Browse CVEs

CRITICAL 9.3 CVE-2026-54257 Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.1 until 42.3.3, Buffer performs inc… Mitigation only Fix from $2,3002026-06-23 HIGH 8.8 CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurve… Mitigation only Fix from $1,9502026-06-21 CRITICAL 9.8 CVE-2026-43994 Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.10.0 contain a stack buffer overflow in decode_oauth_token_g… Coturn 4.10.0+ Fix from $2,3002026-06-18 HIGH 7.5 CVE-2026-38718 InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a buffer overflow vulnerability i… Ir915l Fq39 S Firmware 1.0.0.r20044+ Fix from $1,9502026-06-18 MEDIUM 6.5 CVE-2026-7300 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Fil… Connext Professional 7.4.0+ Fix from $1,6002026-06-17 HIGH 8.4 CVE-2025-26240 In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the… Mitigation only Fix from $1,9502026-06-17 HIGH 8.8 CVE-2026-0154 In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execut… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0160 In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there is a possible out of bounds write due to a missing bounds check. Thi… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0164 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional executio… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 5.7 CVE-2026-0165 In several functions of the RTCP packet decoder, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote info… Android Mitigation only Fix from $1,6002026-06-16 MEDIUM 6.5 CVE-2026-0144 In writeAocCommand of AocAudioCodec.cpp, there is a possible memory safety issue due to a missing bounds check. This could lead to remote denial of s… Android Mitigation only Fix from $1,6002026-06-16 HIGH 8.8 CVE-2026-0146 In mfc_core_get_dec_metadata_sei_nal of mfc_core_reg_api.c, there is a possible out of bounds write due to a missing bounds check. This could lead to… Android Mitigation only Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-0147 In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out of bounds write due to a missing bounds check. This could l… Android Mitigation only Fix from $1,9502026-06-16 MEDIUM 6.5 CVE-2026-0136 In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execut… Android Mitigation only Fix from $1,6002026-06-16 HIGH 7.8 CVE-2026-0138 In lwis_io_buffer_write of lwis_io_buffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of… Android Mitigation only Fix from $1,9502026-06-16 CRITICAL 9.8 CVE-2026-0126 In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execu… Android Mitigation only Fix from $2,3002026-06-16 HIGH 8.1 CVE-2026-12328 Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs sho… Firefox 115.37.0 / 140.12.0+ Fix from $1,9502026-06-16 HIGH 8.8 CVE-2026-12192 A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer over… Mitigation only Fix from $1,9502026-06-15 HIGH 8.2 CVE-2026-49759 Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a c… Erlang\/otp 15.2.7.9 / 16.4.0.2+ Fix from $1,9502026-06-10 HIGH 7.5 CVE-2026-36815 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the hostname parameter of the formSetNetChec… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36816 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the for… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36817 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the fo… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36818 Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the wewifiWhiteUserInfo parameter of the form… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36803 Shenzhen Tenda Technology Co., Ltd Tenda PW201A v1.0.5 was discovered to contain a buffer overflow in the page parameter of the qossetting function. … Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36807 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserPwd parameter of the formAddW… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36808 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAdd… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36809 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteID parameter of the formModi… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36810 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the gotoUrl parameter of the formPortalAuth … Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36811 Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthP… Mitigation only Fix from $1,9502026-06-09 HIGH 7.5 CVE-2026-36796 Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetW… Mitigation only Fix from $1,9502026-06-09