Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.337 | 0,9 % |
| ≥10 % | 22.178 | 5,7 % |
| <10 % | 362.841 | 93,2 % |
Android: SMS des Todes lässt Smartphones abstürzen – Google behebt schwere Sicherheitslücke in 14 bis 17
Google stopft regelmäßig Dutzende oder gar Hunderte Sicherheitslücken in Android und dennoch tauchen immer wieder neue Einfallstore auf, die bereits seit Jahren bestehen - jetzt ist erneut ein Fall bekannt geworden. Mit dem sogenannten Angr
CVE-2026-106279 | Google Chrome up to 154.0.8037.97 Passwords use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Affected by this issue is some unknown functionality of the component Passwords. Executing a manipulation can lead to use after free. This vulnerability is tracked as
CVE-2026-106278 | Google Chrome up to 154.0.8037.97 Select use after free (Nessus ID 363731 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Select. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-106278. The attack may be p
CVE-2026-106277 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability
CVE-2026-106276 | Google Chrome up to 154.0.8037.97 Payments input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. Affected is an unknown function of the component Payments. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CV
CVE-2026-106275 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. Impacted is an unknown function of the component GPU. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2026-10627
CVE-2026-106274 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. The affected element is an unknown function. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-106274. The attack may be ini
CVE-2026-106273 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability marked as problematic has been reported in Google Chrome. The impacted element is an unknown function of the component Video. Performing a manipulation results in uninitialized resource. This vulnerability was named CVE-2026
CVE-2026-106272 | Google Chrome up to 154.0.8037.97 Chromoting information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This issue affects some unknown processing of the component Chromoting. The manipulation leads to information disclosure. This vulnerability is documented as
CVE-2026-106271 | Google Chrome up to 154.0.8037.97 Workers improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This affects an unknown part of the component Workers. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-1
CVE-2026-106270 | Google Chrome up to 154.0.8037.97 WebAppInstalls improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This vulnerability affects unknown code of the component WebAppInstalls. Executing a manipulation can lead to improper authorization. This vulnerability is registered as
CVE-2026-106269 | Google Chrome up to 154.0.8037.97 CSS use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Affected by this issue is some unknown functionality of the component CSS. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-10
CVE-2026-104843 | astral-sh uv up to 0.12.17 Wheel Extraction path traversal (Nessus ID 374836)
A vulnerability classified as critical has been found in astral-sh uv up to 0.12.17. Affected by this issue is some unknown functionality of the component Wheel Extraction. Performing a manipulation results in path traversal. This vulnerabi
CVE-2025-30156 | Linux Kernel ceph improper authentication (Nessus ID 374838)
A vulnerability classified as very critical was found in Linux Kernel. The affected element is an unknown function of the component ceph. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2025-3
CVE-2026-98725 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 nvmet-auth fabrics-cmd-auth.c nvmet_auth_challenge out-of-bounds write (Nessus ID 374839)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5. Impacted is the function nvmet_auth_challenge of the file drivers/nvme/target/fabrics-cmd-auth.c of the component nvmet-auth. T
CVE-2021-38185 | GNU cpio up to 2.13 Pattern File dstring.c ds_fgetstr integer overflow (Nessus ID 374841)
A vulnerability classified as critical has been found in GNU cpio up to 2.13. This issue affects the function ds_fgetstr of the file dstring.c of the component Pattern File Handler. The manipulation leads to integer overflow. This vulnerabi
CVE-2026-118475 | Red Hat Enterprise Linux PNG Image Parser buffer overflow (Nessus ID 374858)
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the component PNG Image Parser. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-107651 | Red Hat Eye of GNOME 6/7/8/9 PNG Metadata Reader buffer overflow (Nessus ID 374858)
A vulnerability labeled as problematic has been found in Red Hat Eye of GNOME 6/7/8/9. This affects an unknown part of the component PNG Metadata Reader. Such manipulation leads to buffer overflow. This vulnerability is referenced as CVE-20
CVE-2026-15195 | apidevtools json-schema-ref-parser up to 15.3.5 lib/pointer.ts Refs.set/Pointer.set prototype pollution (Issue 421)
A vulnerability was found in apidevtools json-schema-ref-parser and classified as critical. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modificatio
Hackers Scan BeyondTrust Remote Support Systems for Actively Exploited Zero-Day Flaw
Scanning activity targeting BeyondTrust Remote Support appliances raises concerns that exploitation of CVE-2026-102764 is expanding beyond targeted intrusions to opportunistic attacks. Previdian reported two probes against its decoy systems
