Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.338 | 0,9 % |
| ≥10 % | 22.175 | 5,7 % |
| <10 % | 362.843 | 93,2 % |
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. This article has been indexed from SecurityWeek Read the original article: Ivanti Patches Two More Zero-Days
Critical BeyondTrust Vulnerability Faces Fresh Exploitation Probes as Hackers Prepare for Mass Scanning
Fresh probes targeting CVE-2026-102764 have raised concerns that attacks against BeyondTrust Remote Support could spread beyond targeted espionage. Previdian reported two probes against decoy appliances in the United States and Europe, both
Auditing Node.js code for the CVE-2026-105483 TLS identity mismatch
Auditing Node.js code for the CVE-2026-105483 TLS identity mismatch A runtime patch closes CVE-2026-105483, but an audit can still reveal applications whose architecture makes the same identity mistake easy to repeat. The bug affected Node.
CVE-2026-68591 | MediaTek MT8883 privileges management (ALPS09608864/ALPS09327759 / EUVD-2026-114935)
A vulnerability was found in MediaTek MT2737, MT6813, MT6815, MT6835, MT6878, MT6879, MT6886, MT6895, MT6896, MT6897, MT6980, MT6983, MT6985, MT6990, MT8676, MT8755, MT8775, MT8792, MT8798, MT8863, MT8873 and MT8883 and classified as very c
CVE-2026-68590 | MediaTek MT8893 ip_stack out-of-bounds (MOLY01387180 / EUVD-2026-114934)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-120336 | VStarcam O-KAM Client 1.3.3.32 DevDll_925.dll FUN_10003EA0 stack-based overflow (EUVD-2026-115060)
A vulnerability classified as critical was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. This vul
CVE-2026-120334 | deepset-ai farm up to 0.8.0 Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained vocab_filename path traversal (EUVD-2026-114936)
A vulnerability described as problematic has been identified in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing
CVE-2026-120337 | VStarcam O-KAM SuperIPCam 1.3.3.32 P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free (EUVD-2026-115061)
A vulnerability, which was classified as critical, has been found in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation
CVE-2026-120335 | deepset-ai farm up to 0.8.0 Model Package Loader language_model.py WordEmbedding_LM.load embeddings_filename path traversal (EUVD-2026-115059)
A vulnerability classified as problematic has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/language_model.py of the component Model Package Loader. The manipulation of t
CVE-2026-120339 | mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php fname cross site scripting (EUVD-2026-115062)
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project and classified as problematic. This vulnerability affects unknown code of the file updatedetailsfromfaculty.php. Performing a manipulation of the argument fname resul
CVE-2026-74401 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 dlm use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. This affects an unknown part of the component dlm. Executing a manipulation can lead to use after free. This vulnerability
CVE-2026-74397 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 IB/mlx5 mlx5_ib_alloc_transport_domain allocation of resources
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function mlx5_ib_alloc_transport_domain of the component IB/mlx5. Such manipulation leads to allocation of reso
CVE-2026-74388 | Linux Kernel up to 6.18.39/7.1.4 ALSA snd_seq_oss_midi_putc use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.39/7.1.4. The impacted element is the function snd_seq_oss_midi_putc of the component ALSA. The manipulation results in use after free. This vulnera
CVE-2026-74356 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 vhost drivers/vhost/net.c vhost_get_avail_idx comparison
A vulnerability was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4 and classified as critical. This affects the function vhost_get_avail_idx of the file drivers/vhost/net.c of the component vhost. Executing a manipulation can lead to inc
CVE-2026-74350 | Linux Kernel ocfs2 fs/ocfs2/inode.c ocfs2_fast_symlink_read_folio use after free
A vulnerability classified as very critical has been found in Linux Kernel. This vulnerability affects the function ocfs2_fast_symlink_read_folio of the file fs/ocfs2/inode.c of the component ocfs2. The manipulation leads to use after free.
