Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Category: os Group: vendors Clear

ID	Title	Severity	Tags	Detected
CVE-2026-82474	Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in... Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...	High	Cwe 693 Linux Os Privilege Escalation	5 hours ago
CVE-2026-74770	Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special... Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...	High	Cwe 78 Dell Command Injection Powerprotect One	3 days ago
CVE-2022-0995 KEV	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event... An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...	High	Linux Buffer Overflow Cwe 787 Privilege Escalation +27	3 days ago
CVE-2015-5287 KEV	The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local... The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...	High	Privilege Escalation Symlink Attack Red Hat Eol +11	3 days ago
CVE-2015-3246 KEV	libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the... libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...	Medium	Linux Race Condition Privilege Escalation Denial of Service +7	3 days ago
CVE-2026-61419	Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.... Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability....	High	Cwe 284 Privilege Escalation Dell	5 days ago
CVE-2026-17223	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Ibm Buffer Overflow Remote Code Execution +1	2 weeks ago
CVE-2026-17029	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out...	High	Cwe 787 Buffer Overflow Ibm I Ibm +1	2 weeks ago
CVE-2026-16987	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to...	High	Cwe 73 Ibm Privilege Escalation I	2 weeks ago
CVE-2026-16975	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Buffer Overflow Remote Code Execution Ibm +1	2 weeks ago
CVE-2026-16722	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized...	High	Cwe 269 Privilege Escalation Ibm I	2 weeks ago
CVE-2026-16815	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...	High	Denial of Service Cwe 787 Buffer Overflow Denial Of Service +2	2 weeks ago
CVE-2026-16674	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 426 Ibm Os Remote Code Execution +1	2 weeks ago
CVE-2026-44096	A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute... A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute...	High	Privilege Escalation Cwe 78 Linux	4 weeks ago
CVE-2026-53853	OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns	High	Cwe 693 Cwe 863 Linux macOS +1	2 months ago
CVE-2026-50656	Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in... Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...	High	Cwe 59 Windows Privilege Escalation Microsoft +1	2 months ago
CVE-2025-46315	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...	High	Cwe 284 macOS Apple	2 months ago
CVE-2025-24284	This issue was addressed with improved checks to prevent unauthorized actions. This issue is... This issue was addressed with improved checks to prevent unauthorized actions. This issue is...	High	Cwe 693 macOS Sandbox Apple	2 months ago
CVE-2025-31272	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app... The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...	High	Cwe 269 macOS Privilege Escalation Apple	2 months ago
CVE-2026-41702	VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an... VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...	High	Cwe 367 Vmware Privilege Escalation Fusion	3 months ago
CVE-2024-51092	OS Command Injection in command-injection (CVE-2024-51092) OS command injection in command-injection (CVE-2024-51092). Confidential information can be exposed externally. Exploitable via ``version_netsnmp``.	Critical	PHP Cwe 78 Authentication Bypass Command Injection +12	3 months ago
CVE-2026-6973 KEV	[KEV] Vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	3 months ago
CVE-2026-43208	Vulnerability in linux (CVE-2026-43208) vulnerability in linux (CVE-2026-43208). Successful exploitation can lead to full system takeover.	Critical	Linux Os Network Remote Code Execution +12	3 months ago
CVE-2026-43205	In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate... In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate...	High	Cwe 787 Linux Linux Kernel Remote Code Execution	3 months ago
CVE-2026-43198	Vulnerability in linux (CVE-2026-43198) vulnerability in linux (CVE-2026-43198). Successful exploitation can lead to full system takeover.	Critical	Linux Tcp Race Condition Cve 2026 43198 +11	3 months ago
CVE-2026-43197	Vulnerability in linux (CVE-2026-43197) vulnerability in linux (CVE-2026-43197). Confidential information can be exposed externally.	Critical	Linux Os Remote Code Execution Cwe 125 +6	3 months ago
