Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.561 | 0,9 % |
| ≥10 % | 13.157 | 3,2 % |
| <10 % | 396.051 | 95,8 % |
🗂️ …
CVE-2026-96017 | Microsoft Windows Server 2016/Server 2019/Server 2022/Server 2025 use after free (EUVD-2026-121777)
A vulnerability has been found in Microsoft Windows Server 2016/Server 2019/Server 2022/Server 2025 and classified as problematic. Affected by this issue is some unknown functionality. This manipulation causes use after free. This vulnerabi
CVE-2026-95913 | Microsoft Windows up to Server 2025 Hyper-V use after free (EUVD-2026-121628)
A vulnerability described as critical has been identified in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Hyper-V. Such manipulation leads to use after free. This vulnerability is traded as
CVE-2026-88236 | Microsoft Windows 11/Server 2022/Server 2025 QUIC null pointer dereference (EUVD-2026-121606)
A vulnerability, which was classified as critical, has been found in Microsoft Windows 11/Server 2022/Server 2025. This affects an unknown function of the component QUIC. This manipulation causes null pointer dereference. The identification
CVE-2026-70240 | Microsoft Windows up to Server 2025 Kerberos resource consumption (EUVD-2026-121594)
A vulnerability was found in Microsoft Windows. It has been rated as critical. The affected element is an unknown function of the component Kerberos. Performing a manipulation results in resource consumption. This vulnerability is cataloged
CVE-2026-120796 | Microsoft .NET System.Text.Json resource consumption (EUVD-2026-122469)
A vulnerability labeled as problematic has been found in Microsoft .NET. This affects an unknown part of the component System.Text.Json. The manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-120796. T
CVE-2026-97015 | Microsoft Windows up to Server 2025 BitLocker heap-based overflow (EUVD-2026-121509)
A vulnerability classified as very critical has been found in Microsoft Windows. This affects an unknown function of the component BitLocker. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2026-97015.
CVE-2026-96115 | Microsoft Windows up to Server 2025 DHCP Client double free (EUVD-2026-121484)
A vulnerability classified as very critical was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. Affected is an unknown function of the component DHCP Client. The manipulation results in double free. This vulnerabilit
CVE-2026-95692 | OpenSSL up to 3.5.9/4.0.3/4.1.0 AES-GCM-SIV EVP_CipherInit_ex out-of-bounds (WID-SEC-2026-4443)
A vulnerability, which was classified as critical, was found in OpenSSL up to 3.5.9/4.0.3/4.1.0. This impacts the function EVP_CipherInit_ex of the component AES-GCM-SIV. Such manipulation leads to out-of-bounds read. This vulnerability is
CVE-2026-119263 | Google Chrome up to 156.0.8078.73 GarbageCollection memory corruption (WID-SEC-2026-4244)
A vulnerability identified as critical has been detected in Google Chrome. Affected is an unknown function of the component GarbageCollection. The manipulation leads to memory corruption. This vulnerability is documented as CVE-2026-119263.
CVE-2026-95691 | OpenSSL up to 3.5.9/4.0.3/4.1.0 QUIC use after free (WID-SEC-2026-4443)
A vulnerability labeled as critical has been found in OpenSSL up to 3.5.9/4.0.3/4.1.0. This vulnerability affects unknown code of the component QUIC. Such manipulation leads to use after free. This vulnerability is traded as CVE-2026-95691.
