All CVEs, page 12
1724 CVEs, sorted by threat level then EPSS. Showing 1321-1440. Use search to combine filters.
HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-31700CVE-2025-31700: A vulnerability has been found in Dahua products. Attackers could exploit a buffer overfl…
Unknown · · EPSS 0.91% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-48842CVE-2026-48842: Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL in…
Unknown · · EPSS 0.89% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-34441CVE-2025-34441: AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated…
wwbn · avideo · EPSS 0.85% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-34442CVE-2025-34442: AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API e…
wwbn · avideo · EPSS 0.85% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2025-62518CVE-2025-62518: astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astr…
Unknown · · EPSS 0.70% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-42588CVE-2026-42588: Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulne…
apache · activemq · EPSS 0.66% · Threat 45HIGH 8.1
Public PoCATT&CK inferred
CVE-2026-1529CVE-2026-1529: A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the …
Unknown · · EPSS 0.49% · Threat 45HIGH 7.5
Exploit-DBATT&CK inferred
CVE-2026-25961CVE-2026-25961: SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's upda…
sumatrapdfreader · sumatrapdf · EPSS 0.48% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-9830CVE-2026-9830: The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly …
Unknown · · EPSS 0.43% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-23745CVE-2026-23745: node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkp…
isaacs · tar · EPSS 0.38% · Threat 45HIGH 7.6
Exploit-DBATT&CK inferred
CVE-2025-65027CVE-2025-65027: RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections wi…
romm.app · romm · EPSS 0.33% · Threat 45HIGH 8.2
Public PoCATT&CK inferred
CVE-2026-31802CVE-2026-31802: node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tri…
isaacs · tar · EPSS 0.19% · Threat 45MEDIUM 6.9
Exploit-DBATT&CK inferred
CVE-2025-27533CVE-2025-27533: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unma…
apache · activemq · EPSS 8.96% · Threat 44HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-32711CVE-2025-32711: Ai command injection in M365 Copilot allows an unauthorized attacker to disclose informati…
microsoft · 365 copilot · EPSS 8.03% · Threat 44HIGH 7.5
Public PoCATT&CK inferred
CVE-2024-9935CVE-2024-9935: The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to P…
Unknown · · EPSS 7.49% · Threat 44MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2026-105133Ahsay AhsayCBS Improper Authentication Vulnerability
Ahsay · AhsayCBS · EPSS 5.79% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-24294CVE-2026-24294: Improper authentication in Windows SMB Server allows an authorized attacker to elevate pri…
microsoft · windows 10 1607 · EPSS 4.85% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46242CVE-2026-46242: In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix ep_rem…
linux · linux kernel · EPSS 4.39% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-33896CVE-2024-33896: Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vu…
hms-networks · ewon cosy\+ firmware · EPSS 4.02% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21420CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
microsoft · windows 10 1507 · EPSS 3.67% · Threat 44HIGH 7.7
Public PoCATT&CK inferred
CVE-2026-25243CVE-2026-25243: Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the R…
redis · redis · EPSS 3.66% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-0566CVE-2024-0566: The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a p…
storeapps · smart manager · EPSS 3.30% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-24291CVE-2026-24291: Incorrect permission assignment for critical resource in Windows Accessibility Infrastruct…
microsoft · windows 10 1607 · EPSS 3.30% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-22241CVE-2026-22241: The Open eClass platform (formerly known as GUnet eClass) is a complete course management …
openeclass · openeclass · EPSS 3.26% · Threat 44HIGH 7.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-24076CVE-2025-24076: Improper access control in Windows Cross Device Service allows an authorized attacker to e…
microsoft · windows 11 22h2 · EPSS 3.21% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2023-1211CVE-2023-1211: SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.