CVE-2026-43196	In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double... In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double...	High	C Cwe 415 Linux Linux Kernel +1	3 months ago
CVE-2026-43186	Vulnerability in c (CVE-2026-43186) vulnerability in c (CVE-2026-43186). Successful exploitation can lead to full system takeover.	Critical	C Cwe 190 Cwe 122 Linux +13	3 months ago
CVE-2026-43185	Vulnerability in linux (CVE-2026-43185) vulnerability in linux (CVE-2026-43185). Successful exploitation can lead to full system takeover.	Critical	Linux Remote Code Execution Buffer Overflow Ksmbd +11	3 months ago
CVE-2026-43125	Out-of-Bounds Write in linux (CVE-2026-43125) out-of-bounds write in linux (CVE-2026-43125). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Linux Linux Kernel Buffer Overflow +16	3 months ago
CVE-2026-43117	Vulnerability in linux (CVE-2026-43117) vulnerability in linux (CVE-2026-43117). Confidential information can be exposed externally.	Critical	Linux Linux Kernel Os Privilege Escalation +11	3 months ago
CVE-2026-43114	Vulnerability in c (CVE-2026-43114) vulnerability in c (CVE-2026-43114). Confidential information can be exposed externally.	Critical	C Linux Linux Kernel Avx2 +13	3 months ago
CVE-2026-43083	Vulnerability in linux (CVE-2026-43083) vulnerability in linux (CVE-2026-43083). Confidential information can be exposed externally.	Critical	Linux Ipv6 Buffer Overflow Cwe 19 +10	3 months ago
CVE-2026-0300 KEV	[KEV] Out-of-Bounds Write in Palo alto networks palo-alto-networks (CVE-2026-0300) out-of-bounds write in Palo alto networks palo-alto-networks (CVE-2026-0300). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Critical	Palo Alto Networks Pan Os Cwe 787 Firewall +67	3 months ago
CVE-2026-43071	Vulnerability in c (CVE-2026-43071) vulnerability in c (CVE-2026-43071). Confidential information can be exposed externally.	Critical	C Linux Kernel Os +12	3 months ago
CVE-2026-43067	Vulnerability in linux (CVE-2026-43067) vulnerability in linux (CVE-2026-43067). Successful exploitation can lead to full system takeover.	Critical	Linux Ext4 Cwe 122 Cwe 22 +13	3 months ago
CVE-2026-43039	Vulnerability in linux (CVE-2026-43039) vulnerability in linux (CVE-2026-43039). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Vulnerability Heap Leakage +9	3 months ago
CVE-2026-43038	Vulnerability in linux (CVE-2026-43038) vulnerability in linux (CVE-2026-43038). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Ipv6 Icmp +9	3 months ago
CVE-2026-31780	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8... In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8...	High	Cwe 787 Linux Linux Kernel Buffer Overflow	3 months ago
CVE-2026-31782	In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad... In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad...	High	Cwe 125 Linux Linux Kernel	3 months ago
CVE-2026-31772	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix...	High	Cwe 787 Linux Linux Kernel Buffer Overflow +1	3 months ago
CVE-2026-31773	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently lab... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects wh...	High	Linux Linux Kernel Bluetooth Cwe 254 +1	3 months ago
CVE-2026-31431 KEV	[KEV] Vulnerability in Linux redhat (CVE-2026-31431) vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 669 Linux Linux Kernel Redhat +76	3 months ago
CVE-2026-5141	Improper Privilege Management, Improper Access Control, Incorrect privilege assignment... Improper Privilege Management, Improper Access Control, Incorrect privilege assignment...	High	Cwe 266 Cwe 269 Cwe 284 Linux +1	4 months ago
CVE-2026-7361	Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)	High	Cwe 416 Google Chrome Apple +7	4 months ago
CVE-2026-32202 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2026-32202) vulnerability in Microsoft windows (CVE-2026-32202). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Medium	Microsoft Windows Cwe 693 Spoofing +20	4 months ago
CVE-2025-29635 KEV	[KEV] Command Injection in D-link dir-823x (CVE-2025-29635) command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 823X Cwe 77 Command Injection +8	4 months ago
CVE-2026-39987 KEV	[KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987) vulnerability in Marimo remote-attack (CVE-2026-39987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Marimo Cwe 306 Remote Code Execution Remote Attack +6	4 months ago
CVE-2026-33825 KEV	[KEV] Vulnerability in Microsoft defender (CVE-2026-33825) vulnerability in Microsoft defender (CVE-2026-33825). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Defender Cwe 1220 Privilege Escalation +13	4 months ago
CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197) vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 20 Cwe 94 +11	4 months ago

Vulnerabilities

🍪 About cookies