Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 753 | 0,2 % |
| ≥50 % | 3.281 | 0,9 % |
| ≥10 % | 21.931 | 5,7 % |
| <10 % | 359.741 | 93,3 % |
CVE-2026-95117 | zserge jsmn jsmn.h jsmn_parse buffer overflow (ID 25647e6)
A vulnerability marked as problematic has been reported in zserge jsmn. The impacted element is the function jsmn_parse of the file jsmn.h. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-95117. The attac
CVE-2026-70125 | Microsoft Outlook code injection
A vulnerability described as problematic has been identified in Microsoft Outlook. Impacted is an unknown function. The manipulation results in code injection. This vulnerability is known as CVE-2026-70125. It is possible to launch the atta
CVE-2026-67240 | RabbitMQ up to 4.2.6/4.3.0 Like Filter rabbit_amqp_session.erl incorrect regex
A vulnerability labeled as problematic has been found in RabbitMQ up to 4.2.6/4.3.0. Impacted is an unknown function of the file rabbit_amqp_session.erl of the component Like Filter. Executing a manipulation can lead to incorrect regular ex
CVE-2026-67228 | RabbitMQ up to 4.2.6/4.3.0 Runtime Parameter Lookup rabbit_runtime_parameters.erl lookup_component denial of service
A vulnerability was found in RabbitMQ up to 4.2.6/4.3.0. It has been classified as problematic. This vulnerability affects the function lookup_component of the file deps/rabbit/src/rabbit_runtime_parameters.erl of the component Runtime Para
CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268)
A vulnerability described as problematic has been identified in RabbitMQ up to 4.1.12/4.2.6/4.2.x. The impacted element is the function is_authorized of the file rabbit_mgmt_wm_reset.erl of the component Management Plugin. The manipulation
CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management
A vulnerability marked as problematic has been reported in VMware RabbitMQ up to 4.2.6/4.3.0. The affected element is an unknown function of the component Stream Open Handler. The manipulation leads to improper privilege management. This vu
CVE-2026-109763 | Mozilla Firefox up to 153.4/157 File privileges assignment
A vulnerability was found in Mozilla Firefox up to 153.4/157. It has been declared as critical. This affects an unknown function of the component File Handler. The manipulation results in incorrect privilege assignment. This vulnerability i
CVE-2026-107161 | Cyrus Cyrus-SASL add_to_challenge heap-based overflow
A vulnerability identified as very critical has been detected in Cyrus Cyrus-SASL. This affects the function add_to_challenge. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-10716
CVE-2026-104040 | Red Hat Enterprise Linux/OpenShift Container Platform sssd information disclosure
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been declared as problematic. Affected is an unknown function of the component sssd. The manipulation results in information disclosure. This vul
CVE-2026-104029 | sssd autofs out-of-bounds
A vulnerability marked as critical has been reported in sssd. This vulnerability affects unknown code of the component autofs. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-104029. It is possible to
CVE-2026-100517 | Villame Photo Reviews Plugin up to 1.2.30 on WordPress resource injection
A vulnerability described as critical has been identified in Villame Photo Reviews Plugin up to 1.2.30 on WordPress. Affected by this vulnerability is an unknown functionality. Such manipulation leads to improper control of resource identif
CVE-2022-48309 | Sophos Connect 2.1 cross-site request forgery (EUVD-2022-51009)
A vulnerability classified as problematic was found in Sophos Connect 2.1. This issue affects some unknown processing. The manipulation results in cross-site request forgery. This vulnerability was named CVE-2022-48309. The attack may be pe
CVE-2022-48308 | Palantir Sls-logging certificate host validation (EUVD-2022-51008)
A vulnerability has been found in Palantir Sls-logging and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to certificate with host mismatch. This vulnerability is traded as CVE-2022-4830
CVE-2022-48307 | Palantir Magritte-ftp certificate host validation (EUVD-2022-51007)
A vulnerability, which was classified as critical, was found in Palantir Magritte-ftp. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to certificate with host mismatch. This vulnerability appea
CVE-2022-48306 | Palantir Gotham up to 105.115.0 Chat IRC helper certificate host validation (EUVD-2022-51006)
A vulnerability categorized as critical has been discovered in Palantir Gotham. The affected element is an unknown function of the component Chat IRC helper. Executing a manipulation can lead to certificate with host mismatch. The identific
CVE-2022-48303 | GNU Tar up to 1.34 V7 Archive list.c from_header out-of-bounds (EUVD-2022-51003 / Nessus ID 211745)
A vulnerability, which was classified as problematic, has been found in GNU Tar up to 1.34. The affected element is the function from_header of the file list.c of the component V7 Archive Handler. The manipulation leads to out-of-bounds rea
