[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-98490 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While… | |
| CVE-2026-98475 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address… | |
| CVE-2026-98476 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() The channel… | |
| CVE-2026-98477 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() perf_pmu_sched_task()… | |
| CVE-2026-98478 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit… | |
| CVE-2026-98479 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU The Data-In branch… | |
| CVE-2026-98480 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970a_startup() powers up… | |
| CVE-2026-98481 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfc: port100: reject frames whose declared length exceeds the received data… | |
| CVE-2026-98482 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()… | |
| CVE-2026-98483 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: nfc: fix use-after-free in nfc_get_local_general_bytes Commit 6709d4b7bc2e ("net… | |
| CVE-2026-98466 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2… | |
| CVE-2026-98467 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Commit… | |
| CVE-2026-98468 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix spurious warning for benign stage 2 teardown race kvmtool was… | |
| CVE-2026-98469 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR<n> handling The consolidation of the breakpoint… | |
| CVE-2026-98470 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode… | |
| CVE-2026-98471 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration… | |
| CVE-2026-98472 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV… | |
| CVE-2026-98473 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config… | |
| CVE-2026-98474 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpci_report_status() When pdev is non-NULL… | |
| CVE-2026-98456 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list() read_unconf_index_list()… | |
| CVE-2026-98457 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame length before control and FCS access… | |
| CVE-2026-98458 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: release unused CIS holds after channel attach hci_bind_cis() and… | |
| CVE-2026-98459 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the parent hold in hci_bind_bis() hci_conn_link() takes a… | |
| CVE-2026-98460 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: reject out-of-range OCF values The raw HCI socket security… | |
| CVE-2026-98461 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: validate event length before filtering is_filtered_packet()… | |
| CVE-2026-98462 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix CIS hold ownership on reuse Commit 69997d50ec57… | |
| CVE-2026-98463 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags… | |
| CVE-2026-98464 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer… | |
| CVE-2026-98465 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are… | |
| CVE-2026-98447 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM… | |
| CVE-2026-98448 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the… | |
| CVE-2026-98449 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a… | |
| CVE-2026-98450 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound_send_recv()… | |
| CVE-2026-98451 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find… | |
| CVE-2026-98452 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends… | |
| CVE-2026-98453 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open()… | |
| CVE-2026-98454 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2_parse_contexts()… | |
| CVE-2026-98455 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO The… | |
| CVE-2026-98440 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We… | |
| CVE-2026-98441 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared unconfirmed ct entry In a case where… | |
| CVE-2026-98442 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to extensions realloc While calling the… | |
| CVE-2026-98443 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM… | |
| CVE-2026-98444 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't find a buffer to flush LOLLM noticed… | |
| CVE-2026-98445 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that… | |
| CVE-2026-98446 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go negative in xfs_metafile_resv_init LOLLM points… | |
| CVE-2026-98433 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure In… | |
| CVE-2026-98434 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to… | |
| CVE-2026-98435 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres… | |
| CVE-2026-98436 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended… | |
| CVE-2026-98437 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm_runtime_resume_and_get()… | |
| CVE-2026-98438 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When sending a DATA_FIN… | |
| CVE-2026-98439 | 18 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may… | |
| CVE-2026-111988 | 18 Oct 2026 | CVSS 4.3 | dyad-sh dyadA security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth… | |
| CVE-2026-111990 | 18 Oct 2026 | CVSS 7.3 | kishan0725 Hospital Management SystemA weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function… | |
| CVE-2026-111991 | 18 Oct 2026 | CVSS 6.3 | WongKinYiu yolov9A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file… | |
| CVE-2026-110024 | 18 Oct 2026 | CVSS 6.8 | @fastify/jwt@fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured… | |
