Browse CVEs

CRITICAL 9.8 CVE-2026-12394 The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to regi… No fix yet Fix from $2,3002026-07-27 HIGH 8.1 CVE-2026-12255 The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in its site-registration request handler when password authe… No fix yet Fix from $1,9502026-07-27 MEDIUM 6.1 CVE-2026-10082 The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the page, allowing users … No fix yet Fix from $1,6002026-07-27 HIGH 8.6 CVE-2025-15662 The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it se… No fix yet Fix from $1,9502026-07-27 HIGH 8.2 CVE-2026-15928 XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component. No fix yet Fix from $1,9502026-07-27 HIGH 7.4 CVE-2026-57990 Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a… Edge Chromium No fix yet Fix from $1,9502026-07-26 MEDIUM 6.3 CVE-2026-17458 A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.t… No fix yet Fix from $1,6002026-07-26 CRITICAL 9.8 CVE-2026-64530 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() … Mitigation only Fix from $2,3002026-07-26 HIGH 7.8 CVE-2024-14040 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur a… No fix yet Fix from $1,9502026-07-26 MEDIUM 5.3 CVE-2026-17433 A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk… No fix yet Fix from $1,6002026-07-26 HIGH 8.8 CVE-2026-15962 The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deseriali… No fix yet Fix from $1,9502026-07-26 CRITICAL 9.3 CVE-2026-66013 OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to upd… No fix yet Fix from $2,3002026-07-25 HIGH 7.8 CVE-2026-64529 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes … No fix yet Fix from $1,9502026-07-25 HIGH 7.7 CVE-2026-64524 In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTHVID_RESOLUTI… No fix yet Fix from $1,9502026-07-25 CRITICAL 9.8 CVE-2026-64523 In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_d… Mitigation only Fix from $2,3002026-07-25 HIGH 8.8 CVE-2026-64522 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_… No fix yet Fix from $1,9502026-07-25 HIGH 8.4 CVE-2026-64520 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PART… No fix yet Fix from $1,9502026-07-25 HIGH 8.8 CVE-2026-64516 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the a… No fix yet Fix from $1,9502026-07-25 HIGH 8.3 CVE-2026-64515 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link ele… Mitigation only Fix from $1,9502026-07-25 HIGH 7.0 CVE-2026-64510 In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails … No fix yet Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64502 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices ad_s… No fix yet Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64501 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In ad_sigma_delt… No fix yet Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64496 In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates the event fil… No fix yet Fix from $1,9502026-07-25 HIGH 8.4 CVE-2026-64490 In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control hand… No fix yet Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64485 In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new() allocates t… No fix yet Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64481 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA con… No fix yet Fix from $1,9502026-07-25 HIGH 8.8 CVE-2026-64475 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on register_device() failure The re-or… Mitigation only Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64469 In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a thread exits, binder_thread_r… No fix yet Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64468 In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In binder_free_transaction(), the … No fix yet Fix from $1,9502026-07-25 HIGH 8.8 CVE-2026-64467 In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the offsets array Allocation's D… No fix yet Fix from $1,9502026-07-25