Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-190 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-59879	Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an i... Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, List#set, List#setSize, List#setIn, List#updateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 30 to 2 31 in setListBounds in src/List.js, causing an empty List...		JavaScript Cwe 190 Cwe 400 Cwe 835 +1	35 minutes ago
CVE-2026-53482	Vulnerability in dos (CVE-2026-53482) vulnerability in dos (CVE-2026-53482). Risk of unauthorized operations or information disclosure.	High	Denial of Service Cwe 190	2 hours ago
CVE-2026-58470	Vulnerability in c (CVE-2026-58470) vulnerability in c (CVE-2026-58470). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 190	20 hours ago
CVE-2026-58472	Vulnerability in c (CVE-2026-58472) vulnerability in c (CVE-2026-58472). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 190	20 hours ago
CVE-2026-58384	Vulnerability in dos (CVE-2026-58384) vulnerability in dos (CVE-2026-58384). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 190	1 day ago
CVE-2026-59089	Vulnerability in dos (CVE-2026-59089) vulnerability in dos (CVE-2026-59089). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 190	1 day ago
CVE-2026-53763	Vulnerability in trustedfirmware (CVE-2026-53763) vulnerability in trustedfirmware (CVE-2026-53763). Risk of unauthorized operations or information disclosure.	Low	Cwe 190 Trustedfirmware Op Tee	1 day ago
CVE-2026-14787	Vulnerability in CVE-2026-14787 (CVE-2026-14787) vulnerability in CVE-2026-14787 (CVE-2026-14787). Risk of unauthorized operations or information disclosure.	Low	Cwe 189 Cwe 190	2 days ago
CVE-2026-14786	Vulnerability in c (CVE-2026-14786) vulnerability in c (CVE-2026-14786). Risk of unauthorized operations or information disclosure.	Low	C Cwe 189 Cwe 190 Radare +1	2 days ago
CVE-2026-14761	Vulnerability in c (CVE-2026-14761) vulnerability in c (CVE-2026-14761). Risk of unauthorized operations or information disclosure.	Low	C Cwe 189 Cwe 190 Radare +1	3 days ago
CVE-2026-14757	Vulnerability in radare (CVE-2026-14757) vulnerability in radare (CVE-2026-14757). Risk of unauthorized operations or information disclosure.	Medium	Cwe 189 Cwe 190 Radare Radare2	3 days ago
CVE-2026-14758	Vulnerability in c (CVE-2026-14758) vulnerability in c (CVE-2026-14758). Risk of unauthorized operations or information disclosure.	Low	C Cwe 189 Cwe 190 Radare +1	3 days ago
CVE-2026-57974	Vulnerability in microsoft (CVE-2026-57974) vulnerability in microsoft (CVE-2026-57974). Successful exploitation can lead to full system takeover.	High	Cwe 190 Microsoft Edge Chromium	4 days ago
CVE-2026-46463	Vulnerability in dos (CVE-2026-46463) vulnerability in dos (CVE-2026-46463). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 190	5 days ago
CVE-2026-14544	Vulnerability in CVE-2026-14544 (CVE-2026-14544) vulnerability in CVE-2026-14544 (CVE-2026-14544). Successful exploitation can lead to full system takeover.	Critical	Cwe 190	5 days ago
CVE-2026-14430	Vulnerability in google (CVE-2026-14430) vulnerability in google (CVE-2026-14430). Successful exploitation can lead to full system takeover.	High	Cwe 472 Cwe 190 Google Chrome	6 days ago
CVE-2026-14391	Vulnerability in google (CVE-2026-14391) vulnerability in google (CVE-2026-14391). Confidential information can be exposed externally.	Medium	Cwe 472 Cwe 190 Google Chrome +2	6 days ago
CVE-2026-53466	Vulnerability in imagemagick (CVE-2026-53466) vulnerability in imagemagick (CVE-2026-53466). Risk of unauthorized operations or information disclosure.	Medium	Cwe 190 Cwe 681 Imagemagick	6 days ago
CVE-2026-6682	Vulnerability in c (CVE-2026-6682) vulnerability in c (CVE-2026-6682). Successful exploitation can lead to full system takeover.	High	C Cwe 190 Elm Chan Fatfs	1 week ago
CVE-2026-7838	Vulnerability in cpp (CVE-2026-7838) vulnerability in cpp (CVE-2026-7838). Successful exploitation can lead to full system takeover.	High	C++ Remote Code Execution Cwe 190 Cwe 787 +2	1 week ago
CVE-2026-7828	Vulnerability in c (CVE-2026-7828) vulnerability in c (CVE-2026-7828). Risk of unauthorized operations or information disclosure.	Medium	C Cwe 190 Uvnc Ultravnc	1 week ago
CVE-2026-56363	Vulnerability in dos (CVE-2026-56363) vulnerability in dos (CVE-2026-56363). Risk of unauthorized operations or information disclosure.	Low	Denial of Service Cwe 190 Imagemagick	1 week ago
CVE-2026-13974	Vulnerability in google (CVE-2026-13974) vulnerability in google (CVE-2026-13974). Data can be tampered with by attackers.	High	Cwe 472 Cwe 190 Google Chrome +2	1 week ago
CVE-2026-53432	Vulnerability in junegunn (CVE-2026-53432) vulnerability in junegunn (CVE-2026-53432). Risk of unauthorized operations or information disclosure.	High	Cwe 190 Junegunn Fzf	1 week ago
CVE-2026-57965	Vulnerability in dos (CVE-2026-57965) vulnerability in dos (CVE-2026-57965). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 190 Redhat Enterprise Linux +2	1 week ago
