Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 750 | 0,2 % |
| ≥50 % | 3.272 | 0,8 % |
| ≥10 % | 22.091 | 5,7 % |
| <10 % | 358.955 | 93,2 % |
CVE-2026-63955 | Linux Kernel up to 7.0.11 Vmalloc __get_vm_area_node locking
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.0.11. The impacted element is the function __get_vm_area_node of the component Vmalloc. Such manipulation leads to improper locking. This vulnerability is d
CVE-2026-63954 | Linux Kernel up to 7.0.11 Hpfs hpfs_map_dnode_bitmap uninitialized variable
A vulnerability has been found in Linux Kernel up to 7.0.11 and classified as problematic. The affected element is the function hpfs_map_dnode_bitmap of the component Hpfs. Performing a manipulation results in use of uninitialized variable.
CVE-2026-63953 | Linux Kernel up to 7.0.11 mm migrate_device mm/migrate_device migrate_vma_insert_huge_pmd_page memory leak
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. This affects the function migrate_vma_insert_huge_pmd_page of the file mm/migrate_device of the component mm migrate_device. Executing a manipulation
CVE-2026-63952 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Memfd mapping_deny_writable access control (Nessus ID 340747)
A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. It has been classified as very critical. Affected by this issue is the function mapping_deny_writable of the component Memfd. Performing a manipulation results
CVE-2026-63951 | Linux Kernel up to 7.0.11 Zram zram_writeback_endio use after free
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.0.11. Impacted is the function zram_writeback_endio of the component Zram. Such manipulation leads to use after free. This vulnerability is documented
CVE-2026-63949 | Linux Kernel up to 7.0.11 Line Display line-display.c linedisp_display out-of-bounds
A vulnerability has been found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11 and classified as problematic. Affected is the function linedisp_display of the file drivers/auxdisplay/line-display.c of the component Line Display
CVE-2026-63948 | Linux Kernel up to 7.0.11 L2CAP l2cap_chan_timeout conn memory leak
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.11. This impacts the function l2cap_chan_timeout of the component L2CAP. The manipulation of the argument conn results in memory leak. This vulnerability
CVE-2026-63943 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Xpad xpadone_process_packet actual_length out-of-bounds
A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. Impacted is the function xpadone_process_packet of the component Xpad. Such manipulation of the argument actual_length lead
CVE-2026-63940 | Linux Kernel up to 6.12.94/6.18.34/7.0.11 KVM integer underflow
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.94/6.18.34/7.0.11. This vulnerability affects unknown code of the component KVM. The manipulation results in integer underflow. This vulnerability is known a
CVE-2026-63939 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 KVM buffer overflow
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This affects an unknown part of the component KVM. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-20
CVE-2026-63936 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Adc mt6358_read_imp val_v uninitialized variable
A vulnerability was found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. It has been declared as problematic. Affected is the function mt6358_read_imp of the component Adc. Such manipulation of the argument val_v leads to use of uninitialize
CVE-2026-63935 | Linux Kernel up to 7.0.11 Nxp Sar Adc write_raw sampling_frequency divide by zero
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as critical. This impacts the function write_raw of the component Nxp Sar Adc. This manipulation of the argument sampling_frequency causes divide by zero. This v
CVE-2026-63934 | Linux Kernel up to 7.0.11 Iio Gyro Itg3200 itg3200_read_all_channels buf information disclosure
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.0.11. Affected by this vulnerability is the function itg3200_read_all_channels of the component Iio Gyro Itg3200. This manipulation of the argument
CVE-2026-63933 | Linux Kernel up to 7.0.11 Iio Gyro write_raw sampling_frequency divide by zero
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as critical. This affects the function write_raw of the component Iio Gyro. The manipulation of the argument sampling_frequency results in divide by zero. This vulnerabil
CVE-2026-63932 | Linux Kernel up to 6.18.34/7.0.11 Mhz19b mhz19b_receive_buf buffer overflow
A vulnerability has been found in Linux Kernel up to 6.18.34/7.0.11 and classified as very critical. The impacted element is the function mhz19b_receive_buf of the component Mhz19b. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-63931 | Linux Kernel up to 7.0.11 Iio Chemical Scd30 write_raw val2 divide by zero
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.0.11. The affected element is the function write_raw of the component Iio Chemical Scd30. Executing a manipulation of the argument val2 can lead to divi
CVE-2026-63929 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Buffer iio_buffer_enqueue_dmabuf allocation of resources
A vulnerability was found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. It has been declared as critical. Affected by this issue is the function iio_buffer_enqueue_dmabuf of the component Buffer. Such manipulation leads to allocation of res
CVE-2026-63918 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 L2TP l2tp_session_get_by_ifname use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This affects the function l2tp_session_get_by_ifname of the component L2TP. The manipulation results in use after free. This vuln
