Vulnerability Intelligence · All CVEs
Every Published CVE, Searchable.
Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status.
Synced hourly · figures as of Oct 19, 2026
392,110 vulnerabilities · newest first
- CVE-2026-98453UnscoredLinux kernel: smb: client: close handle after create-context parsing failurePublished Oct 18, 2026
- CVE-2026-98452UnscoredLinux kernel: smb: client: clean up failed cached directory opensPublished Oct 18, 2026
- CVE-2026-98451UnscoredLinux kernel: smb: client: use finish_no_open() for non-regular inodesPublished Oct 18, 2026
- CVE-2026-98450UnscoredLinux kernel: smb: client: close completed creates on compound wait errorsPublished Oct 18, 2026
- CVE-2026-98449UnscoredLinux kernel: smb: client: delete compound mids on send failure before unlockPublished Oct 18, 2026
- CVE-2026-98448UnscoredLinux kernel: xfs: release orphanage dir inode if chown failsPublished Oct 18, 2026
- CVE-2026-98447UnscoredLinux kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree rootsPublished Oct 18, 2026
- CVE-2026-98446UnscoredLinux kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_initPublished Oct 18, 2026
- CVE-2026-98445UnscoredLinux kernel: xfs: don't let memory failures leak blocks and kill repairsPublished Oct 18, 2026
- CVE-2026-98444UnscoredLinux kernel: xfs: drop dquot flush lock when we can't find a buffer to flushPublished Oct 18, 2026
- CVE-2026-98443UnscoredLinux kernel: xfs: fix cursor and pointer handling when recovering iunlink bucketsPublished Oct 18, 2026
- CVE-2026-98442UnscoredLinux kernel: net/sched: act_ct: fix helper UAF due to extensions reallocPublished Oct 18, 2026
- CVE-2026-98441UnscoredLinux kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entryPublished Oct 18, 2026
- CVE-2026-98440UnscoredLinux kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destructionPublished Oct 18, 2026
- CVE-2026-98439UnscoredLinux kernel: smb/server: cancel async requests when closing connectionPublished Oct 18, 2026
- CVE-2026-98438UnscoredLinux kernel: mptcp: options: fix uninit-value in mptcp_write_data_finPublished Oct 18, 2026
- CVE-2026-98437UnscoredLinux kernel: media: qcom: iris: fix runtime PM reference leaksPublished Oct 18, 2026
- CVE-2026-98436UnscoredLinux kernel: accel/amdxdna: Disable device buffer exportingPublished Oct 18, 2026
- CVE-2026-98435UnscoredLinux kernel: EDAC/altera: Use parent device for devres in altr_portb_setup()Published Oct 18, 2026
- CVE-2026-98434UnscoredLinux kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmaxPublished Oct 18, 2026
- CVE-2026-98433UnscoredLinux kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failurePublished Oct 18, 2026
- CVE-2026-111991Medium 5.3A security vulnerability has been detected in WongKinYiu yolov9 0.1.Published Oct 18, 2026
- CVE-2026-111990Medium 6.9A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1.Published Oct 18, 2026
- CVE-2026-111988Medium 5.3Affected by this issue is some unknown functionality of the component OAuth Callback Handler.Published Oct 18, 2026
- CVE-2026-110024Medium 6.8In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured defaults with the per-call options instead of merging them, so passing any per-call…Published Oct 18, 2026
- CVE-2026-111987Medium 5.3Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card…Published Oct 18, 2026
- CVE-2026-112063Medium 6.0libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt.Published Oct 18, 2026
- CVE-2026-112062Medium 6.0lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names.Published Oct 18, 2026
- CVE-2026-112061Medium 5.3librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain.Published Oct 18, 2026
- CVE-2026-112060Medium 6.1librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures.Published Oct 18, 2026
- CVE-2026-112059Medium 6.9libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer.Published Oct 18, 2026
- CVE-2026-112058Medium 6.8VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert.Published Oct 18, 2026
- CVE-2026-112057Medium 6.8libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value.Published Oct 18, 2026
- CVE-2026-112056Medium 6.8wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets.Published Oct 18, 2026
- CVE-2026-112055Medium 6.8wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count.Published Oct 18, 2026
- CVE-2026-112054Medium 6.8Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream.Published Oct 18, 2026
- CVE-2026-112053Medium 6.8Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values.Published Oct 18, 2026
- CVE-2026-112052Medium 6.9libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads.Published Oct 18, 2026
- CVE-2026-112051High 8.3Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name.Published Oct 18, 2026
- CVE-2026-112050Low 2.3Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation.Published Oct 18, 2026
- CVE-2026-112049Medium 6.7Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via crafted .vpk archives.Published Oct 18, 2026
- CVE-2026-112048Medium 6.9libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs.Published Oct 18, 2026
- CVE-2026-112047Medium 5.3OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by exploiting project-wide permission checks.Published Oct 18, 2026
- CVE-2026-112046Medium 6.8OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB.Published Oct 18, 2026
- CVE-2026-111986Medium 5.3A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.Published Oct 18, 2026
- CVE-2026-78497UnscoredJQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval.Published Oct 18, 2026
- CVE-2026-112021High 8.7snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape.Published Oct 18, 2026
- CVE-2026-112020Medium 6.9LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data.Published Oct 18, 2026
