi® AdminPAQ 14.0.0 - Unquoted Service PathContpaqi CONTPAQ AdminPAQ
- CVE-2022-50936WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)WBCE CMS
- CVE-2022-50935FLAME II MODEM USB - Unquoted Service PathTelcel FLAME II MODEM USB
- CVE-2022-50933Cain & Abel 4.9.56 - Unquoted Service PathMalavida Cain & Abel
- CVE-2022-50932Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)KYOCERA Document Solutions Kyocera Command Center RX
- CVE-2022-50931TeamSpeak 3.5.6 - Insecure File PermissionsTeamSpeak
- CVE-2022-50930Emerson PAC Machine Edition 9.80 Build 8695 - 'TrapiServer' Unquoted Service PathEmerson PAC Machine Edition
- CVE-2022-50929Connectify Hotspot 2018 'ConnectifyService' - Unquoted Service PathConnectify Hotspot
- CVE-2022-50928Bluetooth Application 5.4.277 - 'BlueSoleilCS' Unquoted Service PathIVT Bluetooth Application BlueSoleilCS
- CVE-2022-50927Cyclades Serial Console Server 3.3.0 - Local Privilege EscalationVertiv Cyclades Serial Console Server
- CVE-2022-50926WAGO 750-8212 PFC200 G2 2ETH RS Privilege EscalationWAGO 750-8212 PFC200
- CVE-2022-50925Prowise Reflect v1.0.9 - Remote Keystroke InjectionProwise Reflect
- CVE-2022-50924Private Internet Access 3.3 - 'pia-service' Unquoted Service PathPrivate Internet Access
- CVE-2022-50923Cobian Backup 0.9 - Unquoted Service PathCobiansoft Cobian Backup
- CVE-2022-50922Audio Conversion Wizard v2.01 - Buffer OverflowLitexmedia Audio Conversion Wizard
- CVE-2022-50921WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Pathilwebmaster21 WOW21
- CVE-2022-50920Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service PathSandboxie Plus
- CVE-2022-50918VIVE Runtime Service - 'ViveAgentService' Unquoted Service PathVIVE Runtime Service
- CVE-2022-50917ProtonVPN 1.26.0 - Unquoted Service PathProtonVPN
- CVE-2022-50916e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file overridee107 CMS
- CVE-2022-50915PTPublisher 2.3.4 - Unquoted Service PathPrimera PTPublisher
- CVE-2022-50914EaseUS Data Recovery - 'ensserver.exe' Unquoted Service PathEaseUS Data Recovery
- CVE-2022-50913TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service PathITEC TCQ
- CVE-2022-50910Beehive Forum - Account TakeoverBeehive Forum
- CVE-2022-50909Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)Algo Solutions Algo
- CVE-2022-50907e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCEe107 CMS
- CVE-2022-50904Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service PathWondershare UBackit
- CVE-2022-50903Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service PathWondershare MobileTrans
- CVE-2022-50902Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service PathWondershare FamiSafe
- CVE-2022-50901Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service PathWondershare Dr.Fone
- CVE-2022-50900Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service PathWondershare Dr.Fone
- CVE-2022-50899Geonetwork 4.2.0 - XML External Entity (XXE)GeoNetwork
- CVE-2022-50898NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated)kalyan02 NanoCMS
- CVE-2022-50897mPDF 7.0 - Local File InclusionmPDF
- CVE-2022-50895Aero CMS 0.0.1 - SQL InjectionMegaTKC Aero CMS
- CVE-2022-50890Owlfiles File Manager 12.0.1 - Path TraversalSkyjos Owlfiles File Manager
- CVE-2022-50808CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service PathCooler Master Technology Cooler Master MasterPlus
- CVE-2022-508064images 1.9 - Remote Command Execution (RCE)4Homepages 4images
- CVE-2022-50805Senayan Library Management System 9.0.0 - SQL InjectionSLIMS Senayan Library Management System
- CVE-2022-50693Splashtop 8.71.12001.0 - Unquoted Service PathSplashtop
- CVE-2021-47749YouPHPTube <= 7.8 - Directory TraversalYouPHPTube
- CVE-2026-22871GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCEDataDog guarddog · guarddog
- CVE-2026-22870GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoSDataDog guarddog · guarddog
- CVE-2026-22869Eigent Allows Arbitrary Code Execution via pull_request_target CI Workfloweigent-ai eigent
- CVE-2026-22868go-ethereum has a DoS via malicious p2p messagego-ethereum · github.com/ethereum/go-ethereum
- CVE-2026-22862go-ethereum has a DoS via malicious p2p messagego-ethereum · github.com/ethereum/go-ethereum
- CVE-2026-22861iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cppInternationalColorConsortium iccDEV
- CVE-2026-21299Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2026-21298Substance3D - Modeler | Out-of-bounds Write (CWE-787)Adobe Substance3D - Modeler
- CVE-2025-37186Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for LinuxHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2025-37175Authenticated Arbitrary File Upload Vulnerability in AOS-10 or AOS-8 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2026-21307Substance3D - Designer | Out-of-bounds Write (CWE-787)Adobe Substance 3D Designer
