Browse CVEs

MEDIUM 6.4 CVE-2026-24220 NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauth… Mitigation only Fix from $1,6002026-07-14 MEDIUM 5.3 CVE-2026-15749 A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/… Mitigation only Fix from $1,6002026-07-14 HIGH 8.5 CVE-2026-15738 Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated… Mitigation only Fix from $1,9502026-07-14 HIGH 7.3 CVE-2026-15643 AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLa… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47482 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A s… Mitigation only Fix from $1,9502026-07-14 MEDIUM 6.5 CVE-2026-47481 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or… Mitigation only Fix from $1,6002026-07-14 HIGH 7.5 CVE-2026-47480 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception. A successful exploit of this vul… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47479 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47478 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exp… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47477 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow. A successful exploit of … Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-47476 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption. A successful exploit… No fix yet Fix from $1,9502026-07-14 MEDIUM 6.5 CVE-2026-15714 An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_he… Mitigation only Fix from $1,6002026-07-14 MEDIUM 5.9 CVE-2026-15713 A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific st… Mitigation only Fix from $1,6002026-07-14 HIGH 7.5 CVE-2026-15711 A vulnerability was found in libsoup's WebSocket frame parsing implementation. The library fails to validate length rules specified in RFC 6455 §5.5,… Mitigation only Fix from $1,9502026-07-14 HIGH 7.5 CVE-2026-15709 A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) pr… Mitigation only Fix from $1,9502026-07-14 HIGH 7.2 CVE-2026-15410 KEVEPSS 76% Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management C… Sma6210 Firmware Mitigation only Fix from $1,9502026-07-14 CRITICAL 10.0 CVE-2026-15409 KEVEPSS 74% A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attack… Sma6210 Firmware Mitigation only Fix from $2,3002026-07-14 HIGH 8.8 CVE-2026-47301 Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. Configuration Manager 2503 Mitigation only Fix from $1,9502026-07-14 HIGH 8.6 CVE-2026-15720 In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wid… Mitigation only Fix from $1,9502026-07-14 MEDIUM 5.9 CVE-2026-15712 A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the lib… Mitigation only Fix from $1,6002026-07-14 MEDIUM 5.4 CVE-2026-62656 A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router and run un… Mitigation only Fix from $1,6002026-07-14 MEDIUM 5.7 CVE-2026-62655 A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unex… No fix yet Fix from $1,6002026-07-14 MEDIUM 6.8 CVE-2026-58528 Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack. Mitigation only Fix from $1,6002026-07-14 MEDIUM 6.3 CVE-2026-57973 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally. Mitigation only Fix from $1,6002026-07-14 MEDIUM 5.5 CVE-2026-57085 Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. Mitigation only Fix from $1,6002026-07-14 HIGH 8.8 CVE-2026-56642 Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network. Fabric Data Warehouse Mitigation only Fix from $1,9502026-07-14 HIGH 7.8 CVE-2026-56156 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-07-14 HIGH 7.1 CVE-2026-55145 Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampe… Copilot Mitigation only Fix from $1,9502026-07-14 MEDIUM 5.5 CVE-2026-55139 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. Mitigation only Fix from $1,6002026-07-14 HIGH 7.8 CVE-2026-55133 Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502026-07-14