Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.337 | 0,9 % |
| ≥10 % | 22.177 | 5,7 % |
| <10 % | 362.842 | 93,2 % |
CVE-2026-98432
For those also getting annoyed with vendors not deploying a fix after giving a 9.8 rating, I found this great article with a generic NFT command that drops ip-options. The article also analyses the issue. I have managers in a state of panic
Android: SMS des Todes lässt Smartphones abstürzen – Google behebt schwere Sicherheitslücke in 14 bis 17
Google stopft regelmäßig Dutzende oder gar Hunderte Sicherheitslücken in Android und dennoch tauchen immer wieder neue Einfallstore auf, die bereits seit Jahren bestehen - jetzt ist erneut ein Fall bekannt geworden. Mit dem sogenannten Angr
CVE-2026-106279 | Google Chrome up to 154.0.8037.97 Passwords use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Affected by this issue is some unknown functionality of the component Passwords. Executing a manipulation can lead to use after free. This vulnerability is tracked as
CVE-2026-106278 | Google Chrome up to 154.0.8037.97 Select use after free (Nessus ID 363731 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Select. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-106278. The attack may be p
CVE-2026-106277 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability
CVE-2026-106276 | Google Chrome up to 154.0.8037.97 Payments input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. Affected is an unknown function of the component Payments. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CV
CVE-2026-106275 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. Impacted is an unknown function of the component GPU. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2026-10627
CVE-2026-106274 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. The affected element is an unknown function. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-106274. The attack may be ini
CVE-2026-106273 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability marked as problematic has been reported in Google Chrome. The impacted element is an unknown function of the component Video. Performing a manipulation results in uninitialized resource. This vulnerability was named CVE-2026
CVE-2026-106272 | Google Chrome up to 154.0.8037.97 Chromoting information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This issue affects some unknown processing of the component Chromoting. The manipulation leads to information disclosure. This vulnerability is documented as
CVE-2026-106271 | Google Chrome up to 154.0.8037.97 Workers improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This affects an unknown part of the component Workers. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-1
CVE-2026-106270 | Google Chrome up to 154.0.8037.97 WebAppInstalls improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This vulnerability affects unknown code of the component WebAppInstalls. Executing a manipulation can lead to improper authorization. This vulnerability is registered as
CVE-2026-106269 | Google Chrome up to 154.0.8037.97 CSS use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Affected by this issue is some unknown functionality of the component CSS. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-10
CVE-2026-104843 | astral-sh uv up to 0.12.17 Wheel Extraction path traversal (Nessus ID 374836)
A vulnerability classified as critical has been found in astral-sh uv up to 0.12.17. Affected by this issue is some unknown functionality of the component Wheel Extraction. Performing a manipulation results in path traversal. This vulnerabi
CVE-2025-30156 | Linux Kernel ceph improper authentication (Nessus ID 374838)
A vulnerability classified as very critical was found in Linux Kernel. The affected element is an unknown function of the component ceph. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2025-3
CVE-2026-98725 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 nvmet-auth fabrics-cmd-auth.c nvmet_auth_challenge out-of-bounds write (Nessus ID 374839)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5. Impacted is the function nvmet_auth_challenge of the file drivers/nvme/target/fabrics-cmd-auth.c of the component nvmet-auth. T
CVE-2021-38185 | GNU cpio up to 2.13 Pattern File dstring.c ds_fgetstr integer overflow (Nessus ID 374841)
A vulnerability classified as critical has been found in GNU cpio up to 2.13. This issue affects the function ds_fgetstr of the file dstring.c of the component Pattern File Handler. The manipulation leads to integer overflow. This vulnerabi
CVE-2026-118475 | Red Hat Enterprise Linux PNG Image Parser buffer overflow (Nessus ID 374858)
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the component PNG Image Parser. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-107651 | Red Hat Eye of GNOME 6/7/8/9 PNG Metadata Reader buffer overflow (Nessus ID 374858)
A vulnerability labeled as problematic has been found in Red Hat Eye of GNOME 6/7/8/9. This affects an unknown part of the component PNG Metadata Reader. Such manipulation leads to buffer overflow. This vulnerability is referenced as CVE-20