- CVE-2025-37174Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37173Improper Input Handling Vulnerability in Authenticated Configuration API Endpoint (AOS-10/AOS-8 Web UI)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37172Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37171Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37170Authenticated Command Injection Vulnerabilities in AOS-8 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37169Stack Overflow Vulnerability in AOS-10 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37168Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating SystemHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2026-21306Substance3D - Sampler | Out-of-bounds Write (CWE-787)Adobe Substance 3D Sampler
- CVE-2026-22817JWT Algorithm Confusion via Unsafe Default (HS256) in Hono JWT Middleware Allows Token Forgery and Auth Bypasshonojs hono · hono
- CVE-2026-22818JWT algorithm confusion in Hono JWK Auth Middleware when JWK lacks "alg" (untrusted header.alg fallback)honojs hono · hono
- CVE-2026-21287Substance3D - Stager | Use After Free (CWE-416)Adobe Substance3D - Stager
- CVE-2026-22814Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM Stateadonisjs lucid · @adonisjs/lucid
- CVE-2026-21305Substance3D - Painter | Out-of-bounds Write (CWE-787)Adobe Substance3D - Painter
- CVE-2025-68704Jervis has a Weak Random for Timing Attack Mitigationsamrocketman jervis · net.gleske:jervis
- CVE-2025-68703Jervis has a Salt for PBKDF2 derived from passwordsamrocketman jervis · net.gleske:jervis
- CVE-2025-68702Jervis has a SHA-256 Hex String Padding Bugsamrocketman jervis · net.gleske:jervis
- CVE-2025-68701Jervis has Deterministic AES IV Derivation from Passphrasesamrocketman jervis · net.gleske:jervis
- CVE-2025-68931Jervis has AES CBC Mode Without Authenticationsamrocketman jervis · net.gleske:jervis
- CVE-2025-68698Jervis has an RSA PKCS#1 v1.5 Padding Vulnerabilitysamrocketman jervis · net.gleske:jervis
- CVE-2026-21283Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-21281InCopy | Heap-based Buffer Overflow (CWE-122)Adobe InCopy
- CVE-2026-21280Illustrator | Untrusted Search Path (CWE-426)Adobe Illustrator Desktop
- CVE-2026-21277InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-21304InDesign Desktop | Heap-based Buffer Overflow (CWE-122)Adobe InDesign Desktop
- CVE-2026-21275InDesign Desktop | Access of Uninitialized Pointer (CWE-824)Adobe InDesign Desktop
- CVE-2026-21276InDesign Desktop | Access of Uninitialized Pointer (CWE-824)Adobe InDesign Desktop
- CVE-2026-21267Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Dreamweaver Desktop
- CVE-2026-21271Dreamweaver Desktop | Improper Input Validation (CWE-20)Adobe Dreamweaver Desktop
- CVE-2026-21274Dreamweaver Desktop | Incorrect Authorization (CWE-863)Adobe Dreamweaver Desktop
- CVE-2026-21272Dreamweaver Desktop | Improper Input Validation (CWE-20)Adobe Dreamweaver Desktop
- CVE-2026-21268Dreamweaver Desktop | Improper Input Validation (CWE-20)Adobe Dreamweaver Desktop
- CVE-2026-21226Azure Core shared client library for Python Remote Code Execution VulnerabilityMicrosoft Azure Core shared client library for Python · azu…
- CVE-2026-20941Host Process for Windows Tasks Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20957Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-20952Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-20950Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-20949Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-20948Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-20931Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20929Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20874Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20873Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20871Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20870Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20868Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20867Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20866Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20863Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20861Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-21219Inbox COM Objects (Global Memory) Remote Code Execution VulnerabilityMicrosoft Windows SDK
- CVE-2026-20854Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20853Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20849Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20848Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20843Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20947Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-21224Azure Connected Machine Agent Elevation of Privilege VulnerabilityMicrosoft Azure Connected Machine Agent
- CVE-2026-21221Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20830Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-20956Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-20955Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-20953Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-20951Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-20946Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-20944Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC f…
