Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 753 | 0,2 % |
| ≥50 % | 3.281 | 0,9 % |
| ≥10 % | 21.931 | 5,7 % |
| <10 % | 359.741 | 93,3 % |
Closing the configuration gap after CVE-2026-96888
Closing the configuration gap after CVE-2026-96888 The issue in operational terms CVE-2026-96888 affects BIND resolvers that process an NXDOMAIN response when a redirect zone and strict QNAME minimization are both configured. The result is
CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue
A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. It has been declared as problematic. The affected element is the function regulator_handle_critical of the component Hwmon Pmbus. Such manipulation of th
CVE-2026-72383 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 sctp sctp_free_addr_wq use after free
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as very critical. This issue affects the function sctp_free_addr_wq of the component sctp. Performing a manipulation results in use after free. This vu
CVE-2026-72382 | Linux Kernel up to 7.2-rc1 ksmbd parse_dacl integer overflow
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. Affected is the function parse_dacl of the component ksmbd. Such manipulation leads to integer overflow. This vulnerabili
CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write
A vulnerability was found in Linux Kernel up to 7.1.4/7.2-rc1. It has been declared as very critical. This vulnerability affects the function pvcalls_front_event_handler of the file class.c of the component xen/pvcalls. The manipulation of
CVE-2026-72375 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 afs lib/debugobjects.c afs_lock_work race condition
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as problematic. This impacts the function afs_lock_work of the file lib/debugobjects.c of the component afs. The manipulation leads to race condition.
CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc2. The impacted element is the function tcf_pedit_offload_act_setup of the file net/sched/act_pedit.c of the component act_pedit. E
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
A vulnerability described as problematic has been identified in Linux Kernel up to 7.1.4/7.2-rc2. Impacted is the function pcie_flr of the file drivers/net/ethernet/marvell/liquidio/liquidio_vf.c of the component liquidio. Executing a manip
CVE-2026-72320 | Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2 nft_lookup nft_lookup_eval privileges management
A vulnerability classified as very critical was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2. This issue affects the function nft_lookup_eval of the component nft_lookup. Executing a manipulation can lead to improper privilege
CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference
A vulnerability classified as critical was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.4/7.2-rc1. This affects the function nft_fib_validate of the component netfilter. The manipulation results in null pointer dereference. This
CVE-2022-48298 | Huawei EMUI/Magic UI 0.99.7.0 Geofencing out-of-bounds (EUVD-2022-50998)
A vulnerability identified as problematic has been detected in Huawei EMUI and Magic UI 0.99.7.0. This affects an unknown function of the component Geofencing. The manipulation leads to out-of-bounds read. This vulnerability is documented a
CVE-2022-48297 | Huawei EMUI/Magic UI Geofencing out-of-bounds (EUVD-2022-50997)
A vulnerability categorized as problematic has been discovered in Huawei EMUI and Magic UI. The impacted element is an unknown function of the component Geofencing. Executing a manipulation can lead to out-of-bounds read. This vulnerability
CVE-2022-48296 | Huawei EMUI/Magic UI SystemUI permission (EUVD-2022-50996)
A vulnerability was found in Huawei EMUI and Magic UI. It has been declared as critical. Impacted is an unknown function of the component SystemUI. Such manipulation leads to permission issues. This vulnerability is listed as CVE-2022-48296
CVE-2022-48295 | Huawei IHwAntiMalPlugin Interface permission (EUVD-2022-50995)
A vulnerability was found in Huawei IHwAntiMalPlugin Interface and classified as critical. The affected element is an unknown function. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2022-48295. The at
CVE-2022-48291 | Huawei Smart Phone Bluetooth improper authentication (EUVD-2022-50991)
