Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.338 | 0,9 % |
| ≥10 % | 22.175 | 5,7 % |
| <10 % | 362.843 | 93,2 % |
Auditing Node.js code for the CVE-2026-105483 TLS identity mismatch
Auditing Node.js code for the CVE-2026-105483 TLS identity mismatch A runtime patch closes CVE-2026-105483, but an audit can still reveal applications whose architecture makes the same identity mistake easy to repeat. The bug affected Node.
CVE-2026-68591 | MediaTek MT8883 privileges management (ALPS09608864/ALPS09327759 / EUVD-2026-114935)
A vulnerability was found in MediaTek MT2737, MT6813, MT6815, MT6835, MT6878, MT6879, MT6886, MT6895, MT6896, MT6897, MT6980, MT6983, MT6985, MT6990, MT8676, MT8755, MT8775, MT8792, MT8798, MT8863, MT8873 and MT8883 and classified as very c
CVE-2026-68590 | MediaTek MT8893 ip_stack out-of-bounds (MOLY01387180 / EUVD-2026-114934)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-120336 | VStarcam O-KAM Client 1.3.3.32 DevDll_925.dll FUN_10003EA0 stack-based overflow (EUVD-2026-115060)
A vulnerability classified as critical was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. This vul
CVE-2026-120334 | deepset-ai farm up to 0.8.0 Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained vocab_filename path traversal (EUVD-2026-114936)
A vulnerability described as problematic has been identified in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing
CVE-2026-120337 | VStarcam O-KAM SuperIPCam 1.3.3.32 P2P Session Teardown SuperIPCam.exe FUN_005a2d44 use after free (EUVD-2026-115061)
A vulnerability, which was classified as critical, has been found in VStarcam O-KAM SuperIPCam 1.3.3.32. Affected by this issue is the function FUN_005a2d44 of the file SuperIPCam.exe of the component P2P Session Teardown. This manipulation
CVE-2026-120335 | deepset-ai farm up to 0.8.0 Model Package Loader language_model.py WordEmbedding_LM.load embeddings_filename path traversal (EUVD-2026-115059)
A vulnerability classified as problematic has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/language_model.py of the component Model Package Loader. The manipulation of t
CVE-2026-120339 | mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php fname cross site scripting (EUVD-2026-115062)
A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project and classified as problematic. This vulnerability affects unknown code of the file updatedetailsfromfaculty.php. Performing a manipulation of the argument fname resul
CVE-2026-74401 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 dlm use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. This affects an unknown part of the component dlm. Executing a manipulation can lead to use after free. This vulnerability
CVE-2026-74397 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 IB/mlx5 mlx5_ib_alloc_transport_domain allocation of resources
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function mlx5_ib_alloc_transport_domain of the component IB/mlx5. Such manipulation leads to allocation of reso
CVE-2026-74388 | Linux Kernel up to 6.18.39/7.1.4 ALSA snd_seq_oss_midi_putc use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.39/7.1.4. The impacted element is the function snd_seq_oss_midi_putc of the component ALSA. The manipulation results in use after free. This vulnera
CVE-2026-74356 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 vhost drivers/vhost/net.c vhost_get_avail_idx comparison
A vulnerability was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4 and classified as critical. This affects the function vhost_get_avail_idx of the file drivers/vhost/net.c of the component vhost. Executing a manipulation can lead to inc
CVE-2026-74350 | Linux Kernel ocfs2 fs/ocfs2/inode.c ocfs2_fast_symlink_read_folio use after free
A vulnerability classified as very critical has been found in Linux Kernel. This vulnerability affects the function ocfs2_fast_symlink_read_folio of the file fs/ocfs2/inode.c of the component ocfs2. The manipulation leads to use after free.