CVE-2026-74341 | Linux Kernel up to 7.1.4 wcn36xx heap-based overflow
A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. It has been rated as very critical. Affected by this vulnerability is an unknown functionality of the component wcn36xx. This manipulation causes heap-ba
CVE-2026-74338 | Linux Kernel BPF LSM Cgroup kernel/locking/rwsem.c bpf_get_dentry_xattr
A vulnerability categorized as critical has been discovered in Linux Kernel. This impacts the function bpf_get_dentry_xattr of the file kernel/locking/rwsem.c of the component BPF LSM Cgroup. The manipulation results in improper locking. Th
CVE-2026-74317 | Linux Kernel up to 7.1.4 ixgbe net/core/dev.c __netif_set_xps_queue memory corruption
A vulnerability marked as critical has been reported in Linux Kernel up to 7.1.4. The affected element is the function __netif_set_xps_queue of the file net/core/dev.c of the component ixgbe. The manipulation leads to memory corruption. Thi
CVE-2026-74302 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 hci_core hci_unregister_dev use after free
A vulnerability was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4 and classified as very critical. Affected is the function hci_unregister_dev of the component hci_core. Executing a manipulation can lead to use after free. This vulnerab
CVE-2020-23922 | giflib up to 5.1.4 gif2rgb.c DumpScreen2RGB heap-based overflow (Nessus ID 374842)
A vulnerability classified as critical has been found in giflib up to 5.1.4. This affects the function DumpScreen2RGB of the file gif2rgb.c. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2020-23922.
CVE-2019-14866 | cpio up to 2.12 TAR Archive input validation (RHSA-2020:3908 / Nessus ID 374841)
A vulnerability was found in cpio up to 2.12. It has been classified as critical. This impacts an unknown function of the component TAR Archive Handler. Performing a manipulation results in improper input validation. This vulnerability is r
CVE-2021-33560 | Libgcrypt up to 1.8.7/1.9.2 ElGamal Encryption timing discrepancy (Nessus ID 374844)
A vulnerability, which was classified as problematic, has been found in Libgcrypt up to 1.8.7/1.9.2. This impacts an unknown function of the component ElGamal Encryption. The manipulation leads to observable timing discrepancy. This vulnera
CVE-2019-25040 | Infinite Unbound up to 1.9.4 Compressed Name dname_pkt_copy infinite loop (Nessus ID 374849)
A vulnerability classified as problematic has been found in Infinite Unbound up to 1.9.4. This issue affects the function dname_pkt_copy of the component Compressed Name Handler. This manipulation causes infinite loop. This vulnerability is
CVE-2019-25037 | Unbound up to 1.9.4 Packet dname_pkt_copy denial of service (Nessus ID 374849)
A vulnerability labeled as problematic has been found in Unbound up to 1.9.4. Affected by this issue is the function dname_pkt_copy of the component Packet Handler. Executing a manipulation can lead to denial of service. This vulnerability
CVE-2019-25036 | Unbound up to 1.9.4 synth_cname denial of service (Nessus ID 374849)
A vulnerability identified as problematic has been detected in Unbound up to 1.9.4. Affected by this vulnerability is the function synth_cname. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-
CVE-2019-25033 | Unbound up to 1.9.4 ALIGN_UP Macro integer overflow (Nessus ID 374849)
A vulnerability was found in Unbound up to 1.9.4. It has been declared as critical. This affects an unknown function of the component ALIGN_UP Macro. The manipulation results in integer overflow. This vulnerability was named CVE-2019-25033.
