Browse CVEs

HIGH 7.8 CVE-2026-21259 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally. 365 Apps 16.0.10417.20097+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21246 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 7.3 CVE-2026-21248 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 7.3 CVE-2026-21244 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21245 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 11 24h2 10.0.26100.7781 / 10.0.26100.32313+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21236 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 7.8 CVE-2026-21239 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8868 / 10.0.17763.8389+ Fix from $1,9502026-02-10 HIGH 8.6 CVE-2025-32008 Out-of-bounds write in the firmware for the Intel(R) AMT and Intel(R) Standard Manageability within Ring 3: User Applications may allow a denial of s… Mitigation only Fix from $1,9502026-02-10 HIGH 7.3 CVE-2026-23715 A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications co… Simcenter Femap 2512.0000+ Fix from $1,9502026-02-10 MEDIUM 5.5 CVE-2026-2259 A vulnerability has been found in aardappel lobster up to 2025.4. Affected by this issue is the function lobster::Parser::ParseStatements in the libr… Lobster after 2025.4 Fix from $1,6002026-02-10 MEDIUM 5.5 CVE-2026-2258 A flaw has been found in aardappel lobster up to 2025.4. Affected by this vulnerability is the function WaveFunctionCollapse in the library dev/src/l… Lobster after 2025.4 Fix from $1,6002026-02-10 HIGH 7.8 CVE-2026-25634 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.4+ Fix from $1,9502026-02-06 HIGH 7.8 CVE-2026-2016 A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode o… Libfastcommon after 1.0.84 Fix from $1,9502026-02-06 CRITICAL 9.8 CVE-2026-2017 A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/w… W30ap Firmware after 1.0.0.11 Fix from $2,3002026-02-06 MEDIUM 5.5 CVE-2026-24928 Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Emui No fix yet Fix from $1,6002026-02-06 MEDIUM 5.5 CVE-2026-24925 Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability. Harmonyos No fix yet Fix from $1,6002026-02-06 MEDIUM 5.5 CVE-2026-24926 Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. Harmonyos No fix yet Fix from $1,6002026-02-06 MEDIUM 5.5 CVE-2026-24919 Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. Emui No fix yet Fix from $1,6002026-02-06 MEDIUM 5.5 CVE-2026-1998 A flaw has been found in micropython up to 1.27.0. This vulnerability affects the function mp_import_all of the file py/runtime.c. This manipulation … Micropython after 1.27.0 Fix from $1,6002026-02-06 CRITICAL 9.3 CVE-2026-0106 In vpu_mmap of vpu_ioctl, there is a possible arbitrary address mmap due to a missing bounds check. This could lead to local escalation of privilege … Android Mitigation only Fix from $2,3002026-02-05 MEDIUM 6.8 CVE-2026-1301 In builds with PubSub and JSON enabled, a crafted JSON message can cause the decoder to write beyond a heap-allocated array before authentication, re… Mitigation only Fix from $1,6002026-02-05 MEDIUM 5.5 CVE-2020-37140 Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by ma… Aida64 No fix yet Fix from $1,6002026-02-05 MEDIUM 5.5 CVE-2020-37132 UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to crash th… Ultravnc after 1.2.4.0 Fix from $1,6002026-02-05 HIGH 7.5 CVE-2020-37133 UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash the appl… Ultravnc after 1.2.4.0 Fix from $1,9502026-02-05 CRITICAL 9.8 CVE-2020-37119 Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overw… Nsauditor Mitigation only Fix from $2,3002026-02-05 HIGH 7.8 CVE-2026-25585 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.3+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-25582 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.3+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-25583 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.3+ Fix from $1,9502026-02-04 HIGH 7.8 CVE-2026-25584 iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to… Iccdev 2.3.1.3+ Fix from $1,9502026-02-04 HIGH 8.2 CVE-2025-15555 A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss… Open5gs after 2.7.6 Fix from $1,9502026-02-04