Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 747 | 0,2 % |
| ≥50 % | 3.250 | 0,8 % |
| ≥10 % | 22.087 | 5,8 % |
| <10 % | 356.668 | 93,2 % |
CVE-2026-106181 | Google Chrome up to 154.0.8037.97 DevTools information disclosure (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. The affected element is an unknown function of the component DevTools. This manipulation causes information disclosure. The identification of this vulnerability i
CVE-2026-106180 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. Performing a manipulation results in permissive cross-domain policy with untrusted domains. This vul
CVE-2026-106179 | Google Chrome up to 154.0.8037.97 WebAppInstalls (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. Impacted is an unknown function of the component WebAppInstalls. The manipulation results in an unknown weakness. This vulnerability was named CVE-2026-106179.
CVE-2026-102322 | Google Chrome up to 154.0.8037.97 SiteIsolation improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This issue affects some unknown processing of the component SiteIsolation. The manipulation leads to improper authorization. This vulnerability is uniquely identifie
CVE-2026-102998 | py-pdf Pypdf up to 6.18.x Appearance Stream _appearance_stream.py infinite loop (WID-SEC-2026-4024)
A vulnerability labeled as problematic has been found in py-pdf Pypdf up to 6.18.x. Impacted is an unknown function of the file pypdf/generic/_appearance_stream.py of the component Appearance Stream. Executing a manipulation can lead to inf
CVE-2026-102994 | py-pdf pypdf up to 6.17.x PDF Reader pypdf/_reader.py read_until_whitespace resource consumption (WID-SEC-2026-4024)
A vulnerability marked as problematic has been reported in py-pdf pypdf up to 6.17.x. Affected is the function read_until_whitespace of the file pypdf/_reader.py of the component PDF Reader. The manipulation leads to resource consumption. T
CVE-2026-63908 | Linux Kernel up to 7.0.11 Atmel Mxt Ts mxt_prepare_cfg_mem infinite loop
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as critical. This vulnerability affects the function mxt_prepare_cfg_mem of the component Atmel Mxt Ts. The manipulation results in infinite loop. This vulnerability was
CVE-2026-63907 | Linux Kernel up to 7.0.11 Uio Pci Generic Sva probe double free
A vulnerability has been found in Linux Kernel up to 7.0.11 and classified as critical. Affected by this vulnerability is the function probe of the component Uio Pci Generic Sva. The manipulation leads to double free. This vulnerability is
CVE-2026-63906 | Linux Kernel up to 7.0.11 Musb omap2430_probe np use after free
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. Affected is the function omap2430_probe of the component Musb. Executing a manipulation of the argument np can l
CVE-2026-63905 | Linux Kernel up to 7.0.11 Usbip Vudc vudc_remove use after free
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.0.11. This impacts the function vudc_remove of the component Usbip Vudc. Performing a manipulation results in use after free. This vulnerability is re
CVE-2026-63901 | Linux Kernel up to 7.0.11 USB Serial Digi Acceleport memory corruption
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. The impacted element is an unknown function of the component USB Serial Digi Acceleport. This manipulation causes memory corruption. This vulnerability
CVE-2026-63898 | Linux Kernel up to 7.0.11 Mct U232 mct_u232.c memory corruption
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.0.11. This issue affects some unknown processing of the file drivers/usb/serial/mct_u232.c of the component Mct U232. Executing a manipulation can lead to memor
CVE-2026-120229 | WAVLINK WN553X1-B 260403_2.0.0 /bin/ioos sub_416B50 file_id os command injection
A vulnerability marked as very critical has been reported in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. This vuln
CVE-2026-120228 | WAVLINK WN553X1-B V260403_2.0.0 ioos Service /bin/ioos sub_416D88 group_id/group_name os command injection
A vulnerability labeled as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument gro
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connec
CVE-2026-85330 | Microsoft Edge up to 154.0.4258.62 improper authorization (EUVD-2026-112935)
