[ Latest · 16,702 CVEs ]

Newly published CVEs.

Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-65149 13 Oct 2026 CVSS 7.3 NVIDIA DALINVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability…
CVE-2026-65150 13 Oct 2026 CVSS 7.3 NVIDIA DALINVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability…
CVE-2026-65161 13 Oct 2026 CVSS 7.5 NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target…
CVE-2026-65162 13 Oct 2026 CVSS 10.0 NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply…
CVE-2026-65101 13 Oct 2026 CVSS 8.6 NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by…
CVE-2026-65103 13 Oct 2026 CVSS 8.1 NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker…
CVE-2026-65104 13 Oct 2026 CVSS 7.1 NVIDIA Megatron-LMNVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for…
CVE-2026-65110 13 Oct 2026 CVSS 7.8 NVIDIA Megatron-LMNVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously…
CVE-2026-65131 13 Oct 2026 CVSS 6.0 NVIDIA NVSentinelNVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a…
CVE-2026-109781 13 Oct 2026 CVSS 6.5 Mozilla FirefoxDenial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109782 13 Oct 2026 Not scored yet Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109783 13 Oct 2026 Not scored yet Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.
CVE-2026-109833 13 Oct 2026 CVSS 5.9 Red Hat Enterprise Linux 10A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek…
CVE-2026-109976 13 Oct 2026 CVSS 4.7 Red Hat Enterprise Linux 10A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket…
CVE-2026-109772 13 Oct 2026 Not scored yet Mozilla FirefoxSame-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109773 13 Oct 2026 CVSS 6.5 Mozilla FirefoxDenial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109774 13 Oct 2026 Not scored yet Mozilla FirefoxInvalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109775 13 Oct 2026 CVSS 6.5 Mozilla FirefoxDenial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109776 13 Oct 2026 CVSS 4.2 Mozilla FirefoxRace condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109777 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109778 13 Oct 2026 CVSS 8.8 Mozilla FirefoxPrivilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109779 13 Oct 2026 CVSS 4.2 Mozilla FirefoxRace condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109780 13 Oct 2026 Not scored yet Mozilla FirefoxMitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109762 13 Oct 2026 CVSS 8.8 Mozilla FirefoxIncorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109763 13 Oct 2026 Not scored yet Mozilla FirefoxMitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109764 13 Oct 2026 CVSS 5.4 Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109765 13 Oct 2026 CVSS 4.2 Mozilla FirefoxRace condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109766 13 Oct 2026 CVSS 8.1 Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109767 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109768 13 Oct 2026 CVSS 6.5 Mozilla FirefoxDenial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109769 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109770 13 Oct 2026 CVSS 6.1 Mozilla FirefoxSpoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109771 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109752 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109753 13 Oct 2026 CVSS 8.1 Mozilla FirefoxIncorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109754 13 Oct 2026 CVSS 8.1 Mozilla FirefoxIncorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109755 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109756 13 Oct 2026 CVSS 8.8 Mozilla FirefoxPrivilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109757 13 Oct 2026 CVSS 8.3 Mozilla FirefoxSandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109759 13 Oct 2026 CVSS 8.1 Mozilla FirefoxSite isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109760 13 Oct 2026 CVSS 8.1 Mozilla FirefoxMitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109761 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109743 13 Oct 2026 CVSS 8.8 Mozilla FirefoxPrivilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109744 13 Oct 2026 CVSS 8.1 Mozilla FirefoxOther issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109745 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5…
CVE-2026-109746 13 Oct 2026 CVSS 7.3 Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109747 13 Oct 2026 CVSS 7.3 Mozilla FirefoxOther issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109748 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109749 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109750 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSite isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109751 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109735 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109736 13 Oct 2026 CVSS 8.1 Mozilla FirefoxFrame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
CVE-2026-109737 13 Oct 2026 CVSS 8.1 Mozilla FirefoxMitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109738 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109739 13 Oct 2026 CVSS 8.8 Mozilla FirefoxPrivilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109740 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5…
CVE-2026-109741 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109742 13 Oct 2026 CVSS 4.3 Mozilla FirefoxInformation disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109725 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird…
CVE-2026-109726 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109727 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109728 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109729 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109730 13 Oct 2026 CVSS 8.8 Mozilla FirefoxInteger overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109731 13 Oct 2026 CVSS 5.4 Mozilla FirefoxIncorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109732 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109733 13 Oct 2026 CVSS 8.1 Mozilla FirefoxJIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109734 13 Oct 2026 CVSS 8.1 Mozilla FirefoxMitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109716 13 Oct 2026 CVSS 8.1 Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109717 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109718 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109719 13 Oct 2026 CVSS 4.2 Mozilla FirefoxRace condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR…
CVE-2026-109720 13 Oct 2026 CVSS 7.1 Mozilla FirefoxJIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109721 13 Oct 2026 CVSS 5.4 Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird…
CVE-2026-109722 13 Oct 2026 CVSS 8.1 Mozilla FirefoxJIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109723 13 Oct 2026 CVSS 5.4 Mozilla FirefoxInteger overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109724 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109709 13 Oct 2026 CVSS 8.8 Mozilla FirefoxInformation disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR…
CVE-2026-109710 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109711 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109712 13 Oct 2026 CVSS 7.1 Mozilla FirefoxSandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR…
CVE-2026-109713 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird…
CVE-2026-109714 13 Oct 2026 CVSS 5.4 Mozilla FirefoxIncorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
CVE-2026-109715 13 Oct 2026 CVSS 8.1 Mozilla FirefoxIncorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5…
CVE-2026-109704 13 Oct 2026 CVSS 8.8 Mozilla FirefoxPrivilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and…
CVE-2026-109705 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed…
CVE-2026-109706 13 Oct 2026 CVSS 5.4 Mozilla FirefoxUse-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird…
CVE-2026-109707 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158…
CVE-2026-109708 13 Oct 2026 CVSS 9.6 Mozilla FirefoxSandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5…
CVE-2026-109405 13 Oct 2026 CVSS 7.3 conductor-oss conductorA security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file…
CVE-2026-109406 13 Oct 2026 CVSS 5.4 macrozheng mallA weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file…
CVE-2026-109407 13 Oct 2026 CVSS 3.1 macrozheng mallA security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file…
CVE-2026-109403 13 Oct 2026 CVSS 7.3 conductor-oss conductorA vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the…
CVE-2026-109404 13 Oct 2026 CVSS 5.3 conductor-oss conductorA vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file…
CVE-2026-89279 13 Oct 2026 CVSS 6.5 AuthTake Technology Inc. authtakeCross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake…
CVE-2026-94410 13 Oct 2026 CVSS 4.3 Bender Customer&PartnerA low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of…
CVE-2026-109832 13 Oct 2026 CVSS 7.5 Red Hat Enterprise Linux 10A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results…
CVE-2026-63316 13 Oct 2026 CVSS 8.7 Payload CMSA SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query…
CVE-2026-109189 13 Oct 2026 CVSS 6.3 fit2cloud MeterSphereA vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function…
Page 80 of 168