A vulnerability, which was classified as critical, was found in Huawei Smart Phone. Affected by this issue is some unknown functionality of the component Bluetooth Module. Executing a manipulation can lead to improper authentication. This v
CVE-2022-48286 | Huawei EMUI/Magic UI Multi-Screen Collaboration authorization (EUVD-2022-50986)
A vulnerability labeled as problematic has been found in Huawei EMUI and Magic UI. This impacts an unknown function of the component Multi-Screen Collaboration Module. The manipulation results in incorrect authorization. This vulnerability
Sicherheitslücke bei ChatGPT: Manipulierter Link konnte private Chats offenlegen - CHIP
Cyber-Security. Sicherheitslücke bei ChatGPT: Manipulierter Link konnte ... Wie das IT-Sicherheitsportal „The Hacker News“ berichtet, stufte ... Weiterlesen
CVE-2026-85893 | Microsoft Edge up to 152.0.4191.53 use after free
A vulnerability labeled as critical has been found in Microsoft Edge. This affects an unknown function. The manipulation results in use after free. This vulnerability is reported as CVE-2026-85893. The attack can be launched remotely. No ex
CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872)
A vulnerability labeled as very critical has been found in Red Hat Enterprise Linux, OpenShift Container Platform and OpenStack Platform. This issue affects some unknown processing of the file hw/i386/vapic.c of the component VAPIC. The man
CVE-2026-77176 | Red Hat Kata Containers genpolicy information disclosure
A vulnerability classified as problematic was found in Red Hat Kata Containers. This vulnerability affects unknown code of the component genpolicy. The manipulation results in information disclosure. This vulnerability is reported as CVE-20
CVE-2026-73197 | Red Hat FreeIPA Migration migration.py resource consumption (EUVD-2026-63240 / Nessus ID 350078)
A vulnerability categorized as critical has been discovered in Red Hat FreeIPA. Affected by this vulnerability is an unknown functionality of the file /ipa/migration/migration.py of the component Migration Handler. Executing a manipulation
CVE-2026-69399 | Microsoft Azure Arc privileges management
A vulnerability, which was classified as critical, was found in Microsoft Azure Arc. The impacted element is an unknown function. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-69399.
CVE-2026-69304 | Microsoft .NET/ASP.NET Core resource consumption (Nessus ID 344384 / WID-SEC-2026-3242)
A vulnerability classified as problematic was found in Microsoft .NET and ASP.NET Core. This impacts an unknown function. The manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-69304. The attack may be
CVE-2026-67238 | RabbitMQ up to 4.2.6/4.3.0 Pid Codec rabbit_pid_codec:decompose_from_binary node-name heap-based overflow
A vulnerability, which was classified as problematic, was found in RabbitMQ up to 4.2.6/4.3.0. This affects the function rabbit_pid_codec:decompose_from_binary of the component Pid Codec. Such manipulation of the argument node-name leads to
CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management
A vulnerability identified as problematic has been detected in vitessio Vitess up to 24.0.2. This vulnerability affects the function vrlogStatsHandler of the file go/vt/vttablet/tabletmanager/vreplication/vrlog.go of the component Debug End
CVE-2026-18147 | FreeIPA cross site scripting (EUVD-2026-75108 / Nessus ID 350078)
A vulnerability was found in FreeIPA. It has been classified as problematic. Impacted is an unknown function. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2026-18147. The attack can be initiated remote
CVE-2026-13097 | Red Hat FreeIPA Kerberos Principal Name Uniqueness privileges management (EUVD-2026-63243 / Nessus ID 350078)
A vulnerability labeled as very critical has been found in Red Hat FreeIPA. This affects an unknown part of the component Kerberos Principal Name Uniqueness. The manipulation results in improper privilege management. This vulnerability was
CVE-2026-11861 | Red Hat FreeIPA Ticket Granting Service certificate validation (EUVD-2026-63245 / Nessus ID 350078)
A vulnerability classified as problematic has been found in Red Hat FreeIPA. Impacted is an unknown function of the component Ticket Granting Service. Performing a manipulation results in improper certificate validation. This vulnerability
CVE-2026-106223 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. The affected element is an unknown function of the component GPU. Such manipulation leads to uninitialized pointer. This vulnerability is traded as CVE-2026-10