CVE-2026-74341 | Linux Kernel up to 7.1.4 wcn36xx heap-based overflow
A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. It has been rated as very critical. Affected by this vulnerability is an unknown functionality of the component wcn36xx. This manipulation causes heap-ba
CVE-2026-74338 | Linux Kernel BPF LSM Cgroup kernel/locking/rwsem.c bpf_get_dentry_xattr
A vulnerability categorized as critical has been discovered in Linux Kernel. This impacts the function bpf_get_dentry_xattr of the file kernel/locking/rwsem.c of the component BPF LSM Cgroup. The manipulation results in improper locking. Th
CVE-2026-74317 | Linux Kernel up to 7.1.4 ixgbe net/core/dev.c __netif_set_xps_queue memory corruption
A vulnerability marked as critical has been reported in Linux Kernel up to 7.1.4. The affected element is the function __netif_set_xps_queue of the file net/core/dev.c of the component ixgbe. The manipulation leads to memory corruption. Thi
CVE-2026-74302 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 hci_core hci_unregister_dev use after free
A vulnerability was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4 and classified as very critical. Affected is the function hci_unregister_dev of the component hci_core. Executing a manipulation can lead to use after free. This vulnerab
CVE-2020-23922 | giflib up to 5.1.4 gif2rgb.c DumpScreen2RGB heap-based overflow (Nessus ID 374842)
A vulnerability classified as critical has been found in giflib up to 5.1.4. This affects the function DumpScreen2RGB of the file gif2rgb.c. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2020-23922.
CVE-2019-14866 | cpio up to 2.12 TAR Archive input validation (RHSA-2020:3908 / Nessus ID 374841)
A vulnerability was found in cpio up to 2.12. It has been classified as critical. This impacts an unknown function of the component TAR Archive Handler. Performing a manipulation results in improper input validation. This vulnerability is r
CVE-2021-33560 | Libgcrypt up to 1.8.7/1.9.2 ElGamal Encryption timing discrepancy (Nessus ID 374844)
A vulnerability, which was classified as problematic, has been found in Libgcrypt up to 1.8.7/1.9.2. This impacts an unknown function of the component ElGamal Encryption. The manipulation leads to observable timing discrepancy. This vulnera
CVE-2019-25040 | Infinite Unbound up to 1.9.4 Compressed Name dname_pkt_copy infinite loop (Nessus ID 374849)
A vulnerability classified as problematic has been found in Infinite Unbound up to 1.9.4. This issue affects the function dname_pkt_copy of the component Compressed Name Handler. This manipulation causes infinite loop. This vulnerability is
CVE-2019-25037 | Unbound up to 1.9.4 Packet dname_pkt_copy denial of service (Nessus ID 374849)
A vulnerability labeled as problematic has been found in Unbound up to 1.9.4. Affected by this issue is the function dname_pkt_copy of the component Packet Handler. Executing a manipulation can lead to denial of service. This vulnerability
CVE-2019-25036 | Unbound up to 1.9.4 synth_cname denial of service (Nessus ID 374849)
A vulnerability identified as problematic has been detected in Unbound up to 1.9.4. Affected by this vulnerability is the function synth_cname. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-
CVE-2019-25033 | Unbound up to 1.9.4 ALIGN_UP Macro integer overflow (Nessus ID 374849)
A vulnerability was found in Unbound up to 1.9.4. It has been declared as critical. This affects an unknown function of the component ALIGN_UP Macro. The manipulation results in integer overflow. This vulnerability was named CVE-2019-25033.