CVE-2022-48334 | Google Nexus 6 Widevine Trustlet drm_verify_keys buffer overflow (EUVD-2022-51034)
A vulnerability classified as critical has been found in Google Nexus 6. Affected is the function drm_verify_keys of the component Widevine Trustlet. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as C
CVE-2022-48333 | Google Nexus 6 Widevine Trustlet drm_verify_keys buffer overflow (EUVD-2022-51033)
A vulnerability classified as critical was found in Google Nexus 6. Affected by this vulnerability is the function drm_verify_keys of the component Widevine Trustlet. Executing a manipulation can lead to buffer overflow. This vulnerability
CVE-2022-48332 | Google Nexus 6 Widevine Trustlet drm_save_keys buffer overflow (EUVD-2022-51032)
A vulnerability, which was classified as critical, has been found in Google Nexus 6. Affected by this issue is the function drm_save_keys of the component Widevine Trustlet. The manipulation leads to buffer overflow. This vulnerability is d
CVE-2022-48331 | Google Nexus 6 Widevine Trustlet drm_save_keys buffer overflow (EUVD-2022-51031)
A vulnerability, which was classified as critical, was found in Google Nexus 6. This affects the function drm_save_keys of the component Widevine Trustlet. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2
CVE-2022-48329 | MISP up to 2.4.165 app/Model/Attribute.php order behavioral workflow (EUVD-2022-51029)
A vulnerability classified as problematic has been found in MISP up to 2.4.165. Affected by this vulnerability is an unknown functionality of the file app/Model/Attribute.php. The manipulation of the argument order leads to enforcement of b
CVE-2022-48327 | Mapos 4.39.0 Relatorios.php cross site scripting (Issue 2010 / EUVD-2022-51027)
A vulnerability was found in Mapos 4.39.0 and classified as problematic. The impacted element is an unknown function of the file application/controllers/Relatorios.php. The manipulation of the argument... Weiterlesen
CVE-2026-106255 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. This impacts an unknown function of the component V8. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2026-106255. It is possibl
CVE-2026-106254 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability labeled as problematic has been found in Google Chrome. Impacted is an unknown function. The manipulation results in information disclosure. This vulnerability is identified as CVE-2026-106254. The attack is only possible wi
CVE-2026-106253 | Google Chrome up to 154.0.8037.97 Extensions improper authorization (WID-SEC-2026-3761)
A vulnerability described as problematic has been identified in Google Chrome. The impacted element is an unknown function of the component Extensions. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2
CVE-2026-106252 | Google Chrome up to 154.0.8037.97 Fonts comparison (WID-SEC-2026-3761)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown function of the component Fonts. Performing a manipulation results in incorrect comparison. This vulnerability is cataloged as CVE-2026-106252.
CVE-2026-106251 | Google Chrome up to 154.0.8037.97 Chromoting Remote Code Execution (WID-SEC-2026-3761)
A vulnerability marked as critical has been reported in Google Chrome. The affected element is an unknown function of the component Chromoting. This manipulation causes Remote Code Execution. This vulnerability is tracked as CVE-2026-106251
CVE-2026-106250 | Google Chrome up to 154.0.8037.97 Actor authorization (WID-SEC-2026-3761)
A vulnerability identified as critical has been detected in Google Chrome. This issue affects some unknown processing of the component Actor. The manipulation leads to missing authorization. This vulnerability is referenced as CVE-2026-1062
CVE-2026-106249 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. This affects an unknown function of the component Autofill. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2
CVE-2026-106248 | Google Chrome up to 154.0.8037.97 Bindings use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. Affected is an unknown function of the component Bindings. The manipulation results in use after free. This vulnerability is known as CVE-2026-106248. It is possible to
CVE-2026-106246 | Google Chrome up to 154.0.8037.97 Address Bar improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown part of the component Address Bar. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-106246.