- CVE-2026-112019Medium 6.9cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride.Published Oct 18, 2026
- CVE-2026-112018High 7.3cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer via unchecked sparse accessor indices.Published Oct 18, 2026
| CVE | Title | Severity | Published |
|---|---|---|---|
| CVE-2026-98453 | Linux kernel: smb: client: close handle after create-context parsing failure | Unscored | |
| CVE-2026-98452 | Linux kernel: smb: client: clean up failed cached directory opens | Unscored | |
| CVE-2026-98451 | Linux kernel: smb: client: use finish_no_open() for non-regular inodes | Unscored | |
| CVE-2026-98450 | Linux kernel: smb: client: close completed creates on compound wait errors | Unscored | |
| CVE-2026-98449 | Linux kernel: smb: client: delete compound mids on send failure before unlock | Unscored | |
| CVE-2026-98448 | Linux kernel: xfs: release orphanage dir inode if chown fails | Unscored | |
| CVE-2026-98447 | Linux kernel: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots | Unscored | |
| CVE-2026-98446 | Linux kernel: xfs: don't let hidden_space go negative in xfs_metafile_resv_init | Unscored | |
| CVE-2026-98445 | Linux kernel: xfs: don't let memory failures leak blocks and kill repairs | Unscored | |
| CVE-2026-98444 | Linux kernel: xfs: drop dquot flush lock when we can't find a buffer to flush | Unscored | |
| CVE-2026-98443 | Linux kernel: xfs: fix cursor and pointer handling when recovering iunlink buckets | Unscored | |
| CVE-2026-98442 | Linux kernel: net/sched: act_ct: fix helper UAF due to extensions realloc | Unscored | |
| CVE-2026-98441 | Linux kernel: net/sched: act_ct: avoid modifying shared unconfirmed ct entry | Unscored | |
| CVE-2026-98440 | Linux kernel: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction | Unscored | |
| CVE-2026-98439 | Linux kernel: smb/server: cancel async requests when closing connection | Unscored | |
| CVE-2026-98438 | Linux kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin | Unscored | |
| CVE-2026-98437 | Linux kernel: media: qcom: iris: fix runtime PM reference leaks | Unscored | |
| CVE-2026-98436 | Linux kernel: accel/amdxdna: Disable device buffer exporting | Unscored | |
| CVE-2026-98435 | Linux kernel: EDAC/altera: Use parent device for devres in altr_portb_setup() | Unscored | |
| CVE-2026-98434 | Linux kernel: sysctl: Check range in proc_dointvec_ms_jiffies_minmax | Unscored | |
| CVE-2026-98433 | Linux kernel: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure | Unscored | |
| CVE-2026-111991 | A security vulnerability has been detected in WongKinYiu yolov9 0.1. | Medium 5.3 | |
| CVE-2026-111990 | A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. | Medium 6.9 | |
| CVE-2026-111988 | Affected by this issue is some unknown functionality of the component OAuth Callback Handler. | Medium 5.3 | |
| CVE-2026-110024 | In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured defaults with the per-call options instead of merging them, so passing any per-call… | Medium 6.8 | |
| CVE-2026-111987 | Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card… | Medium 5.3 | |
| CVE-2026-112063 | libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. | Medium 6.0 | |
| CVE-2026-112062 | lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. | Medium 6.0 | |
| CVE-2026-112061 | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. | Medium 5.3 | |
| CVE-2026-112060 | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. | Medium 6.1 | |
| CVE-2026-112059 | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. | Medium 6.9 | |
| CVE-2026-112058 | VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. | Medium 6.8 | |
| CVE-2026-112057 | libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying an oversized vts_ttn value. | Medium 6.8 | |
| CVE-2026-112056 | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. | Medium 6.8 | |
| CVE-2026-112055 | wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. | Medium 6.8 | |
| CVE-2026-112054 | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count in a Dirac stream. | Medium 6.8 | |
| CVE-2026-112053 | Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. | Medium 6.8 | |
| CVE-2026-112052 | libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. | Medium 6.9 | |
| CVE-2026-112051 | Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences in model_name. | High 8.3 | |
| CVE-2026-112050 | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. | Low 2.3 | |
| CVE-2026-112049 | Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via crafted .vpk archives. | Medium 6.7 | |
| CVE-2026-112048 | libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. | Medium 6.9 | |
| CVE-2026-112047 | OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by exploiting project-wide permission checks. | Medium 5.3 | |
| CVE-2026-112046 | OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. | Medium 6.8 | |
| CVE-2026-111986 | A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. | Medium 5.3 | |
| CVE-2026-78497 | JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. | Unscored | |
| CVE-2026-112021 | snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. | High 8.7 | |
| CVE-2026-112020 | LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT data. | Medium 6.9 | |
| CVE-2026-112019 | cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. | Medium 6.9 | |
| CVE-2026-112018 | cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer via unchecked sparse accessor indices. | High 7.3 |
Showing 801–850 of 392,110. Narrow the filters to see the rest.
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status. Filter by severity and year here; the other filters work on the curated lists.