CVE-2022-48334 | Google Nexus 6 Widevine Trustlet drm_verify_keys buffer overflow (EUVD-2022-51034)
A vulnerability classified as critical has been found in Google Nexus 6. Affected is the function drm_verify_keys of the component Widevine Trustlet. Performing a manipulation results in buffer overflow. This vulnerability is cataloged as C
CVE-2022-48333 | Google Nexus 6 Widevine Trustlet drm_verify_keys buffer overflow (EUVD-2022-51033)
A vulnerability classified as critical was found in Google Nexus 6. Affected by this vulnerability is the function drm_verify_keys of the component Widevine Trustlet. Executing a manipulation can lead to buffer overflow. This vulnerability
CVE-2022-48332 | Google Nexus 6 Widevine Trustlet drm_save_keys buffer overflow (EUVD-2022-51032)
A vulnerability, which was classified as critical, has been found in Google Nexus 6. Affected by this issue is the function drm_save_keys of the component Widevine Trustlet. The manipulation leads to buffer overflow. This vulnerability is d
CVE-2022-48331 | Google Nexus 6 Widevine Trustlet drm_save_keys buffer overflow (EUVD-2022-51031)
A vulnerability, which was classified as critical, was found in Google Nexus 6. This affects the function drm_save_keys of the component Widevine Trustlet. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2
CVE-2022-48329 | MISP up to 2.4.165 app/Model/Attribute.php order behavioral workflow (EUVD-2022-51029)
A vulnerability classified as problematic has been found in MISP up to 2.4.165. Affected by this vulnerability is an unknown functionality of the file app/Model/Attribute.php. The manipulation of the argument order leads to enforcement of b
CVE-2022-48327 | Mapos 4.39.0 Relatorios.php cross site scripting (Issue 2010 / EUVD-2022-51027)
A vulnerability was found in Mapos 4.39.0 and classified as problematic. The impacted element is an unknown function of the file application/controllers/Relatorios.php. The manipulation of the argument... Weiterlesen
CVE-2026-106255 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. This impacts an unknown function of the component V8. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2026-106255. It is possibl
CVE-2026-106254 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability labeled as problematic has been found in Google Chrome. Impacted is an unknown function. The manipulation results in information disclosure. This vulnerability is identified as CVE-2026-106254. The attack is only possible wi
CVE-2026-106253 | Google Chrome up to 154.0.8037.97 Extensions improper authorization (WID-SEC-2026-3761)
A vulnerability described as problematic has been identified in Google Chrome. The impacted element is an unknown function of the component Extensions. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2
CVE-2026-106252 | Google Chrome up to 154.0.8037.97 Fonts comparison (WID-SEC-2026-3761)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown function of the component Fonts. Performing a manipulation results in incorrect comparison. This vulnerability is cataloged as CVE-2026-106252.
CVE-2026-106251 | Google Chrome up to 154.0.8037.97 Chromoting Remote Code Execution (WID-SEC-2026-3761)
A vulnerability marked as critical has been reported in Google Chrome. The affected element is an unknown function of the component Chromoting. This manipulation causes Remote Code Execution. This vulnerability is tracked as CVE-2026-106251
CVE-2026-106250 | Google Chrome up to 154.0.8037.97 Actor authorization (WID-SEC-2026-3761)
A vulnerability identified as critical has been detected in Google Chrome. This issue affects some unknown processing of the component Actor. The manipulation leads to missing authorization. This vulnerability is referenced as CVE-2026-1062
CVE-2026-106249 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. This affects an unknown function of the component Autofill. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2
CVE-2026-106248 | Google Chrome up to 154.0.8037.97 Bindings use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. Affected is an unknown function of the component Bindings. The manipulation results in use after free. This vulnerability is known as CVE-2026-106248. It is possible to
CVE-2026-106246 | Google Chrome up to 154.0.8037.97 Address Bar improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown part of the component Address Bar. Performing a manipulation results in improper authorization. This vulnerability was named CVE-2026-106246.
CVE-2026-74264 | Linux Kernel up to 6.18.39/7.1.4 Watchdog net/sched/sch_generic.c netdev_watchdog_up watchdog_dev_tracker race condition
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.39/7.1.4. This affects the function netdev_watchdog_up of the file net/sched/sch_generic.c of the component Watchdog. The manipulation of the argument watchdog_d
CVE-2026-74257 | Linux Kernel up to 6.18.39/7.1.4 sockmap net/core/skmsg.c sk_msg_recvmsg/udp_bpf_recvmsg ingress_msg use after free
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.39/7.1.4. Affected by this issue is the function sk_msg_recvmsg/udp_bpf_recvmsg of the file net/core/skmsg.c of the component sockmap. The manipulation of th
CVE-2026-72488 | Linux Kernel up to 6.18.39/7.1.4 soundwire sdw_add_element_group_count out-of-bounds
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.39/7.1.4. This impacts the function sdw_add_element_group_count of the component soundwire. Performing a manipulation results in out-of-bounds
CVE-2026-72472 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 NFSv4 nfs4_do_open use after free
A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.96/6.18.39/7.1.4. Affected by this issue is the function nfs4_do_open of the component NFSv4. Such manipulation leads to use after free. This vulnerab
CVE-2026-72470 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 ntfs3 fs/ntfs3 log_replay page_size buffer overflow
A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. It has been classified as critical. Affected is the function log_replay of the file fs/ntfs3 of the component ntfs3. The manipulation of the argument page_size l
CVE-2026-72440 | Linux Kernel up to 7.1.4 md/raid1 raid1_make_request denial of service
A vulnerability described as problematic has been identified in Linux Kernel up to 7.1.4. This issue affects the function raid1_make_request of the component md/raid1. The manipulation results in denial of service. This vulnerability is rep
CVE-2026-72423 | Linux Kernel up to 7.1.4 BPF Wrappers opts__sz allocation of resources
A vulnerability has been found in Linux Kernel up to 7.1.4 and classified as very critical. The affected element is the function Wrappers of the component BPF. Performing a manipulation of the argument opts__sz results in allocation of reso
CVE-2026-72420 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 md/raid5 raid5.c break_stripe_batch_list/raid5_make_request flags race condition
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.96/6.18.39/7.1.4. Affected by this issue is the function break_stripe_batch_list/raid5_make_request of the file raid5.c of the component md/raid5.