- CVE-2026-20943Microsoft Office Click-To-Run Remote Code Execution VulnerabilityMicrosoft Office · Microsoft SharePoint Enterprise Server +1
- CVE-2026-20940Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20938Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20934Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20926Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20924Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20923Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20922Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20921Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20920Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20919Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20918Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20877Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20875Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-20869Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20865Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20864Windows Connected Devices Platform Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20860Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20859Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20858Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20857Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20856Windows Server Update Service (WSUS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20852Windows Hello Tampering VulnerabilityMicrosoft Windows
- CVE-2026-20844Windows Clipboard Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20842Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20840Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20837Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-20836DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20832Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20831Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20826Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20822Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20820Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20817Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20816Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20815Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20814DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20811Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20810Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20809Windows Kernel Memory Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20808Windows File Explorer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20804Windows Hello Tampering VulnerabilityMicrosoft Windows
- CVE-2026-20965Windows Admin Center Elevation of Privilege VulnerabilityMicrosoft Windows Admin Center in Azure Portal
- CVE-2026-20803Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-0386Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2025-37166Unexpected shutdown in HPE Instant On Access Points after processing specific packetsHewlett Packard Enterprise (HPE) Instant On
- CVE-2025-37165Exposure of VLAN information in unintended network interfacesHewlett Packard Enterprise (HPE) Instant On
- CVE-2025-10865GPU DDK - DevmemIntGetReservationData does not ref the PMR it returnsImagination Technologies Graphics DDK
- CVE-2025-58411GPU DDK - Reservation::psMappedPMR can change while used by a freelist -> UAFImagination Technologies Graphics DDK
- CVE-2025-46685Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.Dell SupportAssist OS Recovery
- CVE-2025-25249A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1Fortinet FortiSwitchManager · Fortinet FortiOS
- CVE-2025-71101platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsingLinux
- CVE-2025-71100wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc()Linux
- CVE-2025-71099drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl()Linux
- CVE-2025-71092RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()Linux
- CVE-2025-71090nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg()Linux
- CVE-2025-71089iommu: disable SVA when CONFIG_X86 is setLinux
- CVE-2025-71085ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()Linux
- CVE-2025-71082Bluetooth: btusb: revert use of devm_kzalloc in btusbLinux
- CVE-2025-71080ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RTLinux
- CVE-2025-71078powerpc/64s/slb: Fix SLB multihit issue during SLB preloadLinux
- CVE-2025-71074functionfs: fix the open/removal racesLinux
- CVE-2025-71072shmem: fix recovery on rename failuresLinux
- CVE-2025-71070ublk: clean up user copy references on ublk server exitLinux
- CVE-2025-71066net/sched: ets: Always remove class from active list before deleting in ets_qdisc_changeLinux