CVE-2026-88823 | OpenSSL up to 3.5.9/4.0.3/4.1.0 AES-GCM-SIV missing cryptographic step (WID-SEC-2026-4443)
A vulnerability classified as problematic was found in OpenSSL up to 3.5.9/4.0.3/4.1.0. The impacted element is an unknown function of the component AES-GCM-SIV. The manipulation results in missing cryptographic step. This vulnerability was
CVE-2026-88822 | OpenSSL up to 3.5.9/4.0.3/4.1.0 QUIC getpeername uninitialized variable (WID-SEC-2026-4443)
A vulnerability identified as critical has been detected in OpenSSL up to 3.5.9/4.0.3/4.1.0. This affects the function getpeername of the component QUIC. This manipulation causes use of uninitialized variable. This vulnerability appears as
CVE-2026-107496 | OpenSSL up to 3.0.23/3.5.9/4.0.3/4.1.0 CMS_encrypt/CMS_encrypt_ex infinite loop (WID-SEC-2026-4443)
A vulnerability, which was classified as problematic, was found in OpenSSL up to 3.0.23/3.5.9/4.0.3/4.1.0. This affects the function CMS_encrypt/CMS_encrypt_ex. Executing a manipulation can lead to infinite loop. This vulnerability is track
CVE-2026-96010 | Microsoft Windows up to Server 2025 HID Parser integer underflow (EUVD-2026-121455)
A vulnerability, which was classified as very critical, was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component HID Parser. The manipulation results in integer underflow. This vulnerabilit
CVE-2026-95998 | Microsoft Windows up to Server 2025 StateRepository API missing authentication (EUVD-2026-121451)
A vulnerability has been found in Microsoft Windows up to Server 2025 and classified as problematic. The impacted element is an unknown function of the component StateRepository API. The manipulation leads to missing authentication. This vu
CVE-2026-95996 | Microsoft Windows up to Server 2025 Bluetooth Port Driver integer underflow (EUVD-2026-121770)
A vulnerability, which was classified as very critical, has been found in Microsoft Windows. Affected is an unknown function of the component Bluetooth Port Driver. The manipulation leads to integer underflow. This vulnerability is document
CVE-2026-95947 | Microsoft Windows up to Server 2025 Error Reporting privileges management (EUVD-2026-121438)
A vulnerability has been found in Microsoft Windows and classified as very critical. This impacts an unknown function of the component Error Reporting. The manipulation leads to improper privilege management. This vulnerability is traded as
CVE-2026-95944 | Microsoft Windows up to Server 2025 improper authorization (EUVD-2026-121635)
A vulnerability categorized as problematic has been discovered in Microsoft Windows. This vulnerability affects unknown code. Executing a manipulation can lead to improper authorization. The identification of this vulnerability is CVE-2026-
CVE-2026-95910 | Microsoft Windows up to Server 2025 Hyper-V certificate validation (EUVD-2026-121753)
A vulnerability was found in Microsoft Windows. It has been classified as problematic. This affects an unknown part of the component Hyper-V. This manipulation causes improper certificate validation. The identification of this vulnerability
CVE-2026-95885 | Microsoft Windows up to Server 2025 NFS use after free (EUVD-2026-121621)
A vulnerability described as very critical has been identified in Microsoft Windows. This vulnerability affects unknown code of the component NFS. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2026-9
CVE-2026-126261 | Fortinet FortiManager up to 7.2.8/7.4.5/7.6.7/8.0.0 FGFM improper authorization (EUVD-2026-123051)
A vulnerability was found in Fortinet FortiManager up to 7.2.8/7.4.5/7.6.7/8.0.0 and classified as very critical. Affected is an unknown function of the component FGFM Handler. Such manipulation leads to improper authorization. This vulnera
CVE-2026-20183 | Cisco Identity Services Engine up to 3.5.0 Web-based Management Interface privileges management (EUVD-2026-123058)
A vulnerability classified as problematic was found in Cisco Identity Services Engine. Affected is an unknown function of the component Web-based Management Interface. Such manipulation leads to improper privilege management. This vulnerabi
CVE-2026-96102 | Microsoft Windows up to Server 2025 buffer overflow (EUVD-2026-121482)
A vulnerability was found in Microsoft Windows. It has been classified as very critical. Affected is an unknown function. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2026-96102. The attack mu
CVE-2026-114159 | Microsoft .NET/Visual Studio/Windows up to 18.12 heap-based overflow (EUVD-2026-121982)
A vulnerability categorized as critical has been discovered in Microsoft .NET, Visual Studio and Windows up to 18.12. Affected by this vulnerability is an unknown functionality. The manipulation results in heap-based buffer overflow. This v
CVE-2026-96097 | Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2 Brokering File System privileges management (EUVD-2026-121804)
A vulnerability, which was classified as very critical, was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2. The impacted element is an unknown function of the component Brokering File System. The manipulation results in improper
CVE-2026-96088 | Microsoft Windows up to Server 2025 Connected User Experiences/Telemetry race condition (EUVD-2026-121801)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been declared as very critical. This affects an unknown part of the component Connected User Experiences/Telemetry. Executing a manipulation can lead to race condition