CVE-2024-7358 | Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows MSI Installer getscreen.msi temp file
A vulnerability classified as critical was found in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation o
CVE-2026-106268 | Google Chrome up to 154.0.8037.97 WebRTC use after free (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. Affected is an unknown function of the component WebRTC. The manipulation results in use after free. This vulnerability is identified as CVE-2026-106268. The attack can be e
CVE-2026-106267 | Google Chrome up to 154.0.8037.97 Network improper authorization (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, has been found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Network. This manipulation causes improper authorization. This vulnerability is
CVE-2026-106266 | Google Chrome up to 154.0.8037.97 Contextual Tasks privileges management (WID-SEC-2026-3761)
A vulnerability classified as critical has been found in Google Chrome. This impacts an unknown function of the component Contextual Tasks. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-202
CVE-2026-106265 | Google Chrome up to 154.0.8037.97 privileges management (WID-SEC-2026-3761)
A vulnerability categorized as critical has been discovered in Google Chrome. This impacts an unknown function. Such manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-106265. The atta
CVE-2026-106264 | Google Chrome up to 154.0.8037.97 Web Authentication improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as critical. The impacted element is an unknown function of the component Web Authentication. The manipulation results in improper authorization. This vulnerability is known a
CVE-2026-106263 | Google Chrome up to 154.0.8037.97 SignIn access control (Nessus ID 363728 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component SignIn. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-106263. The at
CVE-2026-106262 | Google Chrome up to 154.0.8037.97 GetUserMedia input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. The affected element is the function GetUserMedia. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-106262. It is p
CVE-2026-106261 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability classified as problematic was found in Google Chrome. Affected by this issue is some unknown functionality of the component Video. The manipulation results in uninitialized resource. This vulnerability is cataloged as CVE-20
CVE-2026-106260 | Google Chrome up to 154.0.8037.97 DevTools improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This issue affects some unknown processing of the component DevTools. Performing a manipulation results in improper authorization. This vulnerability is reported
CVE-2026-106259 | Google Chrome up to 154.0.8037.97 PermissionElement access control (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Impacted is an unknown function of the component PermissionElement. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2
CVE-2026-106258 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. This affects an unknown part of the component ANGLE. This manipulation causes uninitialized resource. This vulnerability is registered as CVE-2026-106258
CVE-2026-106257 | Google Chrome up to 154.0.8037.97 HTML use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. This vulnerability affects unknown code of the component HTML. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-106257. Th
CVE-2026-106256 | Google Chrome up to 154.0.8037.97 Passwords information disclosure (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. This vulnerability affects unknown code of the component Passwords. Executing a manipulation can lead to information disclosure. The identification of this vul
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. This article has been indexed from SecurityWeek Read the original article: Ivanti Patches Two More Zero-Days
CVE-2026-120344 | WAVLINK WN551X3-A M51X3_V251020-WO-182e965 WireGuard CLI Group /bin/ioos system group_name os command injection (EUVD-2026-115067)
A vulnerability categorized as very critical has been discovered in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the ar
CVE-2026-120342 | mathurvishal CloudClassroom-PHP-Project viewquery.php eid sql injection (EUVD-2026-115065)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been declared as critical. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. Th
CVE-2025-11969 | WSO2 API Control Plane access control (EUVD-2025-211233)
A vulnerability was found in WSO2 API Control Plane, API Manager, API Manager Rest API Common Functions, API Manager Rest API Utility, Carbon API Manager Rest API Common Functions, Carbon API Manager Rest API Utility, Identity Server as Key
CVE-2024-5617 | WSO2 API Manager Account Lock Feature improper authentication (EUVD-2024-55832)
A vulnerability was found in WSO2 API Manager, Identity Server, Carbon Identity Management and Carbon User Manager Kernel. It has been declared as critical. Impacted is an unknown function of the component Account Lock Feature. Such manipul
CVE-2026-120343 | mathurvishal CloudClassroom-PHP-Project manageassessment2.php ExamName/Q1/Q2/Q3/Q4/Q5 cross site scripting (EUVD-2026-115066)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been rated as problematic. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5
