Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Category: os Clear

ID	Title	Severity	Tags	Detected
CVE-2026-53853	OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns	High	Cwe 693 Cwe 863 Linux macOS +1	3 weeks ago
CVE-2026-50656	Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in... Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...	High	Cwe 59 Windows Privilege Escalation Microsoft +1	3 weeks ago
CVE-2025-46315	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...	High	Cwe 284 macOS Apple	3 weeks ago
CVE-2025-31272	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app... The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...	High	Cwe 269 macOS Privilege Escalation Apple	3 weeks ago
CVE-2025-24284	This issue was addressed with improved checks to prevent unauthorized actions. This issue is... This issue was addressed with improved checks to prevent unauthorized actions. This issue is...	High	Cwe 693 macOS Sandbox Apple	3 weeks ago
CVE-2026-45207	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-34930	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-34929	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation	1 month ago
CVE-2026-34928	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Os	1 month ago
CVE-2026-27648	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 787 Remote Code Execution	1 month ago
CVE-2026-25781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.	High	Denial of Service Cwe 787 Openharmony	1 month ago
CVE-2026-24792	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 364 Openharmony Remote Code Execution	1 month ago
CVE-2026-41702	VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an... VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...	High	Cwe 367 Vmware Privilege Escalation Fusion	1 month ago
CVE-2026-44497	Vulnerability in zfnd (CVE-2026-44497) vulnerability in zfnd (CVE-2026-44497). Data can be tampered with by attackers. Exploitable via ``zcashd``. Mitigation: upgrade to `4.4.0` or later.	Critical	Rust Cwe 347 Zfnd Zebra Script +6	2 months ago
CVE-2024-51092	OS Command Injection in command-injection (CVE-2024-51092) OS command injection in command-injection (CVE-2024-51092). Confidential information can be exposed externally. Exploitable via ``version_netsnmp``.	Critical	PHP Cwe 78 Authentication Bypass Command Injection +12	2 months ago
CVE-2026-43944	Vulnerability in electerm (CVE-2026-43944) vulnerability in electerm (CVE-2026-43944). Successful exploitation can lead to full system takeover. Exploitable via ``opts``. Mitigation: upgrade to `> 3.8.8` or later.	Critical	Cwe 20 Cwe 94 Cwe 829 Electerm Project +13	2 months ago
CVE-2026-6973 KEV	[KEV] Vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	2 months ago
CVE-2026-43208	Vulnerability in linux (CVE-2026-43208) vulnerability in linux (CVE-2026-43208). Successful exploitation can lead to full system takeover.	Critical	Linux Os Network Remote Code Execution +12	2 months ago
CVE-2026-43205	In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate... In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate...	High	Cwe 787 Linux Linux Kernel Remote Code Execution	2 months ago
CVE-2026-43196	In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double... In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double...	High	C Cwe 415 Linux Linux Kernel +1	2 months ago
CVE-2026-43198	Vulnerability in linux (CVE-2026-43198) vulnerability in linux (CVE-2026-43198). Successful exploitation can lead to full system takeover.	Critical	Linux Tcp Race Condition Cve 2026 43198 +11	2 months ago
CVE-2026-43197	Vulnerability in linux (CVE-2026-43197) vulnerability in linux (CVE-2026-43197). Confidential information can be exposed externally.	Critical	Linux Os Remote Code Execution Cwe 125 +6	2 months ago
CVE-2026-43186	Vulnerability in c (CVE-2026-43186) vulnerability in c (CVE-2026-43186). Successful exploitation can lead to full system takeover.	Critical	C Cwe 190 Cwe 122 Linux +13	2 months ago
CVE-2026-43185	Vulnerability in linux (CVE-2026-43185) vulnerability in linux (CVE-2026-43185). Successful exploitation can lead to full system takeover.	Critical	Linux Remote Code Execution Buffer Overflow Ksmbd +11	2 months ago
CVE-2026-43125	Out-of-Bounds Write in linux (CVE-2026-43125) out-of-bounds write in linux (CVE-2026-43125). Successful exploitation can lead to full system takeover.	Critical	Cwe 787 Linux Linux Kernel Buffer Overflow +16	2 months ago
CVE-2026-43117	Vulnerability in linux (CVE-2026-43117) vulnerability in linux (CVE-2026-43117). Confidential information can be exposed externally.	Critical	Linux Linux Kernel Os Privilege Escalation +11	2 months ago
CVE-2026-43114	Vulnerability in c (CVE-2026-43114) vulnerability in c (CVE-2026-43114). Confidential information can be exposed externally.	Critical	C Linux Linux Kernel Avx2 +13	2 months ago
