Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Category: os Clear

ID	Title	Severity	Tags	Detected
CVE-2026-82474	Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in... Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...	High	Cwe 693 Linux Os Privilege Escalation	11 hours ago
CVE-2026-74770	Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special... Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...	High	Cwe 78 Dell Command Injection Powerprotect One	3 days ago
CVE-2022-0995 KEV	An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event... An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...	High	Linux Buffer Overflow Cwe 787 Privilege Escalation +27	4 days ago
CVE-2015-5287 KEV	The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local... The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...	High	Privilege Escalation Symlink Attack Red Hat Eol +11	4 days ago
CVE-2026-68959	SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this... SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this...	High	Path Traversal Cwe 25 Windows	4 days ago
CVE-2026-68062	SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this... SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this...	High	Path Traversal Cwe 22 Windows Remote Code Execution	4 days ago
CVE-2026-61419	Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability.... Dell ThinOS 10, versions prior to 2605_10.2518, contain an Improper Access Control vulnerability....	High	Cwe 284 Privilege Escalation Dell	5 days ago
CVE-2026-17223	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Ibm Buffer Overflow Remote Code Execution +1	2 weeks ago
CVE-2026-16987	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to...	High	Cwe 73 Ibm Privilege Escalation I	2 weeks ago
CVE-2026-16975	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 787 Buffer Overflow Remote Code Execution Ibm +1	2 weeks ago
CVE-2026-17029	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out...	High	Cwe 787 Buffer Overflow Ibm I Ibm +1	2 weeks ago
CVE-2026-16815	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...	High	Denial of Service Cwe 787 Buffer Overflow Denial Of Service +2	2 weeks ago
CVE-2026-16722	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized...	High	Cwe 269 Privilege Escalation Ibm I	2 weeks ago
CVE-2026-16674	IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary... IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary...	High	Cwe 426 Ibm Os Remote Code Execution +1	2 weeks ago
CVE-2026-44106	A privilege escalation vulnerability in the init-script for user-applications allows a low... A privilege escalation vulnerability in the init-script for user-applications allows a low...	High	Privilege Escalation Cwe 78	4 weeks ago
CVE-2026-44099	A privilege escalation vulnerability in the system configuration allows a low-privileged local... A privilege escalation vulnerability in the system configuration allows a low-privileged local...	High	Privilege Escalation Cwe 78	4 weeks ago
CVE-2026-44093	A local privilege escalation vulnerability in the init-script for user-applications allows a low... A local privilege escalation vulnerability in the init-script for user-applications allows a low...	High	Privilege Escalation Cwe 78	4 weeks ago
CVE-2026-44096	A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute... A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute...	High	Privilege Escalation Cwe 78 Linux	4 weeks ago
CVE-2026-45313	Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and... Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUI_WND_HOOK_REGISTER request without validating that the thread belongs to the...	High	C++ Cwe 284 Windows Remote Code Execution	1 month ago
CVE-2026-53853	OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns	High	Cwe 693 Cwe 863 Linux macOS +1	2 months ago
CVE-2026-50656	Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in... Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in...	High	Cwe 59 Windows Privilege Escalation Microsoft +1	2 months ago
CVE-2025-46315	A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... A permissions issue was addressed with additional restrictions. This issue is fixed in macOS...	High	Cwe 284 macOS Apple	2 months ago
CVE-2025-24284	This issue was addressed with improved checks to prevent unauthorized actions. This issue is... This issue was addressed with improved checks to prevent unauthorized actions. This issue is...	High	Cwe 693 macOS Sandbox Apple	2 months ago
CVE-2025-31272	The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app... The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...	High	Cwe 269 macOS Privilege Escalation Apple	2 months ago
CVE-2026-45207	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	3 months ago
CVE-2026-34929	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	3 months ago
CVE-2026-34930	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Trendmicro Apex One	3 months ago
CVE-2026-34928	An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to... An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...	High	Cwe 346 Privilege Escalation Os Trendmicro +1	3 months ago
CVE-2026-27648	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 787 Remote Code Execution	3 months ago
CVE-2026-25781	in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered. in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.	High	Denial of Service Cwe 787 Openharmony	3 months ago
CVE-2026-24792	in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre... in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre...	High	Cwe 364 Openharmony Remote Code Execution	3 months ago
CVE-2026-41702	VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an... VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an...	High	Cwe 367 Vmware Privilege Escalation Fusion	3 months ago
CVE-2026-6973 KEV	[KEV] Vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973) vulnerability in Ivanti endpoint-manager-mobile-epmm (CVE-2026-6973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Ivanti Endpoint Manager Mobile Epmm Cwe 20 Remote Code Execution +9	3 months ago
CVE-2026-43205	In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate... In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate...	High	Cwe 787 Linux Linux Kernel Remote Code Execution	3 months ago
CVE-2026-43196	In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double... In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double...	High	C Cwe 415 Linux Linux Kernel +1	3 months ago
CVE-2026-31782	In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad... In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad...	High	Cwe 125 Linux Linux Kernel	3 months ago
CVE-2026-31780	In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8... In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8...	High	Cwe 787 Linux Linux Kernel Buffer Overflow	3 months ago
CVE-2026-31773	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently lab... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects wh...	High	Linux Linux Kernel Bluetooth Cwe 254 +1	3 months ago
CVE-2026-31772	In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix...	High	Cwe 787 Linux Linux Kernel Buffer Overflow +1	3 months ago
CVE-2026-31431 KEV	[KEV] Vulnerability in Linux redhat (CVE-2026-31431) vulnerability in Linux redhat (CVE-2026-31431). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.	High	Cwe 669 Linux Linux Kernel Redhat +76	3 months ago
CVE-2026-6849	Improper neutralization of special elements used in an OS command ('OS command injection')... Improper neutralization of special elements used in an OS command ('OS command injection')...	High	Cwe 78 Os Command Injection	4 months ago
CVE-2026-5161	Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM... Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM...	High	Cwe 59 Pardus Os Symlink +1	4 months ago
CVE-2026-5141	Improper Privilege Management, Improper Access Control, Incorrect privilege assignment... Improper Privilege Management, Improper Access Control, Incorrect privilege assignment...	High	Cwe 266 Cwe 269 Cwe 284 Linux +1	4 months ago
CVE-2026-5140	Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM... Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM...	High	Authentication Bypass Cwe 93 Pardus Os	4 months ago
CVE-2026-7361	Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)	High	Cwe 416 Google Chrome Apple +7	4 months ago
CVE-2025-29635 KEV	[KEV] Command Injection in D-link dir-823x (CVE-2025-29635) command injection in D-link dir-823x (CVE-2025-29635). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	D Link Dir 823X Cwe 77 Command Injection +8	4 months ago
CVE-2026-39987 KEV	[KEV] Vulnerability in Marimo remote-attack (CVE-2026-39987) vulnerability in Marimo remote-attack (CVE-2026-39987). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Marimo Cwe 306 Remote Code Execution Remote Attack +6	4 months ago
CVE-2026-33825 KEV	[KEV] Vulnerability in Microsoft defender (CVE-2026-33825) vulnerability in Microsoft defender (CVE-2026-33825). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Defender Cwe 1220 Privilege Escalation +13	4 months ago
CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197) vulnerability in Apache activemq (CVE-2026-34197). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Apache Activemq Cwe 20 Cwe 94 +11	4 months ago
CVE-2025-60710 KEV	[KEV] Vulnerability in Microsoft windows (CVE-2025-60710) vulnerability in Microsoft windows (CVE-2025-60710). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Windows Cwe 59 Privilege Escalation	4 months ago

Vulnerabilities

🍪 About cookies