CVE-2026-120341 | mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect (EUVD-2026-115064)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been classified as critical. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. This vulnerability
CVE-2026-120340 | mathurvishal CloudClassroom-PHP-Project Global Session session expiration (EUVD-2026-115063)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project and classified as critical. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. Th
CVE-2026-120348 | dayrui XunRuiCMS up to 4.7.4 Email Template Rendering Notice.php _get_tpl_content code injection (EUVD-2026-115070)
A vulnerability marked as critical has been reported in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The
CVE-2026-120347 | dayrui XunRuiCMS up to 4.7.4 Member View.php View catid sql injection (EUVD-2026-115069)
A vulnerability labeled as critical has been found in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead
CVE-2026-120345 | WAVLINK WN551X3-A M51X3_V251020-WO-182e965 DNS Resolution /bin/ioos sub_41a430 data os command injection (EUVD-2026-115068)
A vulnerability identified as very critical has been detected in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of th
CVE-2026-99163 | Linux Kernel up to 6.18.58/7.2.12 Histograms check_synth_field stack-based overflow
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.58/7.2.12. This impacts the function check_synth_field of the component Histograms. Such manipulation leads to stack-based buffer overflow. This vulnera
CVE-2026-99156 | Linux Kernel up to 6.18.58/7.2.12 scsi drivers/scsi/st.c st_remove/st_open use after free
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.58/7.2.12. This issue affects the function st_remove/st_open of the file drivers/scsi/st.c of the component scsi. Performing a manipulation results in use
CVE-2026-99154 | Linux Kernel up to 6.18.58/7.2.12 libiscsi beiscsi_parse_pdu itt comparison
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function beiscsi_parse_pdu of the component libiscsi. Executing a manipulation of the argument itt can le
CVE-2026-99153 | Linux Kernel up to 6.18.58/7.2.12 libiscsi iscsi_nop_out_rsp null pointer dereference
A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.58/7.2.12. This issue affects the function iscsi_nop_out_rsp of the component libiscsi. Such manipulation leads to null pointer dereference. This vuln
CVE-2026-99152 | Linux Kernel up to 6.18.58/7.2.12 libiscsi __iscsi_complete_pdu null pointer dereference
A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function __iscsi_complete_pdu of the component libiscsi. This manipulation causes null pointer dereference. This vulne
CVE-2026-99148 | Linux Kernel up to 6.18.58/7.2.12 amdgpu drm/amdgpu amdgpu_gem_object_close ref_count race condition
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function amdgpu_gem_object_close of the file drm/amdgpu of the component amdgpu. The manipulation of the argument ref_coun
CVE-2026-99143 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse out-of-bounds write
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function predicate_parse of the component tracing. This manipulation causes out-of-bounds write. This vul
CVE-2026-99142 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse stack-based overflow
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as very critical. This affects the function predicate_parse of the component tracing. The manipulation leads to stack-based buffer overflow. This vulnerabilit
CVE-2026-99136 | Linux Kernel up to 6.18.58/7.2.12 dm-crypt crypt_dec_pending race condition
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.58/7.2.12. The affected element is the function crypt_dec_pending of the component dm-crypt. Such manipulation leads to race condition. This vulnera
CVE-2026-99131 | Linux Kernel up to 6.18.58/7.2.12 xfs ns_capable_noaudit privileges management
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been classified as problematic. Affected by this vulnerability is the function ns_capable_noaudit of the component xfs. Performing a manipulation results in improper pri
CVE-2026-99123 | Linux Kernel up to 6.18.58/7.2.12 vsock virtio virtio_transport_recv_pkt information disclosure
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function virtio_transport_recv_pkt of the component vsock virtio. The manipulation results in information disc
CVE-2026-99122 | Linux Kernel up to 6.18.58/7.2.12 vsock vmci_transport_recv_stream_cb input validation
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as critical. Impacted is the function vmci_transport_recv_stream_cb of the component vsock. This manipulation causes improper input validation. This vulnerabi
CVE-2026-99117 | Linux Kernel up to 6.18.58/7.2.12 Bridge Multicast __br_multicast_disable_port_ctx use after free
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. The impacted element is the function __br_multicast_disable_port_ctx of the component Bridge Multicast. This manipulation causes use after
CVE-2026-99116 | Linux Kernel up to 6.18.58/7.2.12 PSP sock_copy use after free
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function sock_copy of the component PSP. Executing a manipulation can lead to use after free. This vulnerability appears as CVE
CVE-2026-99112 | Linux Kernel up to 6.18.58/7.2.12 cls_flower net/sched/cls_flower.c fl_change out-of-bounds
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function fl_change of the file net/sched/cls_flower.c of the component cls_flower. Such manipulati