Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.337 | 0,9 % |
| ≥10 % | 22.178 | 5,7 % |
| <10 % | 362.841 | 93,2 % |
CVE-2026-98432
For those also getting annoyed with vendors not deploying a fix after giving a 9.8 rating, I found this great article with a generic NFT command that drops ip-options. The article also analyses the issue. I have managers in a state of panic
Android: SMS des Todes lässt Smartphones abstürzen – Google behebt schwere Sicherheitslücke in 14 bis 17
Google stopft regelmäßig Dutzende oder gar Hunderte Sicherheitslücken in Android und dennoch tauchen immer wieder neue Einfallstore auf, die bereits seit Jahren bestehen - jetzt ist erneut ein Fall bekannt geworden. Mit dem sogenannten Angr
CVE-2026-106279 | Google Chrome up to 154.0.8037.97 Passwords use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Affected by this issue is some unknown functionality of the component Passwords. Executing a manipulation can lead to use after free. This vulnerability is tracked as
CVE-2026-106278 | Google Chrome up to 154.0.8037.97 Select use after free (Nessus ID 363731 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Select. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-106278. The attack may be p
CVE-2026-106277 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability
CVE-2026-106276 | Google Chrome up to 154.0.8037.97 Payments input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. Affected is an unknown function of the component Payments. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CV
CVE-2026-106275 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. Impacted is an unknown function of the component GPU. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2026-10627
CVE-2026-106274 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. The affected element is an unknown function. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-106274. The attack may be ini
CVE-2026-106273 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability marked as problematic has been reported in Google Chrome. The impacted element is an unknown function of the component Video. Performing a manipulation results in uninitialized resource. This vulnerability was named CVE-2026
CVE-2026-106272 | Google Chrome up to 154.0.8037.97 Chromoting information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This issue affects some unknown processing of the component Chromoting. The manipulation leads to information disclosure. This vulnerability is documented as
CVE-2026-106271 | Google Chrome up to 154.0.8037.97 Workers improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This affects an unknown part of the component Workers. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-1
CVE-2026-106270 | Google Chrome up to 154.0.8037.97 WebAppInstalls improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This vulnerability affects unknown code of the component WebAppInstalls. Executing a manipulation can lead to improper authorization. This vulnerability is registered as
CVE-2026-106269 | Google Chrome up to 154.0.8037.97 CSS use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Affected by this issue is some unknown functionality of the component CSS. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-10
CVE-2026-104843 | astral-sh uv up to 0.12.17 Wheel Extraction path traversal (Nessus ID 374836)
A vulnerability classified as critical has been found in astral-sh uv up to 0.12.17. Affected by this issue is some unknown functionality of the component Wheel Extraction. Performing a manipulation results in path traversal. This vulnerabi
CVE-2025-30156 | Linux Kernel ceph improper authentication (Nessus ID 374838)
A vulnerability classified as very critical was found in Linux Kernel. The affected element is an unknown function of the component ceph. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2025-3
CVE-2026-98725 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 nvmet-auth fabrics-cmd-auth.c nvmet_auth_challenge out-of-bounds write (Nessus ID 374839)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5. Impacted is the function nvmet_auth_challenge of the file drivers/nvme/target/fabrics-cmd-auth.c of the component nvmet-auth. T
CVE-2021-38185 | GNU cpio up to 2.13 Pattern File dstring.c ds_fgetstr integer overflow (Nessus ID 374841)
A vulnerability classified as critical has been found in GNU cpio up to 2.13. This issue affects the function ds_fgetstr of the file dstring.c of the component Pattern File Handler. The manipulation leads to integer overflow. This vulnerabi
CVE-2026-118475 | Red Hat Enterprise Linux PNG Image Parser buffer overflow (Nessus ID 374858)
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the component PNG Image Parser. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-107651 | Red Hat Eye of GNOME 6/7/8/9 PNG Metadata Reader buffer overflow (Nessus ID 374858)
A vulnerability labeled as problematic has been found in Red Hat Eye of GNOME 6/7/8/9. This affects an unknown part of the component PNG Metadata Reader. Such manipulation leads to buffer overflow. This vulnerability is referenced as CVE-20
CVE-2026-15195 | apidevtools json-schema-ref-parser up to 15.3.5 lib/pointer.ts Refs.set/Pointer.set prototype pollution (Issue 421)