CVE-2026-99109 | Linux Kernel up to 7.2.12 SMB Client CIFSSMBSetEA memory corruption
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.12. This affects the function CIFSSMBSetEA of the component SMB Client. The manipulation results in memory corruption. This vulnerability is reporte
CVE-2026-99107 | Linux Kernel up to 7.2.12 ntfs ntfs_attr_record_resize m buffer overflow
A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.12. Affected is the function ntfs_attr_record_resize of the component ntfs. The manipulation of the argument m leads to buffer overflow. This vulnerabil
CVE-2026-78845 | Aidot Smart Plug/Smart Light Bulb 1.01.32/3.15.21/3.30.17 UPnP code injection
A vulnerability classified as critical has been found in Aidot Smart Plug and Smart Light Bulb 1.01.32/3.15.21/3.30.17. This impacts an unknown function of the component UPnP. Performing a manipulation results in code injection. This vulner
CVE-2026-116888 | SemanticMediaWiki up to 7.3.0 GroupFormatter canonical_name cross site scripting
A vulnerability, which was classified as problematic, was found in SemanticMediaWiki up to 7.3.0. This impacts an unknown function of the component GroupFormatter. The manipulation of the argument canonical_name results in cross site script
CVE-2022-48326 | Mapos 4.39.0 Permissoes.php cross site scripting (Issue 2010 / EUVD-2022-51026)
A vulnerability, which was classified as problematic, has been found in Mapos 4.39.0. This issue affects some unknown processing of the file application/controllers/Permissoes.php. Performing a manipulation of the argument... Weiterlesen
CVE-2022-48325 | Mapos 4.39.0 Mapos.php cross site scripting (Issue 2010 / EUVD-2022-51025)
A vulnerability has been found in Mapos 4.39.0 and classified as problematic. The affected element is an unknown function of the file application/controllers/Mapos.php. The manipulation of the argument... Weiterlesen
CVE-2022-48324 | Mapos 4.39.0 Arquivos.php cross site scripting (Issue 2010 / EUVD-2022-51024)
A vulnerability marked as problematic has been reported in Mapos 4.39.0. This vulnerability affects unknown code of the file application/controllers/Arquivos.php. This manipulation of the argument pesquisa/data/data2/nome/descricao/idDocume
CVE-2022-48322 | Netgear MR60/MS60/R6900P/R7000P/R7960P/R8000P stack-based overflow (PSV-2022-0155 / EUVD-2022-51022)
A vulnerability labeled as critical has been found in Netgear MR60, MS60, R6900P, R7000P, R7960P and R8000P. This vulnerability affects unknown code. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is tr
CVE-2022-48311 | HP Deskjet 2540 CEP1FN1418BR Configuration Page cross site scripting (EUVD-2022-51011)
A vulnerability, which was classified as problematic, has been found in HP Deskjet 2540 CEP1FN1418BR. Affected by this vulnerability is an unknown functionality of the component Configuration Page. The manipulation leads to cross site scrip
CVE-2022-48310 | Sophos Connect 2.1 Technical Support Archives information disclosure (EUVD-2022-51010)
A vulnerability was found in Sophos Connect 2.1 and classified as problematic. Impacted is an unknown function of the component Technical Support Archives. Such manipulation leads to information disclosure. This vulnerability is listed as C
CVE-2026-106245 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. Affected is an unknown function of the component ANGLE. This manipulation causes uninitialized resource. The identification of this vulnerability is CVE-2026-1062
CVE-2026-106244 | Google Chrome up to 154.0.8037.97 Permissions access control (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, has been found in Google Chrome. The impacted element is an unknown function of the component Permissions. Performing a manipulation results in improper access controls. This vulnerability
CVE-2026-106243 | Google Chrome up to 154.0.8037.97 Proxy Auth information disclosure (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This impacts an unknown function of the component Proxy Auth. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-106243.
CVE-2026-106242 | Google Chrome up to 154.0.8037.97 Omnibox information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. The impacted element is an unknown function of the component Omnibox. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CV
CVE-2026-106241 | Google Chrome up to 154.0.8037.97 Search improper authorization (EUVD-2026-93679 / WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as critical. The affected element is an unknown function of the component Search. Performing a manipulation results in improper authorization. This vulnerability is known as CVE
CVE-2026-106240 | Google Chrome up to 154.0.8037.97 V8 type confusion (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. The affected element is an unknown function of the component V8. Such manipulation leads to type confusion. This vulnerability is documented as CVE-2026-106240. The attack c
CVE-2026-106239 | Google Chrome up to 154.0.8037.97 WebGL integer overflow (EUVD-2026-93812 / WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Impacted is an unknown function of the component WebGL. Such manipulation leads to integer overflow. This vulnerability is traded as CVE-2026-106239. The attack
CVE-2026-106238 | Google Chrome up to 154.0.8037.97 Fonts race condition (WID-SEC-2026-3761)
A vulnerability described as critical has been identified in Google Chrome. This issue affects some unknown processing of the component Fonts. The manipulation results in race condition. This vulnerability is cataloged as CVE-2026-106238. T
CVE-2026-106237 | Google Chrome up to 154.0.8037.97 Permissions information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Permissions. This manipulation causes information disclosure. This vulnerability