CVE-2026-63916 | Linux Kernel up to 7.0.11 HID wacom_hid_set_device_mode out-of-bounds write
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.0.11. Impacted is the function wacom_hid_set_device_mode of the component HID. Executing a manipulation can lead to out-of-bounds write. The identifica
CVE-2026-63915 | Linux Kernel up to 7.0.11 NFC HCI HCP Header Parsing nfc_hci_recv_from_llc/nci_hci_data_received_cb out-of-bounds
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as very critical. This vulnerability affects the function nfc_hci_recv_from_llc/nci_hci_data_received_cb of the component NFC HCI HCP Header Parsing. Such manipula
CVE-2026-63914 | Linux Kernel up to 7.0.11 Xfrm Migration net/xfrm/xfrm_user.c xfrm_send_migrate information disclosure
A vulnerability was found in Linux Kernel up to 7.0.11. It has been rated as problematic. This issue affects the function xfrm_send_migrate of the file net/xfrm/xfrm_user.c of the component Xfrm Migration. Performing a manipulation results
CVE-2026-63913 | Linux Kernel up to 7.0.11 Netfilter Conntrack input validation (Nessus ID 340744)
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. Impacted is an unknown function of the component Netfilter Conntrack. Such manipulation leads to improper input validation. This vulnerability is refe
CVE-2026-63912 | Linux Kernel up to 7.0.11 Xfrm esp_output_head allocation of resources
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This affects the function esp_output_head of the component Xfrm. This manipulation causes allocation of resources. This vulnerability is handle
CVE-2026-63911 | Linux Kernel up to 6.18.34/7.0.11 IPTFS iptfs_clone_state use after free
A vulnerability was found in Linux Kernel up to 6.18.34/7.0.11 and classified as very critical. Affected by this issue is the function iptfs_clone_state of the component IPTFS. The manipulation results in use after free. This vulnerability
CVE-2026-63910 | Linux Kernel up to 7.0.11 Dma-buf dma_buf_fd use after free
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This issue affects the function dma_buf_fd of the component Dma-buf. This manipulation causes use after free. The identification of this vulner
CVE-2026-63909 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Ksmbd smb_check_perm_dacl out-of-bounds
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. This affects the function smb_check_perm_dacl of the component Ksmbd. This manipulation causes out-of-bounds read. This vulnerabi
CVE-2026-62965 | SABnzbd up to 5.0.x Orphan Job Management sabnzbd/api.py _api_delete_orphan value path traversal (Nessus ID 374561)
A vulnerability labeled as problematic has been found in SABnzbd up to 5.0.x. This affects the function _api_delete_orphan of the file sabnzbd/api.py of the component Orphan Job Management. Such manipulation of the argument Value leads to p
CVE-2026-114509 | Laravel up to 12.67.x/13.28.x TokenGuard improper authentication (Nessus ID 374562)
A vulnerability, which was classified as critical, has been found in Laravel up to 12.67.x/13.28.x. The affected element is the function TokenGuard. Performing a manipulation results in improper authentication. This vulnerability was named
CVE-2026-48713 | i18next i18next-fs-backend up to 2.6.5 lib/utils.js Backend.writeFile prototype pollution (GHSA-2933-q333-qg83 / Nessus ID 374563)
A vulnerability classified as critical was found in i18next i18next-fs-backend up to 2.6.5. Affected by this vulnerability is the function Backend.writeFile of the file lib/utils.js. The manipulation results in improperly controlled modific
CVE-2026-63402 | i18next up to 26.3.3 Deep Merge src/utils.js deepExtend deep/overwrite dynamically-managed code resources (Nessus ID 374563)
A vulnerability described as problematic has been identified in i18next up to 26.3.3. This affects the function deepExtend of the file src/utils.js of the component Deep Merge. Executing a manipulation of the argument deep/overwrite can lea
CVE-2026-84381 | Pydantic HTTPX2/httpcore2 up to 2.9.1 SOCKS Proxy socks_proxy.py Client.websocket/AsyncClient.websocket certificate validation (Nessus ID 374564)
A vulnerability was found in Pydantic HTTPX2 and httpcore2 up to 2.9.1. It has been rated as problematic. This affects the function Client.websocket/AsyncClient.websocket of the file src/httpcore2/httpcore2/_sync/socks_proxy.py of the compo
CVE-2026-107279 | AsyncHttpClient up to 3.0.12 Authentication Verification AuthenticatorUtils.computeExpectedRspAuth improper authentication (EUVD-2026-94638 / Nessus ID 374565)
A vulnerability labeled as critical has been found in AsyncHttpClient up to 3.0.12. The impacted element is the function AuthenticatorUtils.computeExpectedRspAuth of the component Authentication Verification. Executing a manipulation can le
CVE-2026-97828 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100429)
A vulnerability marked as problematic has been reported in Microsoft Windows. The impacted element is an unknown function of the component DNS Server. Performing a manipulation results in information disclosure. This vulnerability is known
CVE-2026-97830 | Microsoft Windows up to Server 2025 Internet Information Services double free (EUVD-2026-100431)
A vulnerability classified as critical was found in Microsoft Windows up to Server 2025. This affects an unknown part of the component Internet Information Services. Such manipulation leads to double free. This vulnerability is uniquely ide
CVE-2026-97829 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100430)
A vulnerability described as problematic has been identified in Microsoft Windows. This affects an unknown function of the component DNS Server. Executing a manipulation can lead to information disclosure. This vulnerability is handled as C
