Browse CVEs

MEDIUM 5.3 CVE-2026-17501 A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp … Patch available Fix from $1,6002026-07-27 MEDIUM 5.3 CVE-2026-17500 A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-gramma… Patch available Fix from $1,6002026-07-27 HIGH 7.4 CVE-2026-57990 Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a… Edge Chromium No fix yet Fix from $1,9502026-07-26 HIGH 7.4 CVE-2026-57989 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. Edge Chromium 150.0.4078.99+ Fix from $1,9502026-07-26 MEDIUM 5.4 CVE-2026-57978 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. Edge Chromium 150.0.4078.99+ Fix from $1,6002026-07-26 HIGH 8.3 CVE-2026-17497 NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the defa… Patch available Fix from $1,9502026-07-26 HIGH 8.1 CVE-2026-17496 NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInne… Patch available Fix from $1,9502026-07-26 MEDIUM 6.3 CVE-2026-17458 A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.t… No fix yet Fix from $1,6002026-07-26 CRITICAL 9.8 CVE-2026-64530 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() … Mitigation only Fix from $2,3002026-07-26 HIGH 7.8 CVE-2024-14040 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur a… No fix yet Fix from $1,9502026-07-26 HIGH 7.5 CVE-2026-63720 datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve r… Patch available Fix from $1,9502026-07-26 MEDIUM 6.3 CVE-2026-17434 A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of t… Patch available Fix from $1,6002026-07-26 MEDIUM 5.3 CVE-2026-17433 A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk… No fix yet Fix from $1,6002026-07-26 HIGH 8.8 CVE-2026-15962 The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deseriali… No fix yet Fix from $1,9502026-07-26 MEDIUM 5.0 CVE-2026-17432 A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-age… Patch available Fix from $1,6002026-07-26 HIGH 7.0 CVE-2026-10681 In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the … Zephyr 4.5.0+ Fix from $1,9502026-07-25 CRITICAL 9.3 CVE-2026-66013 OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to upd… No fix yet Fix from $2,3002026-07-25 CRITICAL 10.0 CVE-2026-66012 SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (mo… Patch available Fix from $2,3002026-07-25 HIGH 7.8 CVE-2026-64529 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes … No fix yet Fix from $1,9502026-07-25 HIGH 7.7 CVE-2026-64524 In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTHVID_RESOLUTI… No fix yet Fix from $1,9502026-07-25 CRITICAL 9.8 CVE-2026-64523 In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_d… Mitigation only Fix from $2,3002026-07-25 HIGH 8.8 CVE-2026-64522 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_… No fix yet Fix from $1,9502026-07-25 HIGH 8.4 CVE-2026-64520 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PART… No fix yet Fix from $1,9502026-07-25 HIGH 8.8 CVE-2026-64516 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the a… No fix yet Fix from $1,9502026-07-25 HIGH 8.3 CVE-2026-64515 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link ele… Mitigation only Fix from $1,9502026-07-25 HIGH 7.0 CVE-2026-64510 In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails … No fix yet Fix from $1,9502026-07-25 HIGH 7.8 CVE-2026-64502 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices ad_s… No fix yet Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64501 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In ad_sigma_delt… No fix yet Fix from $1,9502026-07-25 HIGH 7.1 CVE-2026-64496 In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates the event fil… No fix yet Fix from $1,9502026-07-25 HIGH 8.4 CVE-2026-64490 In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control hand… No fix yet Fix from $1,9502026-07-25