CVE-2026-15195 | apidevtools json-schema-ref-parser up to 15.3.5 lib/pointer.ts Refs.set/Pointer.set prototype pollution (Issue 421)
A vulnerability was found in apidevtools json-schema-ref-parser and classified as critical. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modificatio
Hackers Scan BeyondTrust Remote Support Systems for Actively Exploited Zero-Day Flaw
Scanning activity targeting BeyondTrust Remote Support appliances raises concerns that exploitation of CVE-2026-102764 is expanding beyond targeted intrusions to opportunistic attacks. Previdian reported two probes against its decoy systems
CVE-2024-7358 | Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows MSI Installer getscreen.msi temp file
A vulnerability classified as critical was found in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation o
CVE-2026-20600 | MediaTek MT8883 denial of service (MOLY01416152 / EUVD-2026-114931)
A vulnerability classified as critical was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8875 and
CVE-2026-20599 | MediaTek MT8893 privileges management (MOLY01790985 / EUVD-2026-114930)
A vulnerability, which was classified as very critical, has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT683
CVE-2026-20598 | MediaTek MT8883 Modem integer overflow (MOLY01755742 / EUVD-2026-115058)
A vulnerability, which was classified as critical, was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863,
CVE-2026-68589 | MediaTek MT8893 out-of-bounds write (MOLY01320076 / EUVD-2026-114933)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689
CVE-2026-68588 | MediaTek MT8883 Modem integer overflow (MOLY01334054/MOLY01312486 / EUVD-2026-114932)
A vulnerability classified as critical has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-75913 | Hmbown CodeWhale up to 0.8.63 git_show tool rev argument injection
A vulnerability was found in Hmbown CodeWhale up to 0.8.63. It has been rated as problematic. The impacted element is the function git_show of the component git_show tool. This manipulation of the argument rev causes argument injection. Thi
CVE-2026-75857 | Hmbown CodeWhale up to 0.8.63 exec_shell_interact injection
A vulnerability labeled as critical has been found in Hmbown CodeWhale up to 0.8.63. The impacted element is the function exec_shell_interact. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-75857
CVE-2026-74600 | Linux Kernel up to 7.1.8 Page Table Check mm/page_table_check.c page_table_check_set/page_table_check_clear resource consumption (Nessus ID 339003 / WID-SEC-2026-2970)
A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.8. The impacted element is the function page_table_check_set/page_table_check_clear of the file mm/page_table_check.c of the component Page Table Check. The
CVE-2026-74599 | Linux Kernel up to 6.18.44/7.1.8 ptdump mm/ptdump.c ptdump_walk_pgd race condition (WID-SEC-2026-2970)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.44/7.1.8. The affected element is the function ptdump_walk_pgd of the file mm/ptdump.c of the component ptdump. The manipulation leads to race
CVE-2026-74544 | Linux Kernel up to 7.1.7/7.2-rc5 cls_u32 net/sched/cls_u32.c u32_change offshift out-of-bounds
A vulnerability classified as very critical was found in Linux Kernel up to 7.1.7/7.2-rc5. This vulnerability affects the function u32_change of the file net/sched/cls_u32.c of the component cls_u32. Such manipulation of the argument offshi
CVE-2026-74537 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 Bluetooth iso_conn_ready use after free (Nessus ID 335855)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5. The impacted element is the function iso_conn_ready of the component Bluetooth. Such manipulation leads to use after free. This vulnerabili
CVE-2026-74527 | Linux Kernel up to 7.1.7/7.2-rc5 octeontx2-af cgx_get_pkind/rvu_cgx_is_pkind_config_permitted state issue
A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.7/7.2-rc5. Affected by this issue is the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation leads to
CVE-2026-74417 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 radeon radeon_align_pitch integer overflow
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function radeon_align_pitch of the component radeon. The manipulation results in integer overflow. This v
CVE-2026-74406 | Linux Kernel up to 7.1.4 vxlan vxlan_gro_prepare_receive null pointer dereference
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Impacted is the function vxlan_gro_prepare_receive of the component vxlan. This manipulation causes null pointer dereference.
CVE-2026-74405 | Linux Kernel up to 6.18.39/7.1.4 OPP dev_pm_opp_add_dynamic race condition
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.39/7.1.4. This issue affects the function dev_pm_opp_add_dynamic of the component OPP. This manipulation causes race condition. This vulnerability is hand
CVE-2026-73198 | Red Hat FreeIPA I18n /ipa/i18n_messages memory allocation (EUVD-2026-63244 / Nessus ID 350078)
A vulnerability marked as problematic has been reported in Red Hat FreeIPA. This vulnerability affects unknown code of the file /ipa/i18n_messages of the component I18n. This manipulation causes uncontrolled memory allocation. The identific