CVE-2026-43083	Vulnerability in linux (CVE-2026-43083) vulnerability in linux (CVE-2026-43083). Confidential information can be exposed externally.	Critical	Linux Ipv6 Buffer Overflow Cwe 19 +10	2 months ago
CVE-2026-0300 KEV	[KEV] Out-of-Bounds Write in Palo alto networks palo-alto-networks (CVE-2026-0300) out-of-bounds write in Palo alto networks palo-alto-networks (CVE-2026-0300). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Critical	Palo Alto Networks Pan Os Cwe 787 Firewall +67	2 months ago
CVE-2026-43071	Vulnerability in c (CVE-2026-43071) vulnerability in c (CVE-2026-43071). Confidential information can be exposed externally.	Critical	C Linux Kernel Os +12	2 months ago
CVE-2026-43067	Vulnerability in linux (CVE-2026-43067) vulnerability in linux (CVE-2026-43067). Successful exploitation can lead to full system takeover.	Critical	Linux Ext4 Cwe 122 Cwe 22 +13	2 months ago
CVE-2026-43039	Vulnerability in linux (CVE-2026-43039) vulnerability in linux (CVE-2026-43039). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Vulnerability Heap Leakage +9	2 months ago
CVE-2026-43038	Vulnerability in linux (CVE-2026-43038) vulnerability in linux (CVE-2026-43038). Successful exploitation can lead to full system takeover.	Critical	Linux Linux Kernel Ipv6 Icmp +9	2 months ago
CVE-2026-31780	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8... In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8...	High	Cwe 787 Linux Linux Kernel Buffer Overflow	2 months ago
CVE-2026-31782	In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad... In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad...	High	Cwe 125 Linux Linux Kernel	2 months ago
CVE-2026-31773	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently lab... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects wh...	High	Linux Linux Kernel Bluetooth Cwe 254 +1	2 months ago
CVE-2026-31772	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix...	High	Cwe 787 Linux Linux Kernel Buffer Overflow +1	2 months ago
CVE-2026-31431 KEV	[KEV] Vulnerability in Linux redhat (CVE-2026-31431) vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 669 Linux Linux Kernel Redhat +76	2 months ago
CVE-2026-6849	Improper neutralization of special elements used in an OS command ('OS command injection')... Improper neutralization of special elements used in an OS command ('OS command injection')...	High	Cwe 78 Os Command Injection	2 months ago
CVE-2026-5161	Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM... Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM...	High	Cwe 59 Pardus Os Symlink +1	2 months ago
CVE-2026-5141	Improper Privilege Management, Improper Access Control, Incorrect privilege assignment... Improper Privilege Management, Improper Access Control, Incorrect privilege assignment...	High	Cwe 266 Cwe 269 Cwe 284 Linux +1	2 months ago
CVE-2026-5140	Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM... Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM...	High	Authentication Bypass Cwe 93 Pardus Os	2 months ago
CVE-2026-32202 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2026-32202) vulnerability in Microsoft windows (CVE-2026-32202). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	Medium	Microsoft Windows Cwe 693 Spoofing +20	2 months ago
CVE-2025-29635 KEV	[KEV] Command Injection in D-link dir-823x (CVE-2025-29635) command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 823X Cwe 77 Command Injection +8	2 months ago
CVE-2026-39987 KEV	[KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987) vulnerability in Marimo remote-attack (CVE-2026-39987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Marimo Cwe 306 Remote Code Execution Remote Attack +6	2 months ago
CVE-2026-33825 KEV	[KEV] Vulnerability in Microsoft defender (CVE-2026-33825) vulnerability in Microsoft defender (CVE-2026-33825). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Defender Cwe 1220 Privilege Escalation +12	2 months ago
CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197) vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 20 Cwe 94 +11	2 months ago
CVE-2025-60710 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2025-60710) vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59 Privilege Escalation	2 months ago
CVE-2023-36424 KEV	[KEV] Out-of-Bounds Read in Microsoft windows (CVE-2023-36424) vulnerability in Microsoft windows (CVE-2023-36424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 125 Buffer Overflow +5	2 months ago
CVE-2026-23862	Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local... Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.	High	Cwe 77 Dell Thinos Command Injection +1	3 months ago

Vulnerabilities

🍪 About cookies