A vulnerability was found in Microsoft Edge. It has been rated as problematic. The affected element is an unknown function. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-85330. The attack may be ini
CVE-2026-96187 | Microsoft Edge up to 154.0.4258.62 type confusion (EUVD-2026-112937)
A vulnerability was found in Microsoft Edge. It has been declared as problematic. This vulnerability affects unknown code. The manipulation results in type confusion. This vulnerability is cataloged as CVE-2026-96187. The attack may be laun
CVE-2026-88090 | Microsoft Edge up to 153.0.4234.46 type confusion (EUVD-2026-113164)
A vulnerability, which was classified as critical, has been found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. This manipulation causes type confusion. This vulnerability is tracked as CVE-2026-88090. The a
CVE-2026-85899 | Microsoft Edge up to 154.0.4258.37 use after free (EUVD-2026-112936)
A vulnerability, which was classified as problematic, was found in Microsoft Edge. Affected by this issue is some unknown functionality. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-85899. The attack m
CVE-2026-96196 | Microsoft Edge Chromium access control (EUVD-2026-112938)
A vulnerability categorized as critical has been discovered in Microsoft Edge. This vulnerability affects unknown code of the component Chromium. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-
CVE-2026-88078 | Microsoft Edge input validation (EUVD-2026-112940)
A vulnerability was found in Microsoft Edge. It has been rated as critical. This affects an unknown part. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-88078. The attack may be initiated remotely
CVE-2026-62765 | Microsoft Edge up to 148.0.3967.70 type confusion (EUVD-2026-111398)
A vulnerability has been found in Microsoft Edge and classified as critical. The impacted element is an unknown function. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2026-62765. The attack is p
CVE-2026-88077 | Microsoft Edge up to 154.0.4258.37 integer overflow (EUVD-2026-112939)
A vulnerability has been found in Microsoft Edge and classified as critical. This affects an unknown part. Performing a manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-88077. It is possible to initiate
CVE-2026-83943 | Microsoft Azure API Center information disclosure (EUVD-2026-95395 / WID-SEC-2026-3834)
A vulnerability was found in Microsoft Azure API Center. It has been declared as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-8
CVE-2026-120199 | LearnHouse up to 1.1.0 Assignment API user_id improper authorization (EUVD-2026-114720)
A vulnerability, which was classified as problematic, has been found in LearnHouse up to 1.1.0. Impacted is an unknown function of the component Assignment API. This manipulation of the argument user_id causes improper authorization. This v
CVE-2026-102212 | Opengear ACM7000/CM7100/IM7200 up to 5.5.2 Content-Disposition index.cgi name buffer overflow (EUVD-2026-114719)
A vulnerability was found in Opengear ACM7000, CM7100 and IM7200 up to 5.5.2 and classified as very critical. Impacted is an unknown function of the file index.cgi of the component Content-Disposition. Such manipulation of the argument Name
CVE-2026-120202 | Highflame AI ramparts up to 0.8.10 Bundle Scanner collect_bundle_siblings/walk_bundle_subdir input validation (EUVD-2026-114723)
A vulnerability identified as problematic has been detected in Highflame AI ramparts up to 0.8.10. Affected is the function collect_bundle_siblings/walk_bundle_subdir of the component Bundle Scanner. This manipulation causes improper input
CVE-2026-120201 | Dromara Jpom up to 2.11.12 Condition parser JPOM-USER-TOKEN improper authentication (EUVD-2026-114722)
A vulnerability classified as critical has been found in Dromara Jpom up to 2.11.12. This vulnerability affects unknown code of the component Condition parser. The manipulation of the argument JPOM-USER-TOKEN leads to improper authenticatio
CVE-2026-120200 | gnmyt Nexterm up to 1.2.2-BETA Session Lifecycle missing authentication (EUVD-2026-114721)
A vulnerability marked as problematic has been reported in gnmyt Nexterm up to 1.2.2-BETA. Affected by this issue is some unknown functionality of the component Session Lifecycle. Performing a manipulation results in missing authentication.