| CVE-2026-111987 | 18 Oct 2026 | CVSS 4.3 | AUTOMATIC1111 stable-diffusion-webuiA vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function… | |
| CVE-2026-112057 | 18 Oct 2026 | CVSS 5.5 | VideoLAN libdvdnavlibdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the… | |
| CVE-2026-112058 | 18 Oct 2026 | CVSS 5.5 | VideoLAN libdvdnavVideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an… | |
| CVE-2026-112059 | 18 Oct 2026 | CVSS 6.1 | libLASlibLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16… | |
| CVE-2026-112060 | 18 Oct 2026 | CVSS 6.4 | RTMPDump librtmplibrtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property… | |
| CVE-2026-112061 | 18 Oct 2026 | CVSS 4.3 | RTMPDump librtmplibrtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count… | |
| CVE-2026-112062 | 18 Oct 2026 | CVSS 5.9 | lwIPlwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory… | |
| CVE-2026-112063 | 18 Oct 2026 | CVSS 5.9 | strophe libstrophelibstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte… | |
| CVE-2026-112050 | 18 Oct 2026 | CVSS 3.1 | gitify-app gitifyGitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their… | |
| CVE-2026-112051 | 18 Oct 2026 | CVSS 6.5 | xorbitsai inferenceXinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json… | |
| CVE-2026-112052 | 18 Oct 2026 | CVSS 6.1 | SpatiaLite libspatialitelibspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related… | |
| CVE-2026-112053 | 18 Oct 2026 | CVSS 5.5 | schroedingerSchroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table… | |
| CVE-2026-112054 | 18 Oct 2026 | CVSS 5.5 | schroedingerSchroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero… | |
| CVE-2026-112055 | 18 Oct 2026 | CVSS 5.5 | wvWare wvwvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run… | |
| CVE-2026-112056 | 18 Oct 2026 | CVSS 5.5 | wvWare wvwvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash… | |
| CVE-2026-112046 | 18 Oct 2026 | CVSS 5.5 | OW2 ASMOW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when… | |
| CVE-2026-112047 | 18 Oct 2026 | CVSS 5.4 | oneuptimeOneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters… | |
| CVE-2026-112048 | 18 Oct 2026 | CVSS 6.1 | SpatiaLite libspatialitelibspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring… | |
| CVE-2026-112049 | 18 Oct 2026 | CVSS 5.5 | Vita3KVita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside… | |
| CVE-2026-111986 | 18 Oct 2026 | CVSS 6.3 | AUTOMATIC1111 stable-diffusion-webuiA vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file… | |
| CVE-2026-112020 | 18 Oct 2026 | CVSS 6.1 | lvandeve lodepngLodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks… | |
| CVE-2026-112021 | 18 Oct 2026 | CVSS 7.5 | grunfink snac2snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to… | |
| CVE-2026-78497 | 18 Oct 2026 | CVSS 8.4 | VulnerabilityJQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given… | |
| CVE-2026-112013 | 18 Oct 2026 | CVSS 5.5 | True Audio libttalibtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an… | |
| CVE-2026-112014 | 18 Oct 2026 | CVSS 5.5 | netease-youdao LobsterAILobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with… | |
| CVE-2026-112015 | 18 Oct 2026 | CVSS 7.5 | omnigent-ai omnigentOmnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on… | |
| CVE-2026-112016 | 18 Oct 2026 | CVSS 6.5 | Netcore NR256CNNetcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote… | |
| CVE-2026-112017 | 18 Oct 2026 | CVSS 6.5 | JeecgBootJeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist… | |
| CVE-2026-112018 | 18 Oct 2026 | CVSS 7.0 | jkuhlmann cgltfcgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the… | |
| CVE-2026-112019 | 18 Oct 2026 | CVSS 6.1 | jkuhlmann cgltfcgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the… | |
| CVE-2026-112007 | 18 Oct 2026 | CVSS 6.1 | schismtracker Schism TrackerSchism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_song() in fmt/ult.c that fails to clamp the… | |
| CVE-2026-112008 | 18 Oct 2026 | CVSS 6.1 | libmnglibmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR… | |
| CVE-2026-112009 | 18 Oct 2026 | CVSS 5.5 | icculus smpegsmpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte… | |
| CVE-2026-112010 | 18 Oct 2026 | CVSS 5.5 | icculus smpegsmpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by… | |
| CVE-2026-112011 | 18 Oct 2026 | CVSS 5.3 | True Audio libttalibtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on… | |
| CVE-2026-112012 | 18 Oct 2026 | CVSS 5.3 | True Audio libttalibtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame()… | |
| CVE-2026-112000 | 18 Oct 2026 | CVSS 7.6 | vanus-labs vanusVanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack… | |
| CVE-2026-112001 | 18 Oct 2026 | CVSS 7.2 | ProjectSendProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's… | |
| CVE-2026-112002 | 18 Oct 2026 | CVSS 6.8 | ProjectSendProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of… | |
| CVE-2026-112003 | 18 Oct 2026 | CVSS 5.9 | ProjectSendProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to… | |
| CVE-2026-112004 | 18 Oct 2026 | CVSS 3.1 | teableio teableTeable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other… | |
| CVE-2026-112005 | 18 Oct 2026 | CVSS 7.7 | clidey whodbWhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running… | |
| CVE-2026-112006 | 18 Oct 2026 | CVSS 6.5 | opentelemetry-exporter-otlp-proto-httpOpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS… | |
| CVE-2026-111984 | 18 Oct 2026 | CVSS 4.3 | AUTOMATIC1111 stable-diffusion-webuiA vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file… |
Page 39 of 168