- CVE-2025-68822Input: alps - fix use-after-free bugs caused by dev3_register_workLinux
- CVE-2025-68819media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()Linux
- CVE-2025-68818scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"Linux
- CVE-2025-68815net/sched: ets: Remove drr class from the active list if it changes to strictLinux
- CVE-2025-68810KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslotLinux
- CVE-2025-68808media: vidtv: initialize local pointers upon transfer of memory ownershipLinux
- CVE-2025-68806ksmbd: fix buffer validation by including null terminator size in EA lengthLinux
- CVE-2025-68805fuse: fix io-uring list corruption for terminated non-committed requestsLinux
- CVE-2025-68803NFSD: NFSv4 file creation neglects setting ACLLinux
- CVE-2025-68801mlxsw: spectrum_router: Fix neighbour use-after-freeLinux
- CVE-2025-68800mlxsw: spectrum_mr: Fix use-after-free when updating multicast route statsLinux
- CVE-2025-68799caif: fix integer underflow in cffrml_receive()Linux
- CVE-2025-68795ethtool: Avoid overflowing userspace buffer on stats queryLinux
- CVE-2025-68793drm/amdgpu: fix a job->pasid access race in gpu recoveryLinux
- CVE-2025-68792tpm2-sessions: Fix out of range indexing in name_sizeLinux
- CVE-2025-68785net: openvswitch: fix middle attribute validation in push_nsh() actionLinux
- CVE-2025-68782scsi: target: Reset t_task_cdb pointer in error caseLinux
- CVE-2025-68774hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_createLinux
- CVE-2025-68770bnxt_en: Fix XDP_TX pathLinux
- CVE-2025-36640Local Privilege EscalationTenable Nessus Agent
- CVE-2025-13447OS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterProgress Software LoadMaster
- CVE-2025-13444OS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterProgress Software LoadMaster · Progress Software Multi Tena…
- CVE-2025-11669Broken Access ControlZohocorp ManageEngine PAM360 · Zohocorp ManageEngine Pas… +1
- CVE-2025-9427Admin reflected XSSLemonsoft WordPress add-on
- CVE-2026-0891Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147Mozilla Firefox · Mozilla Thunderbird
- CVE-2026-0889Denial-of-service in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0882Use-after-free in the IPC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0880Sandbox escape due to integer overflow in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0878Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0877Mitigation bypass in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-13774SQL injection leading to privilege escalation in Progress Flowmon ADSProgress Software Flowmon ADS
- CVE-2025-59022TYPO3 CMS Allows Broken Access Control in Recycler ModuleTYPO3 CMS · typo3/cms-recycler
- CVE-2025-40944A vulnerability has been identified in SIMATIC ET 200AL IM 157-1 PN (6ES7157-1AB00-0AB0) (All versions), SIMATIC ET 200MP IM 155-5 PN HF (6ESiemens SIMATIC ET 200AL IM 157-1 PN · Siemens SIMATIC… +10
- CVE-2025-40942A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4).Siemens TeleControl Server Basic
- CVE-2025-41717Config-Upload Code InjectionPhoenix Contact TC ROUTER 3002T-3G · Phoenix Contact TC… +6
- CVE-2025-66177There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models.Hikvision DS-96xxxNI-Hx · Hikvision DS-96xxxNI-Ix +95
- CVE-2025-66176There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.Hikvision DS-K1T331 · Hikvision DS-K1T341A/K1T341B +16
- CVE-2026-0511Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App
- CVE-2026-0507OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDKSAP_SE SAP Application Server for ABAP and SAP NetWeaver RF…
- CVE-2026-0506Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2026-0492Privilege escalation vulnerability in SAP HANA databaseSAP_SE SAP HANA database
- CVE-2025-25652In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory
- CVE-2025-66698An issue in Semantic machines v5.4.8 allows attackers to bypass authentication via sending a crafted HTTP request to various API endpoints.
- CVE-2025-68707An authentication bypass vulnerability in the Tongyu AX1800 Wi-Fi 6 Router with firmware 1.0.0 allows unauthenticated network-adjacent attac
- CVE-2025-70753Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the security_5g parameter of the sub_4CA50 function.
- CVE-2025-71023Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the mac2 parameter of the fromAdvSetMacMtuWan function.
- CVE-2025-71024Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the serviceName2 parameter of the fromAdvSetMacMtuWan function.
- CVE-2025-71025Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the cloneType2 parameter of the fromAdvSetMacMtuWan function.
- CVE-2025-71026Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanSpeed2 parameter of the fromAdvSetMacMtuWan function.
- CVE-2025-71027Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow in the wanMTU2 parameter of the fromAdvSetMacMtuWan function.