CVE-2026-106222 | Google Chrome up to 154.0.8037.97 Sync access control (WID-SEC-2026-3761)
A vulnerability labeled as problematic has been found in Google Chrome. This issue affects some unknown processing of the component Sync. Executing a manipulation can lead to improper access controls. This vulnerability is registered as CVE
CVE-2026-106221 | Google Chrome up to 154.0.8037.97 WebAPKs access control (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebAPKs. The manipulation results in improper access controls. This vulnerability is i
CVE-2026-106220 | Google Chrome up to 154.0.8037.97 Passwords information disclosure (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. This affects an unknown part of the component Passwords. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-106220. Th
CVE-2026-106217 | Google Chrome up to 154.0.8037.97 Google Lens improper authorization (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. This vulnerability affects unknown code of the component Google Lens. Performing a manipulation results in improper authorization. This vulnerability is cataloged
CVE-2026-106216 | Google Chrome up to 154.0.8037.97 ReadingList cross-site request forgery (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, was found in Google Chrome. This affects an unknown function of the component ReadingList. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-
CVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as critical. This impacts an unknown function of the component ANGLE. This manipulation causes uninitialized resource. This vulnerability is registered as CVE-2026-106215. Remot
CVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761)
A vulnerability marked as problematic has been reported in Google Chrome. The affected element is an unknown function of the component Proxy. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2026
CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761)
A vulnerability labeled as problematic has been found in Google Chrome. Impacted is an unknown function of the component WebAudio. Such manipulation leads to race condition. This vulnerability is uniquely identified as CVE-2026-106213. The
CVE-2026-106212 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. This issue affects some unknown processing of the component Autofill. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-1
CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761)
A vulnerability categorized as critical has been discovered in Google Chrome. This vulnerability affects unknown code of the component TabStrip. The manipulation results in use after free. This vulnerability is known as CVE-2026-106211. It
CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Affected is an unknown function of the component Scroll. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-106210. The a
CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. This affects an unknown part of the component Mobile. The manipulation leads to clickjacking. This vulnerability is traded as CVE-2026-106209. It is possible to i
CVE-2026-106208 | Google Chrome up to 154.0.8037.97 improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2026-10620
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component V8. Performing a manipulation results in race condition. This vulnerability is repor
CVE-2026-120281 | WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip stack-based overflow
A vulnerability was found in WAVLINK WN536AX6-A V260507. It has been declared as very critical. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results
CVE-2026-72213 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 Hugetlb Cgroup mm/page_counter.c alloc_hugetlb_folio integer overflow
A vulnerability has been found in Linux Kernel up to 6.12.100/6.18.39/7.1.4 and classified as very critical. This vulnerability affects the function alloc_hugetlb_folio of the file mm/page_counter.c of the component Hugetlb Cgroup. This man
CVE-2026-72203 | Linux Kernel up to 7.1.4 NTFS attrib.c ntfs_mft_writepages deadlock (EUVD-2026-58961)
A vulnerability classified as critical has been found in Linux Kernel up to 7.1.4. The affected element is the function ntfs_mft_writepages of the file attrib.c of the component NTFS. Performing a manipulation results in deadlock. This vuln
CVE-2026-72200 | Linux Kernel ntfs integer overflow (EUVD-2026-58958)