CVE-2026-120204 | DeepSeek-AI DeepInfer up to 0.1.0 Profile Endpoint output_dir path traversal (EUVD-2026-114725)
A vulnerability was found in DeepSeek-AI DeepInfer up to 0.1.0. It has been rated as critical. This affects an unknown function of the component Profile Endpoint. The manipulation of the argument output_dir leads to path traversal. This vul
CVE-2026-120203 | ShowDoc up to 3.9.5 Mock feature MockController::add code injection (EUVD-2026-114724)
A vulnerability classified as very critical was found in ShowDoc up to 3.9.5. This issue affects the function MockController::add of the component Mock feature. The manipulation results in code injection. This vulnerability is identified as
CVE-2026-120207 | lia Page Module up to 2.0.3 Delete Routes cross-site request forgery (EUVD-2026-114728)
A vulnerability was found in lia Page Module up to 2.0.3 and classified as problematic. This affects an unknown function of the component Delete Routes. Executing a manipulation can lead to cross-site request forgery. This vulnerability is
CVE-2026-120206 | Thelia up to 3.1.x Back Office setToggleVisibilityAction/updatePositionAction cross-site request forgery (EUVD-2026-114727)
A vulnerability has been found in Thelia up to 3.1.x and classified as problematic. The impacted element is the function setToggleVisibilityAction/updatePositionAction of the component Back Office. Performing a manipulation results in cross
CVE-2026-120205 | Thelia up to 3.0.x Customer getSummary name cross site scripting (EUVD-2026-114726)
A vulnerability, which was classified as problematic, was found in Thelia up to 3.0.x. The affected element is the function ForSomeCustomers::getSummary of the component Customer. Such manipulation of the argument Name leads to cross site s
CVE-2026-120210 | FFmpeg up to 9.0.2 IMF demuxer ASSETMAP path traversal (EUVD-2026-114731)
A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is an unknown functionality of the component IMF demuxer. Such manipulation of the argument ASSETMAP leads to path traversal. This v
CVE-2026-120208 | strukturag libheif up to 1.23.2 HEIF Decoder processTile buffer overflow (EUVD-2026-114729)
A vulnerability described as critical has been identified in strukturag libheif up to 1.23.2. This affects the function unc_decoder_mixed_interleave::processTile of the component HEIF Decoder. Executing a manipulation can lead to buffer ove
CVE-2026-120209 | anji-plus AJ-Report up to 1.7.1 testTransform endpoint improper authentication (EUVD-2026-114730)
A vulnerability categorized as critical has been discovered in anji-plus AJ-Report up to 1.7.1. This impacts an unknown function of the component testTransform endpoint. The manipulation results in improper authentication. This vulnerabilit
CVE-2026-63880 | Linux Kernel up to 6.18.34/7.0.11 Amdgpu amdgpu_gem_op_ioctl num_entries denial of service
A vulnerability was found in Linux Kernel up to 6.18.34/7.0.11. It has been declared as problematic. Affected by this vulnerability is the function amdgpu_gem_op_ioctl of the component Amdgpu. The manipulation of the argument num_entries re
CVE-2026-63878 | Linux Kernel up to 6.18.34/7.0.11 amdgpu amdgpu_gem.c kvzalloc allocation of resources
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.34/7.0.11. Affected by this vulnerability is the function kvzalloc of the file amdgpu_gem.c of the component amdgpu. Executing a manipulation can lead to allocat
CVE-2026-63877 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Dz serial_base_ctrl_add null pointer dereference
A vulnerability described as problematic has been identified in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. This affects the function serial_base_ctrl_add of the component Dz. Such manipulation leads to null pointer dereference. This
CVE-2026-63876 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Zs serial_base_ctrl_add null pointer dereference
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. Affected by this vulnerability is the function serial_base_ctrl_add of the component Zs. The manipulation results in null pointer de
CVE-2026-63874 | Linux Kernel up to 6.18.35/7.0.12 MCTP USB ndo_stop improper synchronization
A vulnerability was found in Linux Kernel up to 6.18.35/7.0.12. It has been classified as very critical. The impacted element is the function ndo_stop of the component MCTP USB. This manipulation causes improper synchronization. This vulner
CVE-2026-63873 | Linux Kernel up to 6.18.35/7.0.12 amdxdna amdxdna_aie2_v.c aie2_populate_range memory leak
A vulnerability was found in Linux Kernel up to 6.18.35/7.0.12 and classified as very critical. This impacts the function aie2_populate_range of the file drivers/accel/amdxdna/amdxdna_aie2_v.c of the component amdxdna. Such manipulation lea
CVE-2026-63856 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This affects an unknown function of the file drm/amdgpu/vcn of the component Vcn Encoder Decoder. Executing a manipulatio