Medium, low and unrated 161
- CVE-2026-0716Libsoup: out-of-bounds read in libsoup websocket frame processingRed Hat Enterprise Linux
- CVE-2023-54332Jetpack 11.4 - Cross Site Scripting (XSS)Automattic Jetpack
- CVE-2023-53985Zstore 6.5.4 - Reflected Cross-Site Scripting (XSS)Zippy Zstore
- CVE-2022-50896Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)Testa
- CVE-2021-47750YouPHPTube <= 7.8 - Cross-Site ScriptingYouPHPTube
- CVE-2020-36919WPForms 1.7.8 - Cross-Site Scripting (XSS)Syed Balkhi WPForms
- CVE-2023-54341Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) via file Parameterjokkedk Webgrind
- CVE-2023-54337Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)Sysax Multi Server
- CVE-2023-54328AimOne Video Converter 2.04 Build 103 Buffer Overflow in Registration FormAimone-Video-Converter AimOne Video Converter
- CVE-2022-50937Ametys CMS v4.4.1 - Cross Site Scripting (XSS)Ametys CMS
- CVE-2022-50908Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)Mailhog
- CVE-2022-50906e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSSe107 CMS
- CVE-2022-50905e107 CMS v3.2.1 - Reflected XSS via Comment Flowe107 CMS
- CVE-2022-50891Owlfiles File Manager 12.0.1 Cross-Site Scripting via HTTP ServerSkyjos Owlfiles File Manager
- CVE-2021-47751CuteEditor for PHP 6.6 - Directory TraversalPhphtmledit CuteEditor
- CVE-2025-68658Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name fieldopensourcepos
- CVE-2025-68947NSecsoft NSecKrnl process termination privilege escalationNSecsoft NSecKrnl
- CVE-2026-0543Improper Input Validation in Kibana Email Connector Leading to Excessive AllocationElastic Kibana
- CVE-2026-0531Allocation of Resources Without Limits or Throttling in Kibana FleetElastic Kibana
- CVE-2026-0530Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive AllocationElastic Kibana
- CVE-2026-0528Improper Input Validation in Metricbeat Leading to Denial of ServiceElastic Metricbeat · github.com/elastic/beats +1
- CVE-2025-15056Quill 2.0.3 - Lack of data validation in HTML export allowing XSSSlab Quill · quill
- CVE-2026-21301Substance3D - Modeler | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Modeler
- CVE-2026-21300Substance3D - Modeler | NULL Pointer Dereference (CWE-476)Adobe Substance3D - Modeler
- CVE-2026-21303Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2026-21302Substance3D - Modeler | Out-of-bounds Read (CWE-125)Adobe Substance3D - Modeler
- CVE-2025-37179Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37178Out-of-Bounds Read Vulnerabilities Leading to Process Crash in AOS-8 Operating SystemHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37177Authenticated Arbitrary File Deletion Vulnerability in AOS-10 or AOS-8 Command Line Interface (CLI)Hewlett Packard Enterprise (HPE) ArubaOS
- CVE-2025-37176Authenticated Command Injection Vulnerability in an AOS-8 operating system's internal workflowHewlett Packard Enterprise (HPE) ArubaOS
- CVE-2026-21308Substance3D - Designer | Out-of-bounds Read (CWE-125)Adobe Substance 3D Designer
- CVE-2026-22809tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityAmauriC tarteaucitron.js · tarteaucitronjs
- CVE-2025-68925Jervis has a JWT Algorithm Confusion Vulnerabilitysamrocketman jervis · net.gleske:jervis
- CVE-2026-22791openCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAPopencryptoki
- CVE-2025-68949n8n has a Webhook Node IP Whitelist Bypass via Partial String Matchingn8n-io n8n · n8n
- CVE-2026-21288Illustrator | NULL Pointer Dereference (CWE-476)Adobe Illustrator Desktop
- CVE-2026-21278InDesign Desktop | Out-of-bounds Read (CWE-125)Adobe InDesign Desktop
- CVE-2026-20958Microsoft SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-20939Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20937Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20936Windows NDIS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20935Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20872NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-20862Windows Management Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20959Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-20932Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20927Windows SMB Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-20925NTLM Hash Disclosure Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-20876Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20851Capability Access Management Service (camsvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20847Microsoft Windows File Explorer Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-20839Windows Client-Side Caching (CSC) Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20838Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20835Capability Access Management Service (camsvc) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20834Windows Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-20833Windows Kerberos Information Disclosure VulnerabilityMicrosoft Windows Server 2008 R2 Service Pack · Microsof… +1
