Browse CVEs

CRITICAL 9.8 CVE-2026-48686 FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. T… Fastnetmon after 1.2.9 Fix from $2,3002026-05-26 HIGH 8.8 CVE-2026-40033 FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap me… Freerdp 3.26.0+ Fix from $1,9502026-05-26 HIGH 7.8 CVE-2026-46300EPSS 7% In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() c… Linux Kernel 5.15.208 / 6.1.174+ Fix from $1,9502026-05-23 HIGH 7.8 CVE-2026-43498 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-exporting of … Linux Kernel 7.0.7+ Fix from $1,9502026-05-21 CRITICAL 9.8 CVE-2026-43501 In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rpl_srh_rc… Linux Kernel 5.10.258 / 5.15.209+ Fix from $2,3002026-05-21 HIGH 8.4 CVE-2026-45253 ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a result, a user with the abil… FreeBSD Mitigation only Fix from $1,9502026-05-21 HIGH 7.5 CVE-2026-44062 A missing output length bounds check in pull_charset_flags() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitr… Mitigation only Fix from $1,9502026-05-21 HIGH 7.5 CVE-2026-44049 An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker t… Mitigation only Fix from $1,9502026-05-21 HIGH 7.5 CVE-2026-24188 NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead … Tensorrt 10.16.1+ Fix from $1,9502026-05-20 HIGH 7.5 CVE-2026-42944 NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS… Unbound 1.25.1+ Fix from $1,9502026-05-20 HIGH 8.8 CVE-2026-32740 libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow (write) vulnerability in the gri… Libheif 1.22.0+ Fix from $1,9502026-05-19 CRITICAL 9.8 CVE-2026-33642 Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds… Kitty 0.47.0+ Fix from $2,3002026-05-19 HIGH 8.8 CVE-2026-8975 Memory safety bugs present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150. Some of these bugs showed evidence of memory corruption and we … Firefox 115.36.0 / 140.11+ Fix from $1,9502026-05-19 HIGH 8.8 CVE-2026-8973 Memory safety bugs present in Firefox 150. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 151.0.0+ Fix from $1,9502026-05-19 HIGH 7.5 CVE-2026-8946 Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR … Firefox 115.36.0 / 140.11+ Fix from $1,9502026-05-19 CRITICAL 9.8 CVE-2026-47314 Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 590345cc6258317c5da850d846ce… Escargot Patch available Fix from $2,3002026-05-19 HIGH 8.4 CVE-2026-25781 in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. Mitigation only Fix from $1,9502026-05-19 HIGH 8.8 CVE-2026-27648 in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps. Mitigation only Fix from $1,9502026-05-19 CRITICAL 9.8 CVE-2026-8507 Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING… Patch available Fix from $2,3002026-05-17 MEDIUM 6.5 CVE-2026-8669 Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_readgif_multi_… Patch available Fix from $1,6002026-05-15 MEDIUM 5.3 CVE-2026-8454 Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files. Imager::File::GIF's i_rea… Imager\ 1.003+ Fix from $1,6002026-05-15 MEDIUM 6.8 CVE-2026-41970 Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availabilit… Mitigation only Fix from $1,6002026-05-15 HIGH 8.8 CVE-2026-43490 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks the parent di… Linux Kernel 6.6.141 / 6.12.88+ Fix from $1,9502026-05-15 HIGH 8.5 CVE-2025-54517 Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. Mitigation only Fix from $1,9502026-05-15 HIGH 8.4 CVE-2025-29935 An out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker to execute arbitrary code at an elevated privilege … Mitigation only Fix from $1,9502026-05-15 HIGH 8.5 CVE-2025-52540 An improper input validation vulnerability within the AMD Platform Management Framework (PMF) Driver can allow a local attacker to write Out-of-Bound… Mitigation only Fix from $1,9502026-05-15 HIGH 8.5 CVE-2025-48519 An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read or write Out-… Mitigation only Fix from $1,9502026-05-15 HIGH 8.3 CVE-2026-8569 Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.8 CVE-2026-8558 Out of bounds write in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14 HIGH 8.3 CVE-2026-8548 Out of bounds write in Media in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potential… Chrome 148.0.7778.168+ Fix from $1,9502026-05-14