CVE-2026-72416 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 nft_compat input validation
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected by this vulnerability is an unknown functionality of the component nft_compat. Performing a manipulation re
CVE-2026-72405 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 udp_tunnel udp_tunnel_nic_device_sync_work use after free
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.96/6.18.39/7.1.4. This impacts the function udp_tunnel_nic_device_sync_work of the component udp_tunnel. This manipulation causes use after free. The iden
CVE-2026-72404 | Linux Kernel up to 7.1.4 tipc cleanup_bearer use after free
A vulnerability was found in Linux Kernel up to 7.1.4 and classified as very critical. Impacted is the function cleanup_bearer of the component tipc. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-72404.
CVE-2026-72398 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 SCTP chunk_end memory corruption
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. This vulnerability affects the function sctp_verify_init/sctp_sf_do_5_1D_ce/sctp_sf_do_5_2_4_dupcook/sctp_unpack_cookie of the co
CVE-2026-99109 | Linux Kernel up to 7.2.12 SMB Client CIFSSMBSetEA memory corruption
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2.12. This affects the function CIFSSMBSetEA of the component SMB Client. The manipulation results in memory corruption. This vulnerability is reporte
CVE-2026-99107 | Linux Kernel up to 7.2.12 ntfs ntfs_attr_record_resize m buffer overflow
A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.12. Affected is the function ntfs_attr_record_resize of the component ntfs. The manipulation of the argument m leads to buffer overflow. This vulnerabil
CVE-2026-83831 | Microsoft Edge code injection
A vulnerability has been found in Microsoft Edge and classified as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in code injection. This vulnerability was named CVE-2026-83831. The attack
CVE-2026-78845 | Aidot Smart Plug/Smart Light Bulb 1.01.32/3.15.21/3.30.17 UPnP code injection
A vulnerability classified as critical has been found in Aidot Smart Plug and Smart Light Bulb 1.01.32/3.15.21/3.30.17. This impacts an unknown function of the component UPnP. Performing a manipulation results in code injection. This vulner
CVE-2026-116888 | SemanticMediaWiki up to 7.3.0 GroupFormatter canonical_name cross site scripting
A vulnerability, which was classified as problematic, was found in SemanticMediaWiki up to 7.3.0. This impacts an unknown function of the component GroupFormatter. The manipulation of the argument canonical_name results in cross site script
CVE-2026-116623 | code-projects Simple Content Management System 1.0 Admin Interface /web/admin/welcome.php addnews authorization
A vulnerability classified as critical was found in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument ad
CVE-2026-116605 | SourceCodester Online Food Ordering System 1.0 order.php price/title client-side enforcement of server-side security
A vulnerability classified as problematic was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side en
CVE-2026-116602 | SourceCodester Online Food Ordering System 1.0 admin/delete.php unlink image_name path traversal
A vulnerability marked as critical has been reported in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in pat
CVE-2026-116554 | Argilla up to 2.8.0 Settings Page SettingsInfo.vue Dataset.from_disk name cross site scripting (Issue 5875)
A vulnerability classified as problematic was found in Argilla up to 2.8.0. The affected element is the function Dataset.from_disk of the file argilla-frontend/components/features/annotation/settings/SettingsInfo.vue of the component Settin