CVE-2026-96085 | Microsoft Windows up to Server 2025 Windows Installer heap-based overflow (EUVD-2026-121480)
A vulnerability, which was classified as very critical, has been found in Microsoft Windows. The affected element is an unknown function of the component Windows Installer. The manipulation leads to heap-based buffer overflow. This vulnerab
CVE-2026-96084 | Microsoft Windows up to Server 2025 Graphic Fonts heap-based overflow (EUVD-2026-121479)
A vulnerability was found in Microsoft Windows up to Server 2025 and classified as very critical. This impacts an unknown function of the component Graphic Fonts. Such manipulation leads to heap-based buffer overflow. This vulnerability is
CVE-2026-96076 | Microsoft Windows up to Server 2025 DIAL Client use after free (EUVD-2026-121799)
A vulnerability described as very critical has been identified in Microsoft Windows. This vulnerability affects unknown code of the component DIAL Client. Such manipulation leads to use after free. This vulnerability is uniquely identified
CVE-2026-114158 | Microsoft .NET/Visual Studio heap-based overflow (EUVD-2026-121981)
A vulnerability was found in Microsoft .NET and Visual Studio. It has been rated as critical. Affected is an unknown function. The manipulation leads to heap-based buffer overflow. This vulnerability is documented as CVE-2026-114158. The at
CVE-2026-96075 | Microsoft Windows up to Server 2025 Feedback Hub race condition (EUVD-2026-121798)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been rated as very critical. The affected element is an unknown function of the component Feedback Hub. This manipulation causes race condition. This vulnerability app
CVE-2026-123587 | hickory-dns Hickory DNS up to 0.26.1 hickory-net data authenticity (Nessus ID 378059)
A vulnerability labeled as problematic has been found in hickory-dns Hickory DNS up to 0.26.1. Affected is an unknown function of the component hickory-net. The manipulation results in insufficient verification of data authenticity. This vu
CVE-2026-113431 | ninenines cowlib HPACK Decoder cow_http2_machine.erl cow_http2_machine:headers_decode allocation of resources (Nessus ID 378060)
A vulnerability labeled as problematic has been found in ninenines cowlib. The impacted element is the function cow_http2_machine:headers_decode of the file src/cow_http2_machine.erl of the component HPACK Decoder. Executing a manipulation
CVE-2026-123592 | hickory-dns Hickory DNS up to 0.26.1 hickory-net Hash signature verification (Nessus ID 378061)
A vulnerability marked as problematic has been reported in hickory-dns Hickory DNS up to 0.26.1. Affected by this vulnerability is the function Hash of the component hickory-net. This manipulation causes improper verification of cryptograph
CVE-2026-115701 | ninenines cowboy src/cowboy_http.erl cowboy_http:parse allocation of resources (Nessus ID 378062)
A vulnerability, which was classified as problematic, was found in ninenines cowboy. This affects the function cowboy_http:parse of the file src/cowboy_http.erl. Executing a manipulation can lead to allocation of resources. This vulnerabili
CVE-2026-123584 | Hickory DNS up to 0.26.1 hickory-net input validation (Nessus ID 378063)
A vulnerability was found in Hickory DNS up to 0.26.1. It has been declared as problematic. The affected element is an unknown function of the component hickory-net. Such manipulation leads to improper input validation. This vulnerability i
CVE-2026-123607 | Hickory DNS hickory-proto/hickory-net DnssecDnsHandle infinite loop (Nessus ID 378064)
A vulnerability was found in Hickory DNS. It has been classified as problematic. Affected by this vulnerability is the function DnssecDnsHandle of the component hickory-proto/hickory-net. The manipulation leads to infinite loop. This vulner
CVE-2023-39405 | Huawei EMUI/Magic UI Wi-Fi read/write bounds out-of-bounds
A vulnerability described as problematic has been identified in Huawei EMUI and Magic UI. This issue affects some unknown processing of the file read/write of the component Wi-Fi. Such manipulation of the argument bounds leads to out-of-bou
CVE-2023-39396 | Huawei EMUI/Magic UI out-of-bounds
A vulnerability marked as problematic has been reported in Huawei EMUI and Magic UI. This vulnerability affects unknown code. This manipulation causes out-of-bounds read. This vulnerability is handled as CVE-2023-39396. The attack can only
CVE-2023-39393 | Huawei EMUI/Magic UI ServiceWifiResources information disclosure
A vulnerability, which was classified as critical, has been found in Huawei EMUI and Magic UI. This issue affects some unknown processing of the component ServiceWifiResources. Performing a manipulation results in information disclosure. Th
CVE-2023-39392 | Huawei EMUI/Magic UI OsuLogin config
A vulnerability labeled as problematic has been found in Huawei EMUI and Magic UI. This affects an unknown part of the component OsuLogin Module. The manipulation results in configuration. This vulnerability is known as CVE-2023-39392. Acce
CVE-2023-39391 | Huawei EMUI/Magic UI USB Service information disclosure
A vulnerability has been found in Huawei EMUI and Magic UI and classified as problematic. This impacts an unknown function of the component USB Service Module. This manipulation causes information disclosure. This vulnerability is tracked a
CVE-2023-39390 | Huawei EMUI/Magic UI Window Management input denial of service