A vulnerability was found in apidevtools json-schema-ref-parser and classified as critical. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modificatio
Hackers Scan BeyondTrust Remote Support Systems for Actively Exploited Zero-Day Flaw
Scanning activity targeting BeyondTrust Remote Support appliances raises concerns that exploitation of CVE-2026-102764 is expanding beyond targeted intrusions to opportunistic attacks. Previdian reported two probes against its decoy systems
CVE-2024-7358 | Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows MSI Installer getscreen.msi temp file
A vulnerability classified as critical was found in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation o
CVE-2026-99163 | Linux Kernel up to 6.18.58/7.2.12 Histograms check_synth_field stack-based overflow
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.58/7.2.12. This impacts the function check_synth_field of the component Histograms. Such manipulation leads to stack-based buffer overflow. This vulnera
CVE-2026-99156 | Linux Kernel up to 6.18.58/7.2.12 scsi drivers/scsi/st.c st_remove/st_open use after free
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.58/7.2.12. This issue affects the function st_remove/st_open of the file drivers/scsi/st.c of the component scsi. Performing a manipulation results in use
CVE-2026-99154 | Linux Kernel up to 6.18.58/7.2.12 libiscsi beiscsi_parse_pdu itt comparison
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function beiscsi_parse_pdu of the component libiscsi. Executing a manipulation of the argument itt can le
CVE-2026-99148 | Linux Kernel up to 6.18.58/7.2.12 amdgpu drm/amdgpu amdgpu_gem_object_close ref_count race condition
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function amdgpu_gem_object_close of the file drm/amdgpu of the component amdgpu. The manipulation of the argument ref_coun
CVE-2026-99143 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse out-of-bounds write
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function predicate_parse of the component tracing. This manipulation causes out-of-bounds write. This vul
CVE-2026-99142 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse stack-based overflow
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as very critical. This affects the function predicate_parse of the component tracing. The manipulation leads to stack-based buffer overflow. This vulnerabilit
CVE-2026-99136 | Linux Kernel up to 6.18.58/7.2.12 dm-crypt crypt_dec_pending race condition
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.58/7.2.12. The affected element is the function crypt_dec_pending of the component dm-crypt. Such manipulation leads to race condition. This vulnera
CVE-2026-99131 | Linux Kernel up to 6.18.58/7.2.12 xfs ns_capable_noaudit privileges management
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been classified as problematic. Affected by this vulnerability is the function ns_capable_noaudit of the component xfs. Performing a manipulation results in improper pri
CVE-2026-99123 | Linux Kernel up to 6.18.58/7.2.12 vsock virtio virtio_transport_recv_pkt information disclosure
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function virtio_transport_recv_pkt of the component vsock virtio. The manipulation results in information disc
CVE-2026-99122 | Linux Kernel up to 6.18.58/7.2.12 vsock vmci_transport_recv_stream_cb input validation
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as critical. Impacted is the function vmci_transport_recv_stream_cb of the component vsock. This manipulation causes improper input validation. This vulnerabi
CVE-2026-99117 | Linux Kernel up to 6.18.58/7.2.12 Bridge Multicast __br_multicast_disable_port_ctx use after free
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. The impacted element is the function __br_multicast_disable_port_ctx of the component Bridge Multicast. This manipulation causes use after
CVE-2026-99116 | Linux Kernel up to 6.18.58/7.2.12 PSP sock_copy use after free
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function sock_copy of the component PSP. Executing a manipulation can lead to use after free. This vulnerability appears as CVE
CVE-2026-99112 | Linux Kernel up to 6.18.58/7.2.12 cls_flower net/sched/cls_flower.c fl_change out-of-bounds
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function fl_change of the file net/sched/cls_flower.c of the component cls_flower. Such manipulati
CVE-2026-99110 | Linux Kernel up to 6.18.58/7.2.12 SMB Client cifs_do_set_acl heap-based overflow
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function cifs_do_set_acl of the component SMB Client. Performing a manipulation results in heap-based buffer ove
CVE-2026-20593 | MediaTek MT8893 input validation (MOLY01707455 / EUVD-2026-115053)
A vulnerability identified as critical has been detected in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6
CVE-2026-20592 | MediaTek MT8883 Modem information disclosure (MOLY01744265 / EUVD-2026-115052)
A vulnerability labeled as problematic has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-20597 | MediaTek MT8893 Modem out-of-bounds (MOLY01758223 / EUVD-2026-115057)
A vulnerability described as critical has been identified in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT
CVE-2026-20596 | MediaTek Modem out-of-bounds (MOLY01758225 / EUVD-2026-115056)
A vulnerability marked as critical has been reported in MediaTek Modem. The impacted element is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20596. Remote exploitation of th
CVE-2026-20595 | MediaTek MT8911 out-of-bounds write (ALPS11263078 / EUVD-2026-115055)
A vulnerability categorized as critical has been discovered in MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6858, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897,
CVE-2026-20594 | MediaTek Modem out-of-bounds (MOLY01349680/MOLY01369097 / EUVD-2026-115054)
A vulnerability categorized as critical has been discovered in MediaTek Modem. The affected element is an unknown function. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20594. It is possible to
CVE-2026-20600 | MediaTek MT8883 denial of service (MOLY01416152 / EUVD-2026-114931)
A vulnerability classified as critical was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8875 and
CVE-2026-20599 | MediaTek MT8893 privileges management (MOLY01790985 / EUVD-2026-114930)
A vulnerability, which was classified as very critical, has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT683
CVE-2026-20598 | MediaTek MT8883 Modem integer overflow (MOLY01755742 / EUVD-2026-115058)
A vulnerability, which was classified as critical, was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863,
CVE-2026-68589 | MediaTek MT8893 out-of-bounds write (MOLY01320076 / EUVD-2026-114933)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689
CVE-2026-68588 | MediaTek MT8883 Modem integer overflow (MOLY01334054/MOLY01312486 / EUVD-2026-114932)
A vulnerability classified as critical has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-75913 | Hmbown CodeWhale up to 0.8.63 git_show tool rev argument injection
A vulnerability was found in Hmbown CodeWhale up to 0.8.63. It has been rated as problematic. The impacted element is the function git_show of the component git_show tool. This manipulation of the argument rev causes argument injection. Thi
CVE-2026-75857 | Hmbown CodeWhale up to 0.8.63 exec_shell_interact injection
A vulnerability labeled as critical has been found in Hmbown CodeWhale up to 0.8.63. The impacted element is the function exec_shell_interact. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-75857
CVE-2026-74600 | Linux Kernel up to 7.1.8 Page Table Check mm/page_table_check.c page_table_check_set/page_table_check_clear resource consumption (Nessus ID 339003 / WID-SEC-2026-2970)
A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.8. The impacted element is the function page_table_check_set/page_table_check_clear of the file mm/page_table_check.c of the component Page Table Check. The
CVE-2026-74599 | Linux Kernel up to 6.18.44/7.1.8 ptdump mm/ptdump.c ptdump_walk_pgd race condition (WID-SEC-2026-2970)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.44/7.1.8. The affected element is the function ptdump_walk_pgd of the file mm/ptdump.c of the component ptdump. The manipulation leads to race
CVE-2026-74544 | Linux Kernel up to 7.1.7/7.2-rc5 cls_u32 net/sched/cls_u32.c u32_change offshift out-of-bounds
A vulnerability classified as very critical was found in Linux Kernel up to 7.1.7/7.2-rc5. This vulnerability affects the function u32_change of the file net/sched/cls_u32.c of the component cls_u32. Such manipulation of the argument offshi
CVE-2026-74537 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 Bluetooth iso_conn_ready use after free (Nessus ID 335855)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5. The impacted element is the function iso_conn_ready of the component Bluetooth. Such manipulation leads to use after free. This vulnerabili
CVE-2026-74527 | Linux Kernel up to 7.1.7/7.2-rc5 octeontx2-af cgx_get_pkind/rvu_cgx_is_pkind_config_permitted state issue
A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.7/7.2-rc5. Affected by this issue is the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation leads to
CVE-2026-74417 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 radeon radeon_align_pitch integer overflow
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function radeon_align_pitch of the component radeon. The manipulation results in integer overflow. This v
CVE-2026-74406 | Linux Kernel up to 7.1.4 vxlan vxlan_gro_prepare_receive null pointer dereference
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Impacted is the function vxlan_gro_prepare_receive of the component vxlan. This manipulation causes null pointer dereference.
CVE-2026-74405 | Linux Kernel up to 6.18.39/7.1.4 OPP dev_pm_opp_add_dynamic race condition
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.39/7.1.4. This issue affects the function dev_pm_opp_add_dynamic of the component OPP. This manipulation causes race condition. This vulnerability is hand
CVE-2026-73198 | Red Hat FreeIPA I18n /ipa/i18n_messages memory allocation (EUVD-2026-63244 / Nessus ID 350078)
A vulnerability marked as problematic has been reported in Red Hat FreeIPA. This vulnerability affects unknown code of the file /ipa/i18n_messages of the component I18n. This manipulation causes uncontrolled memory allocation. The identific
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the