phpipam · phpipam · EPSS 3.05% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-1550CVE-2025-1550: The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=…
keras · keras · EPSS 2.63% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-48868CVE-2025-48868: Horilla is a free and open source Human Resource Management System (HRMS). An authenticate…
horilla · horilla · EPSS 2.47% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-54100CVE-2025-54100: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows 10 1607 · EPSS 2.23% · Threat 44HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-55889CVE-2024-55889: phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability e…
phpmyfaq · phpmyfaq · EPSS 2.19% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2017-7184CVE-2017-7184: The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.…
linux · linux kernel · EPSS 1.80% · Threat 44HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-35317CVE-2023-35317: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
microsoft · windows server 2012 · EPSS 1.76% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-55912CVE-2025-55912: An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exp…
oxygenz · clipbucket · EPSS 1.53% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2026-21244CVE-2026-21244: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute cod…
microsoft · windows 10 1607 · EPSS 1.33% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2026-21248CVE-2026-21248: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute cod…
microsoft · windows 10 1607 · EPSS 1.33% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-45542CVE-2025-45542: SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project…
vishalmathur · cloudclassroom-php project · EPSS 1.09% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2025-48593CVE-2025-48593: In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code executi…
google · android · EPSS 0.87% · Threat 44HIGH 8.8
ATT&CK inferred
CVE-2022-51022CVE-2022-51022: YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path trav…
Unknown · · EPSS 0.79% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2026-62911CVE-2026-62911: Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized …
microsoft · exchange server · EPSS 0.69% · Threat 44HIGH 7.3
Exploit-DBATT&CK inferred
CVE-2025-14018CVE-2025-14018: Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura a…
Unknown · · EPSS 0.45% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2026-27912CVE-2026-27912: Improper authorization in Windows Kerberos allows an authorized attacker to elevate privil…
microsoft · windows server 2012 · EPSS 0.43% · Threat 44HIGH 8
Public PoCATT&CK inferred
CVE-2025-9974CVE-2025-9974: The unified WEBUI application of the ONT/Beacon device contains an input handling flaw tha…
Unknown · · EPSS 0.42% · Threat 44MEDIUM 5.3
Public PoCATT&CK inferred
CVE-2025-31486CVE-2025-31486: Vite is a frontend tooling framework for javascript. The contents of arbitrary files can b…
Unknown · · EPSS 40.46% · Threat 43MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-55177Meta Platforms WhatsApp Incorrect Authorization Vulnerability
Meta Platforms · WhatsApp · EPSS 4.73% · Threat 43HIGH 7.5
Public PoCATT&CK inferred
CVE-2026-49975CVE-2026-49975: Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http…
apache · http server · EPSS 4.17% · Threat 43MEDIUM 5.4
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-27915Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · EPSS 4.06% · Threat 43HIGH 7.6
Public PoCATT&CK inferred
CVE-2024-3661CVE-2024-3661: DHCP can add routes to a client’s routing table via the classless static route option (121…
fortinet · forticlient · EPSS 4.06% · Threat 43HIGH 7.5
Public PoCATT&CK inferred
CVE-2025-8671CVE-2025-8671: A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specificati…
Unknown · · EPSS 3.62% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2024-57487CVE-2024-57487: In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate f…
code-projects · online car rental system · EPSS 2.46% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2026-34472CVE-2026-34472: Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_…
zte · zxhn h188a firmware · EPSS 2.27% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2025-24991Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Microsoft · Windows · EPSS 2.02% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2025-2292CVE-2025-2292: Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrar…
xorcom · completepbx · EPSS 1.79% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2025-57642CVE-2025-57642: A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload…
sohamjuhin · tourism management system · EPSS 1.59% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2025-49136CVE-2025-49136: listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in ve…
nadh · listmonk · EPSS 1.58% · Threat 43HIGH 7.7
Public PoCATT&CK inferred
CVE-2026-23479CVE-2026-23479: Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the un…
redis · redis · EPSS 1.51% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2026-54646CVE-2026-54646: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/maintenance.inde…
Unknown · · EPSS 1.45% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2026-54647CVE-2026-54647: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/settings.index.i…
Unknown · · EPSS 1.45% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-39964Linux Kernel Race Condition Vulnerability
Linux · Kernel · EPSS 1.36% · Threat 43HIGH 7.7
Public PoCATT&CK inferred
CVE-2025-54794CVE-2025-54794: Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw u…
anthropic · claude code · EPSS 1.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-48799CVE-2025-48799: Improper link resolution before file access ('link following') in Windows Update Service a…
microsoft · windows 10 1607 · EPSS 1.26% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-41357CVE-2024-41357: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edi…
phpipam · phpipam · EPSS 1.12% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-13946CVE-2024-13946: DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the …
Unknown · · EPSS 1.09% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2026-53959CVE-2026-53959: 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards al…
Unknown · · EPSS 1.03% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-40176CVE-2026-40176: Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.…
getcomposer · composer · EPSS 1.00% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2026-49069CVE-2026-49069: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne…
Unknown · · EPSS 0.93% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21756CVE-2025-21756: In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the bindi…
linux · linux kernel · EPSS 0.89% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-37899CVE-2025-37899: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-…
linux · linux kernel · EPSS 0.88% · Threat 43HIGH 7.2
Exploit-DBATT&CK inferred
CVE-2024-48844CVE-2024-48844: Denial of Service vulnerabilities where found providing a potiential for device service di…
abb · aspect-ent-2 firmware · EPSS 0.87% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVCTID-mapped
CVE-2024-50302Linux Kernel Use of Uninitialized Resource Vulnerability
Linux · Kernel · EPSS 0.81% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43499CVE-2026-43499: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::…
linux · linux kernel · EPSS 0.79% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-31317CVE-2024-31317: In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execu…
google · android · EPSS 0.78% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-50168CVE-2025-50168: Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP al…