CVE-2026-58050	libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey... libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey...	High	Cwe 190 SSH Integer Overflow Libssh2	1 week ago
CVE-2026-49416	Vulnerability in freebsd (CVE-2026-49416) vulnerability in freebsd (CVE-2026-49416). Successful exploitation can lead to full system takeover.	High	Cwe 190 FreeBSD	1 week ago
CVE-2026-45258	Out-of-Bounds Read in dos (CVE-2026-45258) vulnerability in dos (CVE-2026-45258). Successful exploitation can lead to full system takeover.	High	Denial of Service Cwe 125 Cwe 190 Cwe 681 +2	1 week ago
CVE-2026-48933	Vulnerability in nodejs (CVE-2026-48933) vulnerability in nodejs (CVE-2026-48933). Risk of unauthorized operations or information disclosure.	High	JavaScript Cwe 190 Nodejs Cwe 770	1 week ago
CVE-2026-6679	Vulnerability in wolfssl (CVE-2026-6679) vulnerability in wolfssl (CVE-2026-6679). Risk of unauthorized operations or information disclosure.	High	Cwe 190 Cwe 197 Cwe 787 Wolfssl	1 week ago
CVE-2026-54679	Vulnerability in jqlang (CVE-2026-54679) vulnerability in jqlang (CVE-2026-54679). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.8.2` or later.	Medium	Cwe 190 Jqlang Jq	1 week ago
CVE-2026-57235	Out-of-Bounds Read in nokogiri (CVE-2026-57235) vulnerability in nokogiri (CVE-2026-57235). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.19.4` or later.	High	Ruby Cwe 125 Cwe 190 Nokogiri	1 week ago
CVE-2026-54226	Vulnerability in apache (CVE-2026-54226) vulnerability in apache (CVE-2026-54226). Risk of unauthorized operations or information disclosure.		Apache Cwe 190	1 week ago
CVE-2026-12244	Vulnerability in nlnetlabs (CVE-2026-12244) vulnerability in nlnetlabs (CVE-2026-12244). Successful exploitation can lead to full system takeover.	High	Remote Code Execution Cwe 122 Cwe 190 Nlnetlabs +1	1 week ago
CVE-2026-53059	Vulnerability in CVE-2026-53059 (CVE-2026-53059) vulnerability in CVE-2026-53059 (CVE-2026-53059). Confidential information can be exposed externally.	Medium	Cwe 190	1 week ago
CVE-2026-52972	Vulnerability in CVE-2026-52972 (CVE-2026-52972) vulnerability in CVE-2026-52972 (CVE-2026-52972). Successful exploitation can lead to full system takeover.	High	Cwe 190	1 week ago
CVE-2026-52969	Vulnerability in CVE-2026-52969 (CVE-2026-52969) vulnerability in CVE-2026-52969 (CVE-2026-52969). Successful exploitation can lead to full system takeover.	High	Cwe 190	1 week ago
CVE-2026-48502	Out-of-Bounds Read in MessagePack (CVE-2026-48502) vulnerability in MessagePack (CVE-2026-48502). Risk of unauthorized operations or information disclosure. Exploitable via ``tokenSize``. Mitigation: upgrade to `3.1.7` or later.	High	C C# Cwe 125 Cwe 190 +8	2 weeks ago
CVE-2026-56410	xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56411	xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56408	libexpat before 2.8.2 has an integer overflow in copyString. libexpat before 2.8.2 has an integer overflow in copyString.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56409	Vulnerability in libexpat-project (CVE-2026-56409) vulnerability in libexpat-project (CVE-2026-56409). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56407	Vulnerability in libexpat-project (CVE-2026-56407) vulnerability in libexpat-project (CVE-2026-56407). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56405	libexpat before 2.8.2 has an integer overflow in getAttributeId. libexpat before 2.8.2 has an integer overflow in getAttributeId.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56406	Vulnerability in libexpat-project (CVE-2026-56406) vulnerability in libexpat-project (CVE-2026-56406). Confidential information can be exposed externally.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56404	libexpat before 2.8.2 has an integer overflow in addBinding. libexpat before 2.8.2 has an integer overflow in addBinding.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-56403	libexpat before 2.8.2 has an integer overflow in storeAtts. libexpat before 2.8.2 has an integer overflow in storeAtts.	Medium	Cwe 190 Libexpat Project Libexpat	2 weeks ago
CVE-2026-49346	Vulnerability in struktur (CVE-2026-49346) vulnerability in struktur (CVE-2026-49346). Risk of unauthorized operations or information disclosure. Exploitable via ``size_t``.	High	Cwe 190 Struktur Libde265	2 weeks ago
CVE-2026-54903	Vulnerability in oj (CVE-2026-54903) vulnerability in oj (CVE-2026-54903). Risk of unauthorized operations or information disclosure. Exploitable via ``Oj.load``. Mitigation: upgrade to `3.17.3` or later.		Ruby Cwe 190	2 weeks ago
CVE-2026-54900	Vulnerability in oj (CVE-2026-54900) vulnerability in oj (CVE-2026-54900). Risk of unauthorized operations or information disclosure. Exploitable via ``create_id``. Mitigation: upgrade to `3.17.3` or later.		Ruby C Cwe 190 Cwe 787	2 weeks ago

Vulnerabilities

🍪 About cookies