CVE-2022-48299 | Huawei EMUI/Magic UI WMS Module improper authentication (EUVD-2022-50999)
A vulnerability was found in Huawei EMUI and Magic UI. It has been classified as critical. The impacted element is an unknown function of the component WMS Module. Performing a manipulation results in improper authentication. This vulnerabi
A staged upgrade plan for CVE-2026-96888 in BIND
A staged upgrade plan for CVE-2026-96888 in BIND Why staging matters CVE-2026-96888 can cause a BIND resolver to abort while processing an NXDOMAIN response when a redirect zone and strict QNAME minimization are both configured. ISC rates t
CVE-2026-110672 | cPanel Cpanel::JSON::XS up to 4.79 Decode decode_hv memory leak (Nessus ID 374777)
A vulnerability labeled as problematic has been found in cPanel Cpanel::JSON::XS up to 4.79. This vulnerability affects the function decode_hv of the component Decode. The manipulation results in memory leak. This vulnerability is reported
CVE-2026-79611 | Xen VMX VMEntry resource consumption (Nessus ID 374779)
A vulnerability was found in Xen and classified as problematic. Affected by this issue is some unknown functionality of the component VMX VMEntry. The manipulation results in resource consumption. This vulnerability is reported as CVE-2026-
CVE-2026-102700 | Xen Grant Table GNTTAB_cache_flush memory leak (XSA-520 / Nessus ID 374779)
A vulnerability has been found in Xen and classified as critical. This affects the function GNTTAB_cache_flush of the component Grant Table. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-102700
CVE-2026-79610 | Xen Grant Table race condition (Nessus ID 374779)
A vulnerability was found in Xen. It has been classified as very critical. Affected is an unknown function of the component Grant Table. The manipulation leads to race condition. This vulnerability is traded as CVE-2026-79610. It is possibl
CVE-2026-79609 | Xen Page Table Isolation information disclosure (Nessus ID 374779)
A vulnerability marked as problematic has been reported in Xen. This affects an unknown part of the component Page Table Isolation. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-79
CVE-2026-79608 | Xen infinite loop (Nessus ID 374779)
A vulnerability classified as critical has been found in Xen. This issue affects some unknown processing. The manipulation leads to infinite loop. This vulnerability is listed as CVE-2026-79608. The attack may be initiated remotely. There i
CVE-2026-96282 | Red Hat Enterprise Linux 7/8/9/10 Flatpak Extension information disclosure (EUVD-2026-88044 / Nessus ID 374780)
A vulnerability classified as problematic was found in Red Hat Enterprise Linux 7/8/9/10. Affected is an unknown function of the component Flatpak Extension. The manipulation results in information disclosure. This vulnerability is known as
CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780)
A vulnerability marked as problematic has been reported in Red Hat Enterprise Linux. The impacted element is the function RemoveLocalRef of the component System Helper. Performing a manipulation results in improper privilege management. Thi
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
A vulnerability has been found in Flatpak up to 1.18.0 and classified as very critical. Affected is an unknown function of the component flatpak-system-helper. Performing a manipulation results in improper privilege management. This vulnera
CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue
A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. It has been declared as problematic. The affected element is the function regulator_handle_critical of the component Hwmon Pmbus. Such manipulation of th
CVE-2026-72383 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 sctp sctp_free_addr_wq use after free
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as very critical. This issue affects the function sctp_free_addr_wq of the component sctp. Performing a manipulation results in use after free. This vu
CVE-2026-72382 | Linux Kernel up to 7.2-rc1 ksmbd parse_dacl integer overflow
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. Affected is the function parse_dacl of the component ksmbd. Such manipulation leads to integer overflow. This vulnerabili
CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write
A vulnerability was found in Linux Kernel up to 7.1.4/7.2-rc1. It has been declared as very critical. This vulnerability affects the function pvcalls_front_event_handler of the file class.c of the component xen/pvcalls. The manipulation of
CVE-2026-72375 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 afs lib/debugobjects.c afs_lock_work race condition
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as problematic. This impacts the function afs_lock_work of the file lib/debugobjects.c of the component afs. The manipulation leads to race condition.
CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc2. The impacted element is the function tcf_pedit_offload_act_setup of the file net/sched/act_pedit.c of the component act_pedit. E
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
A vulnerability described as problematic has been identified in Linux Kernel up to 7.1.4/7.2-rc2. Impacted is the function pcie_flr of the file drivers/net/ethernet/marvell/liquidio/liquidio_vf.c of the component liquidio. Executing a manip
CVE-2026-72320 | Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2 nft_lookup nft_lookup_eval privileges management
A vulnerability classified as very critical was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2. This issue affects the function nft_lookup_eval of the component nft_lookup. Executing a manipulation can lead to improper privilege
CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference
A vulnerability classified as critical was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.4/7.2-rc1. This affects the function nft_fib_validate of the component netfilter. The manipulation results in null pointer dereference. This
CVE-2022-48298 | Huawei EMUI/Magic UI 0.99.7.0 Geofencing out-of-bounds (EUVD-2022-50998)
A vulnerability identified as problematic has been detected in Huawei EMUI and Magic UI 0.99.7.0. This affects an unknown function of the component Geofencing. The manipulation leads to out-of-bounds read. This vulnerability is documented a
CVE-2022-48297 | Huawei EMUI/Magic UI Geofencing out-of-bounds (EUVD-2022-50997)
A vulnerability categorized as problematic has been discovered in Huawei EMUI and Magic UI. The impacted element is an unknown function of the component Geofencing. Executing a manipulation can lead to out-of-bounds read. This vulnerability
CVE-2022-48296 | Huawei EMUI/Magic UI SystemUI permission (EUVD-2022-50996)
A vulnerability was found in Huawei EMUI and Magic UI. It has been declared as critical. Impacted is an unknown function of the component SystemUI. Such manipulation leads to permission issues. This vulnerability is listed as CVE-2022-48296
CVE-2022-48295 | Huawei IHwAntiMalPlugin Interface permission (EUVD-2022-50995)
A vulnerability was found in Huawei IHwAntiMalPlugin Interface and classified as critical. The affected element is an unknown function. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2022-48295. The at
CVE-2022-48291 | Huawei Smart Phone Bluetooth improper authentication (EUVD-2022-50991)
A vulnerability, which was classified as critical, was found in Huawei Smart Phone. Affected by this issue is some unknown functionality of the component Bluetooth Module. Executing a manipulation can lead to improper authentication. This v
CVE-2022-48286 | Huawei EMUI/Magic UI Multi-Screen Collaboration authorization (EUVD-2022-50986)
A vulnerability labeled as problematic has been found in Huawei EMUI and Magic UI. This impacts an unknown function of the component Multi-Screen Collaboration Module. The manipulation results in incorrect authorization. This vulnerability
Sicherheitslücke bei ChatGPT: Manipulierter Link konnte private Chats offenlegen - CHIP
Cyber-Security. Sicherheitslücke bei ChatGPT: Manipulierter Link konnte ... Wie das IT-Sicherheitsportal „The Hacker News“ berichtet, stufte ... Weiterlesen
CVE-2026-85893 | Microsoft Edge up to 152.0.4191.53 use after free
A vulnerability labeled as critical has been found in Microsoft Edge. This affects an unknown function. The manipulation results in use after free. This vulnerability is reported as CVE-2026-85893. The attack can be launched remotely. No ex
CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872)
A vulnerability labeled as very critical has been found in Red Hat Enterprise Linux, OpenShift Container Platform and OpenStack Platform. This issue affects some unknown processing of the file hw/i386/vapic.c of the component VAPIC. The man
CVE-2026-77176 | Red Hat Kata Containers genpolicy information disclosure
A vulnerability classified as problematic was found in Red Hat Kata Containers. This vulnerability affects unknown code of the component genpolicy. The manipulation results in information disclosure. This vulnerability is reported as CVE-20
CVE-2026-73197 | Red Hat FreeIPA Migration migration.py resource consumption (EUVD-2026-63240 / Nessus ID 350078)
A vulnerability categorized as critical has been discovered in Red Hat FreeIPA. Affected by this vulnerability is an unknown functionality of the file /ipa/migration/migration.py of the component Migration Handler. Executing a manipulation
CVE-2026-69399 | Microsoft Azure Arc privileges management
A vulnerability, which was classified as critical, was found in Microsoft Azure Arc. The impacted element is an unknown function. The manipulation results in improper privilege management. This vulnerability is cataloged as CVE-2026-69399.