microsoft · windows 11 22h2 · EPSS 0.78% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-14266CVE-2026-14266: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. Thi…
7-zip · 7-zip · EPSS 0.74% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-37947CVE-2025-37947: In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of…
linux · linux kernel · EPSS 0.65% · Threat 43HIGH 7.1
Exploit-DBATT&CK inferred
CVE-2024-48846CVE-2024-48846: Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing…
abb · aspect-ent-2 firmware · EPSS 0.64% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-32428CVE-2023-32428: This issue was addressed with improved file handling. This issue is fixed in macOS Ventura…
apple · ipados · EPSS 0.63% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-21692CVE-2025-21692: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets q…
linux · linux kernel · EPSS 0.62% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46331CVE-2026-46331: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit …
linux · linux kernel · EPSS 0.58% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-23111CVE-2026-23111: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables:…
linux · linux kernel · EPSS 0.52% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64560CVE-2026-64560: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Pre…
Unknown · · EPSS 0.50% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-4275CVE-2025-4275: A vulnerability in the digital signature verification process does not properly validate v…
Unknown · · EPSS 0.48% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64600CVE-2026-64600: In the Linux kernel, the following vulnerability has been resolved: xfs: resample the dat…
linux · linux kernel · EPSS 0.47% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-43520Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple · Multiple Products · EPSS 0.43% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-85884CVE-2026-85884: Missing authentication for critical function in Windows Health and Optimized Experiences S…
Unknown · · EPSS 0.39% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-26128CVE-2026-26128: Improper authentication in Windows SMB Server allows an authorized attacker to elevate pri…
microsoft · windows 10 1607 · EPSS 0.39% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-64531CVE-2026-64531: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: rej…
Unknown · · EPSS 0.38% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-68921CVE-2025-68921: SteelSeries Nahimic 3 1.10.7 allows Directory traversal.
steelseries · nahimic · EPSS 0.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-81000CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound recei…
Unknown · · EPSS 0.36% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2023-20938CVE-2023-20938: In binder_transaction_buffer_release of binder.c, there is a possible use after free due t…
google · android · EPSS 0.34% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-64512CVE-2025-64512: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extractin…
pdfminer · pdfminer.six · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-40369CVE-2026-40369: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate priv…
microsoft · windows 11 24h2 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-42980CVE-2026-42980: Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attack…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-62735CVE-2026-62735: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate pr…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-0670CVE-2024-0670: Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.…
checkmk · checkmk · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-49176CVE-2026-49176: Improper privilege management in Windows WalletService allows an authorized attacker to el…
microsoft · windows 10 1607 · EPSS 0.33% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-58635CVE-2026-58635: Improper neutralization of special elements used in a command ('command injection') in Win…
microsoft · windows 10 1809 · EPSS 0.32% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-49882CVE-2024-49882: In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brel…
debian · debian linux · EPSS 0.32% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-50343CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker t…
microsoft · windows 10 1809 · EPSS 0.30% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-66804CVE-2026-66804: Improper access control in Windows Cross Device Service allows an authorized attacker to e…
microsoft · windows 10 22h2 · EPSS 0.30% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68121CVE-2026-68121: In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header …
Unknown · · EPSS 0.30% · Threat 43MEDIUM 5.5
Exploited in the wild · CISA KEVATT&CK inferred
CVE-2025-48633Android Framework Information Disclosure Vulnerability
Android · Framework · EPSS 0.26% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2022-20474CVE-2022-20474: In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the Sy…
google · android · EPSS 0.25% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2025-50505CVE-2025-50505: Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(cla…
Unknown · · EPSS 0.23% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68138CVE-2026-68138: In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize …
Unknown · · EPSS 0.22% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-28372CVE-2026-28372: telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by …
gnu · inetutils · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-42978CVE-2026-42978: Concurrent execution using shared resource with improper synchronization ('race condition'…
microsoft · windows 10 1809 · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-96889CVE-2026-96889: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusi…
Unknown · · EPSS 0.20% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-68398CVE-2026-68398: In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel fr…
Unknown · · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43494CVE-2026-43494: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nen…
linux · linux kernel · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-84568CVE-2026-84568: A path traversal issue was addressed with improved path validation. This issue is fixed in…
apple · macos · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-45250CVE-2026-45250: The setcred(2) system call is only available to privileged users. However, before the pri…
freebsd · freebsd · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-18220CVE-2026-18220: An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/e…
Unknown · · EPSS 0.19% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-31694CVE-2026-31694: In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversize…
linux · linux kernel · EPSS 0.18% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2024-34740CVE-2024-34740: In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a poss…
google · android · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-46215CVE-2026-46215: In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle t…
linux · linux kernel · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-80521CVE-2026-80521: In the Linux kernel, the following vulnerability has been resolved: af_unix: Unlink scc_e…
Unknown · · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-57239CVE-2026-57239: The user-controllable executable files will be directly executed by high-privilege process…
foxit · pdf editor · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43724CVE-2026-43724: The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.…
apple · ipados · EPSS 0.17% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-3609CVE-2026-3609: Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7…
wellbia · xigncode3 · EPSS 0.16% · Threat 43HIGH 7.8
Public PoCATT&CK inferred
CVE-2026-43786