A vulnerability described as very critical has been identified in Linux Kernel. Affected by this vulnerability is an unknown functionality of the component ntfs. The manipulation results in integer overflow. This vulnerability is cataloged
CVE-2026-72198 | Linux Kernel up to 7.1.4 ntfs dir.c ntfs_inode_sync_standard_information non_resident improper synchronization (EUVD-2026-58956)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.4. Impacted is the function ntfs_inode_sync_standard_information of the file dir.c of the component ntfs. Performing a manipulation of the argu
CVE-2026-72162 | Linux Kernel up to 6.18.39/7.1.4 ocfs2 ocfs2_sum_rightmost_rec l_next_free_rec/l_recs out-of-bounds
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4. It has been rated as critical. Impacted is the function ocfs2_sum_rightmost_rec of the component ocfs2. The manipulation of the argument l_next_free_rec/l_recs leads to out-of-b
CVE-2026-72144 | Linux Kernel up to 6.6.147/6.12.96/6.18.39/7.1.4 dell-laptop dell_init initialization
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.147/6.12.96/6.18.39/7.1.4. This affects the function dell_init of the component dell-laptop. This manipulation causes improper initialization. The identif
CVE-2026-72130 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 nvmet-auth nvmet_execute_auth_receive out-of-bounds write (Nessus ID 342234)
A vulnerability has been found in Linux Kernel up to 6.12.100/6.18.39/7.1.4 and classified as very critical. This issue affects the function nvmet_execute_auth_receive of the component nvmet-auth. Performing a manipulation results in out-of
CVE-2026-72009 | Linux Kernel up to 6.18.41/7.1.4/7.2-rc3 pmdomain race condition (WID-SEC-2026-2852)
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.41/7.1.4/7.2-rc3. This vulnerability affects unknown code of the component pmdomain. Such manipulation leads to race condition. This vulnerability is traded as C
CVE-2026-68471 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 Wifi Ieee80211 Mle ieee80211_mle_size_ok input validation (WID-SEC-2026-2852)
A vulnerability has been found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 and classified as very critical. Impacted is the function ieee80211_mle_size_ok of the component Wifi Ieee80211 Mle. The manipulation leads to improper input validat
CVE-2026-13002 | Red Hat Enterprise Linux/OpenShift Container Platform NSEC NSEC3 Bitmap Parsing infinite loop (Nessus ID 335458)
It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry. Weiterlesen
CVE-2026-73608 | Siyuan Note SiYuan up to 3.7.3 getAttributeViewSearchTarget improper authorization
A vulnerability classified as problematic was found in Siyuan Note SiYuan up to 3.7.3. This issue affects some unknown processing of the file /api/av/getAttributeViewSearchTarget. The manipulation results in improper authorization. This vul
CVE-2026-72814 | actix actix-files up to 0.6.9 Files::new serve_from information disclosure
A vulnerability, which was classified as problematic, was found in actix actix-files up to 0.6.9. The affected element is the function Files::new. The manipulation of the argument serve_from results in information disclosure. This vulnerabi
CVE-2026-72791 | siyuan-note SiYuan up to 3.7.3 AttributeViewFieldViews endpoint getAttributeViewFieldViews avID information disclosure
A vulnerability, which was classified as problematic, was found in siyuan-note SiYuan up to 3.7.3. This affects an unknown function of the file /api/av/getAttributeViewFieldViews of the component AttributeViewFieldViews endpoint. Executing
CVE-2026-71408 | Fortinet FortiOS prior 6.4.16/7.0.19/7.2.13/7.4.12/7.6.6 allocation of resources
A vulnerability was found in Fortinet FortiOS. It has been classified as critical. This affects an unknown part. Performing a manipulation results in allocation of resources. This vulnerability is known as CVE-2026-71408. Remote exploitatio
CVE-2026-70354 | Microsoft .NET/Visual Studio out-of-bounds write (EUVD-2026-56770 / Nessus ID 341336)
A vulnerability described as problematic has been identified in Microsoft .NET and Visual Studio. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds write. This vulnerability is handled as CVE-202
CVE-2026-68807 | Microsoft Office up to LTSC for Mac 2024 buffer overflow (Nessus ID 334691)
A vulnerability categorized as problematic has been discovered in Microsoft Office. The impacted element is an unknown function. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-68807. Local