Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-1285 Clear
ID Title
CVE-2026-14479 Vulnerability in CVE-2026-14479 (CVE-2026-14479)
vulnerability in CVE-2026-14479 (CVE-2026-14479). Risk of unauthorized operations or information disclosure.
CVE-2026-18485 Vulnerability in privilege-escalation (CVE-2026-18485)
vulnerability in privilege-escalation (CVE-2026-18485). Successful exploitation can lead to full system takeover.
CVE-2026-53530 Vulnerability in ratex-parser (CVE-2026-53530)
vulnerability in ratex-parser (CVE-2026-53530). Risk of unauthorized operations or information disclosure. Exploitable via ``parse_symbol_inner``. Mitigation: upgrade to `0.1.11` or later.
CVE-2026-12681 Vulnerability in github.com/google/go-attestation (CVE-2026-12681)
vulnerability in github.com/google/go-attestation (CVE-2026-12681). Risk of unauthorized operations or information disclosure. Exploitable via ``SignatureHeaderSize``. Mitigation: upgrade to `0.6.1` or later.
CVE-2026-8036 Vulnerability in privilege-escalation (CVE-2026-8036)
vulnerability in privilege-escalation (CVE-2026-8036). Confidential information can be exposed externally.
CVE-2026-45352 Vulnerability in c (CVE-2026-45352)
vulnerability in c (CVE-2026-45352). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.43.4` or later.
CVE-2026-9100 Vulnerability in c (CVE-2026-9100)
vulnerability in c (CVE-2026-9100). Risk of unauthorized operations or information disclosure.
CVE-2026-44004 Vulnerability in vm2 (CVE-2026-44004)
vulnerability in vm2 (CVE-2026-44004). Risk of unauthorized operations or information disclosure. Exploitable via ``Buffer.alloc``. Mitigation: upgrade to `3.11.0` or later.
CVE-2026-43868 Vulnerability in thrift (CVE-2026-43868)
vulnerability in thrift (CVE-2026-43868). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.23.0` or later.
CVE-2026-40886 Vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-40886)
vulnerability in github.com/argoproj/argo-workflows/v4 (CVE-2026-40886). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.5` or later.
CVE-2026-33557 Vulnerability in kafka (CVE-2026-33557)
vulnerability in kafka (CVE-2026-33557). Confidential information can be exposed externally. Exploitable via ``sasl.oauthbearer.jwt.validator.class``. Mitigation: upgrade to `4.1.2` or later.
CVE-2026-32286 Vulnerability in github.com/jackc/pgproto3/v2 (CVE-2026-32286)
vulnerability in github.com/jackc/pgproto3/v2 (CVE-2026-32286). Risk of unauthorized operations or information disclosure.
CVE-2026-32285 Vulnerability in github.com/buger/jsonparser (CVE-2026-32285)
vulnerability in github.com/buger/jsonparser (CVE-2026-32285). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.2` or later.
CVE-2025-2399 Vulnerability in CVE-2025-2399 (CVE-2025-2399)
vulnerability in CVE-2025-2399 (CVE-2025-2399). Risk of unauthorized operations or information disclosure.
CVE-2026-2006 Vulnerability in postgresql (CVE-2026-2006)
vulnerability in postgresql (CVE-2026-2006). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `14.21.0, 15.16.0, 16.12.0, 17.8.0, 18.2.0` or later.
CVE-2025-67268 Vulnerability in c (CVE-2025-67268)
vulnerability in c (CVE-2025-67268). Successful exploitation can lead to full system takeover.
CVE-2025-8291 Vulnerability in CVE-2025-8291 (CVE-2025-8291)
vulnerability in CVE-2025-8291 (CVE-2025-8291). Risk of unauthorized operations or information disclosure.
CVE-2022-24521 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-24521)
out-of-bounds write in Microsoft windows (CVE-2022-24521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2021-1647 KEV [KEV] Vulnerability in Microsoft defender (CVE-2021-1647)
vulnerability in Microsoft defender (CVE-2021-1647). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →