Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-126 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-21379	Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.	High	Cwe 126 Qualcomm Aqt1000 Firmware Aqt1000 +92	1 day ago
CVE-2026-58012	Vulnerability in dos (CVE-2026-58012) vulnerability in dos (CVE-2026-58012). Risk of unauthorized operations or information disclosure. Exploitable via ``G_REGEX_RAW``.	Medium	Denial of Service Cwe 126 Gnome Glib +2	1 week ago
CVE-2026-58013	Vulnerability in c (CVE-2026-58013) vulnerability in c (CVE-2026-58013). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 126 Gnome +3	1 week ago
CVE-2026-58010	Vulnerability in c (CVE-2026-58010) vulnerability in c (CVE-2026-58010). Risk of unauthorized operations or information disclosure.	Medium	C Denial of Service Cwe 126 Gnome +3	1 week ago
CVE-2026-41992	Vulnerability in gnu (CVE-2026-41992) vulnerability in gnu (CVE-2026-41992). Confidential information can be exposed externally.	High	Cwe 126 Gnu Gzip	1 week ago
CVE-2026-40210	Vulnerability in CVE-2026-40210 (CVE-2026-40210) vulnerability in CVE-2026-40210 (CVE-2026-40210). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126	1 week ago
CVE-2026-45460	Vulnerability in microsoft (CVE-2026-45460) vulnerability in microsoft (CVE-2026-45460). Confidential information can be exposed externally.	Medium	Cwe 126 Microsoft 365 Apps 365 Copilot +4	4 weeks ago
CVE-2026-42828	Vulnerability in microsoft (CVE-2026-42828) vulnerability in microsoft (CVE-2026-42828). Successful exploitation can lead to full system takeover.	High	Cwe 126 Microsoft Windows 10 1809 Windows 10 21H2 +8	4 weeks ago
CVE-2026-11787	Vulnerability in redhat (CVE-2026-11787) vulnerability in redhat (CVE-2026-11787). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126 Redhat Directory Server 389 Directory Server +1	4 weeks ago
CVE-2026-44185	Vulnerability in apache (CVE-2026-44185) vulnerability in apache (CVE-2026-44185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.4.68` or later.	High	Apache Cwe 126 Http Server Cwe 125	1 month ago
CVE-2025-59609	Vulnerability in qualcomm (CVE-2025-59609) vulnerability in qualcomm (CVE-2025-59609). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126 Qualcomm 5G Fixed Wireless Access Platform Firmware 5G Fixed Wireless Access Platform +370	1 month ago
CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret... A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	Cwe 1284 TLS/SSL Remote Code Execution Cwe 126	1 month ago
CVE-2026-45684	Vulnerability in go.opentelemetry.io/obi (CVE-2026-45684) vulnerability in go.opentelemetry.io/obi (CVE-2026-45684). Risk of unauthorized operations or information disclosure. Exploitable via ``writev``. Mitigation: upgrade to `0.9.0` or later.	Medium	Cwe 126 Cwe 787 Opentelemetry Ebpf Instrumentation	1 month ago
CVE-2026-6575	Vulnerability in postgresql (CVE-2026-6575) vulnerability in postgresql (CVE-2026-6575). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `18.4.0` or later.	Medium	Cwe 126 PostgreSQL	1 month ago
CVE-2026-8463	Vulnerability in leont (CVE-2026-8463) vulnerability in leont (CVE-2026-8463). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126 Cwe 191 Leont Crypt	1 month ago
CVE-2026-34336	Vulnerability in microsoft (CVE-2026-34336) vulnerability in microsoft (CVE-2026-34336). Successful exploitation can lead to full system takeover.	High	Cwe 126 Microsoft Windows 10 1607 Windows 10 1809 +12	1 month ago
CVE-2026-37532	Vulnerability in c (CVE-2026-37532) vulnerability in c (CVE-2026-37532). Risk of unauthorized operations or information disclosure.	High	C Cwe 126 Linuxfoundation Automotive Grade Linux	2 months ago
CVE-2026-6238	Vulnerability in c (CVE-2026-6238) vulnerability in c (CVE-2026-6238). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 126 Gnu Glibc	2 months ago
CVE-2026-2394	Vulnerability in rti (CVE-2026-2394) vulnerability in rti (CVE-2026-2394). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126 Cwe 125 Rti Connext Professional	3 months ago
CVE-2026-4371	Vulnerability in mozilla (CVE-2026-4371) vulnerability in mozilla (CVE-2026-4371). Confidential information can be exposed externally.	High	Cwe 126 Cwe 130 Mozilla Thunderbird	3 months ago
CVE-2026-28364	Vulnerability in c (CVE-2026-28364) vulnerability in c (CVE-2026-28364). Confidential information can be exposed externally.	High	C Remote Code Execution Insecure Deserialization Cwe 126 +2	4 months ago
CVE-2026-25646	Vulnerability in libpng (CVE-2026-25646) vulnerability in libpng (CVE-2026-25646). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.55` or later.	High	Cwe 122 Cwe 126 Cwe 125 Libpng	4 months ago
CVE-2025-60729	PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the validThemeFilePath function	Medium	Cwe 126 Perfree Perfreeblog	8 months ago
CVE-2025-32053	Vulnerability in CVE-2025-32053 (CVE-2025-32053) vulnerability in CVE-2025-32053 (CVE-2025-32053). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126	1 year ago
CVE-2025-32052	Vulnerability in CVE-2025-32052 (CVE-2025-32052) vulnerability in CVE-2025-32052 (CVE-2025-32052). Risk of unauthorized operations or information disclosure.	Medium	Cwe 126	1 year ago
CVE-2024-38250	Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability	High	Cwe 126 Microsoft Office Office Long Term Servicing Channel +14	1 year ago
CVE-2017-7679	Vulnerability in apache (CVE-2017-7679) vulnerability in apache (CVE-2017-7679). Successful exploitation can lead to full system takeover.	Critical	Apache Cwe 126 Cwe 119 Http Server	9 years ago
CVE-2017-7668	Vulnerability in apache (CVE-2017-7668) vulnerability in apache (CVE-2017-7668). Risk of unauthorized operations or information disclosure.	High	Apache Cwe 126 Cwe 125 Http Server +17	9 years ago
CVE-2009-2495	Vulnerability in c (CVE-2009-2495) vulnerability in c (CVE-2009-2495). Confidential information can be exposed externally.	Medium	C C# Cwe 200 Cwe 126 +4	16 years ago

Vulnerabilities

🍪 About cookies