A vulnerability, which was classified as problematic, was found in Huawei EMUI and Magic UI. This affects an unknown function of the component Window Management Module. The manipulation of the argument input results in denial of service. Th
CVE-2023-39388 | Huawei EMUI/Magic UI PMS buffer overflow
A vulnerability categorized as critical has been discovered in Huawei EMUI and Magic UI. Affected by this vulnerability is an unknown functionality of the component PMS. Executing a manipulation can lead to buffer overflow. This vulnerabili
CVE-2023-39387 | Huawei EMUI/Magic UI Window Management permission
A vulnerability, which was classified as critical, has been found in Huawei EMUI and Magic UI. The impacted element is an unknown function of the component Window Management Module. The manipulation leads to permission issues. This vulnerab
CVE-2023-39386 | Huawei EMUI/Magic UI PMS input denial of service
A vulnerability classified as problematic was found in Huawei EMUI and Magic UI. The affected element is an unknown function of the component PMS. Executing a manipulation of the argument input can lead to denial of service. The identificat
CVE-2023-39385 | Huawei EMUI/Magic UI Media config
A vulnerability classified as problematic has been found in Huawei EMUI and Magic UI. Impacted is an unknown function of the component Media. Performing a manipulation results in configuration. This vulnerability was named CVE-2023-39385. T
CVE-2023-39384 | Huawei EMUI/Magic UI Input Method access control
A vulnerability was found in Huawei EMUI and Magic UI. It has been rated as critical. Affected is an unknown function of the component Input Method Module. Performing a manipulation results in improper access controls. This vulnerability is
CVE-2026-124194 | Microsoft Office Outlook improper authorization
A vulnerability classified as problematic has been found in Microsoft Office. Affected by this vulnerability is an unknown functionality of the component Outlook. This manipulation causes improper authorization. The identification of this v
Microsoft’s November updates fix 1094 flaws, Outlook zero-day
Microsoft has released its November 2026 Patch Tuesday updates for Windows 11, fixing USB audio, printer installation, and Remote Desktop problems while strengthening NTLM authentication and PowerShell script verification. The broader Micro
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
It’s another doozy of a Patch Tuesday, with Microsoft fixing 1,094 bugs in its products, including one that attackers exploited before Redmond released a patch. Jake Knott, head of threat intelligence at exposure management firm watchTowr,
CVE-2023-39383 | Huawei EMUI/Magic UI AMS information disclosure
A vulnerability was found in Huawei EMUI and Magic UI. It has been declared as problematic. This impacts an unknown function of the component AMS. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-20
CVE-2023-39382 | Huawei EMUI/Magic UI VM Handler denial of service
A vulnerability was found in Huawei EMUI and Magic UI. It has been classified as problematic. This affects an unknown function of the component VM Handler. This manipulation causes denial of service. This vulnerability is registered as CVE-
CVE-2023-39381 | Huawei EMUI/Magic UI Storage denial of service
A vulnerability was found in Huawei EMUI and Magic UI and classified as problematic. The impacted element is an unknown function of the component Storage Module. The manipulation results in denial of service. This vulnerability is cataloged
CVE-2023-39380 | Huawei EMUI/Magic UI Audio Device access control
A vulnerability has been found in Huawei EMUI and Magic UI and classified as critical. The affected element is an unknown function of the component Audio Device Handler. The manipulation leads to improper access controls. This vulnerability
CVE-2023-38034 | Ubiquiti UniFi Access Point/UniFi Switch DHCP Client command injection
A vulnerability was found in Ubiquiti UniFi Access Point and UniFi Switch and classified as critical. Affected by this issue is some unknown functionality of the component DHCP Client. Executing a manipulation can lead to command injection.
CVE-2023-37864 | Phoenix Contact WP 6xxx prior 4.0.10 on WordPress SNMP Request code download (VDE-2023-018)
A vulnerability classified as problematic was found in Phoenix Contact WP 6xxx on WordPress. The impacted element is an unknown function of the component SNMP Request Handler. The manipulation results in download of code without integrity c
CVE-2023-35085 | Ubiquiti UniFi Access Point/UniFi Switch SNMP Monitoring integer overflow
A vulnerability was found in Ubiquiti UniFi Access Point and UniFi Switch. It has been rated as critical. This issue affects some unknown processing of the component SNMP Monitoring. This manipulation causes integer overflow. This vulnerabi
CVE-2022-44629 | Catalyst Connect Zoho CRM Client Portal Plugin up to 2.0.0 on WordPress cross site scripting
A vulnerability categorized as problematic has been discovered in Catalyst Connect Zoho CRM Client Portal Plugin up to 2.0.0 on WordPress. This impacts an unknown function. Such manipulation leads to cross site scripting. This vulnerability
CVE-2022-27861 | Ninja Popups Plugin up to 4.7.5 on WordPress redirect
A vulnerability classified as problematic was found in Ninja Popups Plugin up to 4.7.5 on WordPress. This affects an unknown part. The manipulation results in open redirect. This vulnerability is identified as CVE-2022-27861. The attack can