- CVE-2026-20829TPM Trustlet Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20828Windows rndismp6.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20827Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20825Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20824Windows Remote Assistance Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-20823Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20821Remote Procedure Call Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20819Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-20818Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-20812LDAP Tampering VulnerabilityMicrosoft Windows
- CVE-2026-20805Desktop Window Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-21265Secure Boot Certificate Expiration Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-20962Dynamic Root of Trust for Measurement (DRTM) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2025-58409GPU DDK - Disguised freelist buffers passed to RGXCreateHWRTDataSet can cause arbitrary physical memory writes corrupting memoryImagination Technologies Graphics DDK
- CVE-2025-62182Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.Pegasystems Pega Infinity
- CVE-2025-8090Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2025-67685A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 alFortinet FortiSandbox
- CVE-2025-58693An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, Fortinet FortiVoice
- CVE-2025-59922An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet ForFortinet FortiClientEMS
- CVE-2025-46684Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.Dell SupportAssist OS Recovery,
- CVE-2026-0404Insufficient input validation in NETGEAR Orbi routersNETGEAR RBRE960 · NETGEAR RBSE960 +10
- CVE-2026-0408Path traversal vulnerability in Netgear WiFi Range ExtendersNETGEAR EX5000 · NETGEAR EX3110 +2
- CVE-2026-0407Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacksNETGEAR EX5000 · NETGEAR EX3110 +2
- CVE-2026-0406Insufficient input validation in NETGEAR Nighthawk router XR1000v2NETGEAR XR1000v2
- CVE-2026-0405Authentication Bypass in NETGEAR Orbi DevicesNETGEAR RBE970 · NETGEAR RBE971 +23
- CVE-2026-0403Insufficient input validation in NETGEAR Orbi routersNETGEAR RBR750 · NETGEAR RBS750 +8
- CVE-2025-71098ip6_gre: make ip6gre_header() robustLinux
- CVE-2025-71097ipv4: Fix reference count leak when using error routes with nexthop objectsLinux
- CVE-2025-71096RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctlyLinux
- CVE-2025-71094net: usb: asix: validate PHY address before useLinux
- CVE-2025-71091team: fix check for port enabled in team_queue_override_port_prio_changed()Linux
- CVE-2025-71088mptcp: fallback earlier on simult connectionLinux
- CVE-2025-71087iavf: fix off-by-one issues in iavf_config_rss_reg()Linux
- CVE-2025-71086net: rose: fix invalid array index in rose_kill_by_device()Linux
- CVE-2025-71084RDMA/cm: Fix leaking the multicast GID table referenceLinux
- CVE-2025-71083drm/ttm: Avoid NULL pointer deref for evicted BOsLinux
- CVE-2025-71081ASoC: stm32: sai: fix OF node leak on probeLinux
- CVE-2025-71079net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_writeLinux
- CVE-2025-71077tpm: Cap the number of PCR banksLinux
- CVE-2025-71076drm/xe/oa: Limit num_syncs to prevent oversized allocationsLinux
- CVE-2025-71075scsi: aic94xx: fix use-after-free in device removal pathLinux
- CVE-2025-71073Input: lkkbd - disable pending work before freeing deviceLinux
- CVE-2025-71071iommu/mediatek: fix use-after-free on probe deferralLinux
- CVE-2025-71069f2fs: invalidate dentry cache on failed whiteout creationLinux
- CVE-2025-71067ntfs: set dummy blocksize to read boot_block when mountingLinux
- CVE-2025-71065f2fs: fix to avoid potential deadlockLinux
- CVE-2025-71064net: hns3: using the num_tqps in the vf driver to apply for resourcesLinux
- CVE-2025-68823ublk: fix deadlock when reading partition tableLinux
- CVE-2025-68821fuse: fix readahead reclaim deadlockLinux
- CVE-2025-68820ext4: xattr: fix null pointer deref in ext4_raw_inode()Linux
- CVE-2025-68816net/mlx5: fw_tracer, Validate format string parametersLinux
- CVE-2025-68814io_uring: fix filename leak in __io_openat_prep()Linux
- CVE-2025-68813ipvs: fix ipv4 null-ptr-deref in route error pathLinux
- CVE-2025-68807block: fix race between wbt_enable_default and IO submissionLinux
- CVE-2025-68804platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driverLinux
- CVE-2025-68802drm/xe: Limit num_syncs to prevent oversized allocationsLinux
- CVE-2025-68798perf/x86/amd: Check event before enable to avoid GPFLinux
- CVE-2025-68797char: applicom: fix NULL pointer dereference in ac_ioctlLinux
- CVE-2025-68796f2fs: fix to avoid updating zero-sized extent in extent cacheLinux
- CVE-2025-68791fuse: missing copy_finish in fuse-over-io-uring argument copiesLinux
- CVE-2025-68790net/mlx5: Fix double unregister of HCA_PORTS componentLinux
- CVE-2025-68788fsnotify: do not generate ACCESS/MODIFY events on child for special filesLinux
- CVE-2025-68787netrom: Fix memory leak in nr_sendmsg()Linux
- CVE-2025-68786ksmbd: skip lock-range check on equal size to avoid size==0 underflowLinux
- CVE-2025-68784xfs: fix a UAF problem in xattr repairLinux
- CVE-2025-68783ALSA: usb-mixer: us16x08: validate meter packet indicesLinux
- CVE-2025-68781usb: phy: fsl-usb: Fix use-after-free in delayed work during device removalLinux
- CVE-2025-68780sched/deadline: only set free_cpus for online runqueuesLinux
- CVE-2025-68779net/mlx5e: Avoid unregistering PSP twiceLinux
- CVE-2025-68778btrfs: don't log conflicting inode if it's a dir moved in the current transactionLinux
- CVE-2025-68777Input: ti_am335x_tsc - fix off-by-one error in wire_order validationLinux
- CVE-2025-68776net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()Linux
- CVE-2025-68773spi: fsl-cpm: Check length parity before switching to 16 bit modeLinux
- CVE-2025-68772f2fs: fix to avoid updating compression context during writebackLinux
- CVE-2025-68771ocfs2: fix kernel BUG in ocfs2_find_victim_chainLinux
- CVE-2025-68769f2fs: fix return value of f2fs_recover_fsync_data()Linux
- CVE-2025-68768inet: frags: flush pending skbs in fqdir_pre_exit()Linux
- CVE-2025-68767hfsplus: Verify inode mode when loading from diskLinux
- CVE-2025-14507EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST APImetagauss EventPrime – Events Calendar, Bookings and Tickets
- CVE-2026-0684CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Importcodepeople CP Image Store with Slideshow
- CVE-2026-0890Spoofing issue in the DOM: Copy & Paste and Drag & Drop componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0888Information disclosure in the XML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0887Clickjacking issue, information disclosure in the PDF Viewer componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0886Incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0885Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-0883Information disclosure in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2025-9435Path TraversalZohocorp ManageEngine ADManager Plus
- CVE-2026-0859TYPO3 CMS Allows Insecure Deserialization via Mailer File SpoolTYPO3 CMS · typo3/cms-core
- CVE-2025-59021TYPO3 CMS Allows Broken Access Control in Redirects ModuleTYPO3 CMS · typo3/cms-redirects
- CVE-2025-59020TYPO3 CMS Allows Broken Access Control in Edit Document ControllerTYPO3 CMS · typo3/cms-backend
- CVE-2025-14001WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplicationninjateam WP Duplicate Page
- CVE-2026-0514Cross-Site Scripting (XSS) vulnerability in SAP Business ConnectorSAP_SE SAP Business Connector
- CVE-2026-0513Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)SAP_SE SAP Supplier Relationship Management
- CVE-2026-0510Obsolete Encryption Algorithm Used in NW AS Java UME User MappingSAP_SE NW AS Java UME User Mapping
- CVE-2026-0504Insufficient Input Handling in JNDI Operations of SAP Identity ManagementSAP_SE SAP Identity Management
- CVE-2026-0503Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)SAP_SE SAP ERP Central Component and SAP S/4HANA
- CVE-2026-0499Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2026-0497Missing Authorization check in Business Server Pages Application (Product Designer Web UI)SAP_SE Business Server Pages Application
- CVE-2026-0496Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App
- CVE-2026-0495Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App
- CVE-2026-0494Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App
- CVE-2026-0493Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)SAP_SE SAP Fiori App
- CVE-2024-54855fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly exe
- CVE-2025-55462A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in t
- CVE-2025-65784Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to acce