CVE-2026-63855 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. Affected by this vulnerability is an unknown functionality of the file drm/amdgpu/vcn of the component Vcn Encoder D
CVE-2026-63853 | Linux Kernel up to 6.18.32/7.0.9 Vcn encoder drm/amdgpu/vcn Local Privilege Escalation
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.32/7.0.9. This impacts an unknown function of the file drm/amdgpu/vcn of the component Vcn encoder. Performing a manipulation results in Local Privilege E
Zero-Day-Exploit erkennen: 14 Schritte, 75 Min [2026] - shattered.io
GamingCybersicherheitKI &amp; Machine LearningHardwareKryptographiePrivatsphäreKryptowährungSoftwareEsportsCasino · Startseite · Cybersicherheit. Zero-Day ... Weiterlesen
CVE-2026-61871 | ImageMagick prior 7.1.2-26/6.9.13-51 ICON decoder memory leak
A vulnerability described as problematic has been identified in ImageMagick. This impacts an unknown function of the component ICON decoder. Executing a manipulation can lead to memory leak. This vulnerability is registered as CVE-2026-6187
CVE-2026-58660 | Kanboard up to 1.2.51 Kanban Board Drag-and-Drop Endpoint save project_id/task_id information disclosure
A vulnerability classified as problematic has been found in Kanboard up to 1.2.51. This affects the function Save of the component Kanban Board Drag-and-Drop Endpoint. The manipulation of the argument project_id/task_id leads to information
CVE-2024-58366 | SurrealDB up to 1.1.0 Exception throw_type format string
A vulnerability, which was classified as critical, has been found in SurrealDB up to 1.1.0. Affected by this issue is the function throw_type of the component Exception. Performing a manipulation results in format string. This vulnerability
CVE-2024-58363 | SurrealDB up to 1.5.3 Database Switch use $auth improper authorization
A vulnerability was found in SurrealDB up to 1.5.3 and classified as critical. Affected by this issue is the function use of the component Database Switch. Executing a manipulation of the argument $auth can lead to improper authorization. T
CVE-2023-54366 | SurrealDB up to 1.0.0 permission
A vulnerability marked as critical has been reported in SurrealDB up to 1.0.0. Impacted is an unknown function. Performing a manipulation results in permission issues. This vulnerability is known as CVE-2023-54366. Remote exploitation of th
CVE-2026-99164 | Linux Kernel up to 7.2.12 SPI Driver dma_len use after free (EUVD-2026-111916)
A vulnerability classified as critical was found in Linux Kernel up to 7.2.12. The affected element is an unknown function of the component SPI Driver. Executing a manipulation of the argument dma_len can lead to use after free. This vulner
CVE-2026-99167 | Linux Kernel up to 6.18.58/7.2.12 Traffic Control Action __tcf_action_put use after free (EUVD-2026-111919)
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. Impacted is the function __tcf_action_put of the component Traffic Control Action. The manipulation results in use after free. This vulnerabilit
CVE-2026-78189 | WebDyne up to 3.21 PSGI API path traversal (EUVD-2026-114715)
A vulnerability, which was classified as critical, has been found in WebDyne up to 3.21. This affects an unknown part of the component PSGI API. The manipulation leads to path traversal. This vulnerability is listed as CVE-2026-78189. The a
CVE-2026-78188 | WebDyne up to 3.21 Session cookie httponly flag (EUVD-2026-114714)
A vulnerability classified as problematic was found in WebDyne up to 3.21. Affected by this issue is some unknown functionality of the component Session. Executing a manipulation can lead to cookie without 'httponly' flag. This vu
CVE-2026-78192 | WebDyne up to 3.021 Source Viewer webdyne.psgi source information disclosure (EUVD-2026-114718)
A vulnerability classified as problematic has been found in WebDyne up to 3.021. Affected by this vulnerability is an unknown functionality of the file webdyne.psgi of the component Source Viewer. Performing a manipulation of the argument S
CVE-2026-78191 | ASPEER WebDyne up to 3.021 unrestricted upload (EUVD-2026-114717)
A vulnerability has been found in ASPEER WebDyne up to 3.021 and classified as critical. This issue affects some unknown processing. This manipulation causes unrestricted upload. This vulnerability is registered as CVE-2026-78191. Remote ex
CVE-2026-78190 | ASPEER WebDyne up to 3.021 HTML HTML injection (EUVD-2026-114716)
A vulnerability, which was classified as problematic, was found in ASPEER WebDyne up to 3.021. This vulnerability affects unknown code of the component HTML. The manipulation results in HTML injection. This vulnerability is cataloged as CVE
CVE-2026-113380 | Signal RingRTC up to 2.71.x FSM queue resource consumption (EUVD-2026-104796)
A vulnerability described as problematic has been identified in Signal RingRTC up to 2.71.x. Impacted is an unknown function of the component FSM queue. The manipulation results in resource consumption. This vulnerability was named CVE-2026