CVE-2026-69304 | Microsoft .NET/ASP.NET Core resource consumption (Nessus ID 344384 / WID-SEC-2026-3242)
A vulnerability classified as problematic was found in Microsoft .NET and ASP.NET Core. This impacts an unknown function. The manipulation results in resource consumption. This vulnerability is cataloged as CVE-2026-69304. The attack may be
CVE-2026-67238 | RabbitMQ up to 4.2.6/4.3.0 Pid Codec rabbit_pid_codec:decompose_from_binary node-name heap-based overflow
A vulnerability, which was classified as problematic, was found in RabbitMQ up to 4.2.6/4.3.0. This affects the function rabbit_pid_codec:decompose_from_binary of the component Pid Codec. Such manipulation of the argument node-name leads to
CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management
A vulnerability identified as problematic has been detected in vitessio Vitess up to 24.0.2. This vulnerability affects the function vrlogStatsHandler of the file go/vt/vttablet/tabletmanager/vreplication/vrlog.go of the component Debug End
CVE-2026-18147 | FreeIPA cross site scripting (EUVD-2026-75108 / Nessus ID 350078)
A vulnerability was found in FreeIPA. It has been classified as problematic. Impacted is an unknown function. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2026-18147. The attack can be initiated remote
CVE-2026-13097 | Red Hat FreeIPA Kerberos Principal Name Uniqueness privileges management (EUVD-2026-63243 / Nessus ID 350078)
A vulnerability labeled as very critical has been found in Red Hat FreeIPA. This affects an unknown part of the component Kerberos Principal Name Uniqueness. The manipulation results in improper privilege management. This vulnerability was
CVE-2026-11861 | Red Hat FreeIPA Ticket Granting Service certificate validation (EUVD-2026-63245 / Nessus ID 350078)
A vulnerability classified as problematic has been found in Red Hat FreeIPA. Impacted is an unknown function of the component Ticket Granting Service. Performing a manipulation results in improper certificate validation. This vulnerability
CVE-2026-106223 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. The affected element is an unknown function of the component GPU. Such manipulation leads to uninitialized pointer. This vulnerability is traded as CVE-2026-10
CVE-2026-106222 | Google Chrome up to 154.0.8037.97 Sync access control (WID-SEC-2026-3761)
A vulnerability labeled as problematic has been found in Google Chrome. This issue affects some unknown processing of the component Sync. Executing a manipulation can lead to improper access controls. This vulnerability is registered as CVE
CVE-2026-106221 | Google Chrome up to 154.0.8037.97 WebAPKs access control (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebAPKs. The manipulation results in improper access controls. This vulnerability is i
CVE-2026-106220 | Google Chrome up to 154.0.8037.97 Passwords information disclosure (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. This affects an unknown part of the component Passwords. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2026-106220. Th
CVE-2026-106217 | Google Chrome up to 154.0.8037.97 Google Lens improper authorization (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. This vulnerability affects unknown code of the component Google Lens. Performing a manipulation results in improper authorization. This vulnerability is cataloged
CVE-2026-106216 | Google Chrome up to 154.0.8037.97 ReadingList cross-site request forgery (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, was found in Google Chrome. This affects an unknown function of the component ReadingList. The manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-