CVE-2026-97832 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100433)
A vulnerability classified as problematic was found in Microsoft Windows. Affected is an unknown function of the component DNS Server. The manipulation results in information disclosure. This vulnerability was named CVE-2026-97832. The atta
CVE-2026-97831 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100432)
A vulnerability classified as problematic has been found in Microsoft Windows. This impacts an unknown function. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2026-97831. The attack is po
CVE-2026-97833 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100434)
A vulnerability, which was classified as problematic, has been found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component DNS Server. This manipulation causes information disclosure. The identifi
CVE-2026-96192 | Microsoft Edge up to 154.0.4258.62 use after free (EUVD-2026-113160)
A vulnerability described as critical has been identified in Microsoft Edge. This impacts an unknown function. The manipulation results in use after free. This vulnerability is known as CVE-2026-96192. It is possible to launch the attack re
CVE-2026-96203 | Microsoft Edge up to 154.0.4258.62 use after free (EUVD-2026-113161)
A vulnerability classified as critical was found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-96203. The atta
CVE-2026-20942 | Microsoft Edge input validation (EUVD-2026-113162)
A vulnerability was found in Microsoft Edge. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in improper input validation. This vulnerability is reported as CVE-2026-20942. Th
CVE-2026-118147 | Microsoft Visual Studio input validation (EUVD-2026-114732)
A vulnerability classified as critical has been found in Microsoft Visual Studio. Affected by this issue is some unknown functionality. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-118147. The a
CVE-2026-106181 | Google Chrome up to 154.0.8037.97 DevTools information disclosure (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. The affected element is an unknown function of the component DevTools. This manipulation causes information disclosure. The identification of this vulnerability i
CVE-2026-106180 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. Performing a manipulation results in permissive cross-domain policy with untrusted domains. This vul
CVE-2026-106179 | Google Chrome up to 154.0.8037.97 WebAppInstalls (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. Impacted is an unknown function of the component WebAppInstalls. The manipulation results in an unknown weakness. This vulnerability was named CVE-2026-106179.
CVE-2026-102322 | Google Chrome up to 154.0.8037.97 SiteIsolation improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This issue affects some unknown processing of the component SiteIsolation. The manipulation leads to improper authorization. This vulnerability is uniquely identifie
CVE-2026-102998 | py-pdf Pypdf up to 6.18.x Appearance Stream _appearance_stream.py infinite loop (WID-SEC-2026-4024)
A vulnerability labeled as problematic has been found in py-pdf Pypdf up to 6.18.x. Impacted is an unknown function of the file pypdf/generic/_appearance_stream.py of the component Appearance Stream. Executing a manipulation can lead to inf
CVE-2026-102994 | py-pdf pypdf up to 6.17.x PDF Reader pypdf/_reader.py read_until_whitespace resource consumption (WID-SEC-2026-4024)
A vulnerability marked as problematic has been reported in py-pdf pypdf up to 6.17.x. Affected is the function read_until_whitespace of the file pypdf/_reader.py of the component PDF Reader. The manipulation leads to resource consumption. T
CVE-2026-63908 | Linux Kernel up to 7.0.11 Atmel Mxt Ts mxt_prepare_cfg_mem infinite loop
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as critical. This vulnerability affects the function mxt_prepare_cfg_mem of the component Atmel Mxt Ts. The manipulation results in infinite loop. This vulnerability was
CVE-2026-63907 | Linux Kernel up to 7.0.11 Uio Pci Generic Sva probe double free
A vulnerability has been found in Linux Kernel up to 7.0.11 and classified as critical. Affected by this vulnerability is the function probe of the component Uio Pci Generic Sva. The manipulation leads to double free. This vulnerability is
CVE-2026-63906 | Linux Kernel up to 7.0.11 Musb omap2430_probe np use after free
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. Affected is the function omap2430_probe of the component Musb. Executing a manipulation of the argument np can l
CVE-2026-63905 | Linux Kernel up to 7.0.11 Usbip Vudc vudc_remove use after free
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.0.11. This impacts the function vudc_remove of the component Usbip Vudc. Performing a manipulation results in use after free. This vulnerability is re
CVE-2026-63901 | Linux Kernel up to 7.0.11 USB Serial Digi Acceleport memory corruption
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. The impacted element is an unknown function of the component USB Serial Digi Acceleport. This manipulation causes memory corruption. This vulnerability
CVE-2026-63898 | Linux Kernel up to 7.0.11 Mct U232 mct_u232.c memory corruption
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.0.11. This issue affects some unknown processing of the file drivers/usb/serial/mct_u232.c of the component Mct U232. Executing a manipulation can lead to memor
CVE-2026-120229 | WAVLINK WN553X1-B 260403_2.0.0 /bin/ioos sub_416B50 file_id os command injection
A vulnerability marked as very critical has been reported in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. This vuln
CVE-2026-120228 | WAVLINK WN553X1-B V260403_2.0.0 ioos Service /bin/ioos sub_416D88 group_id/group_name os command injection
A vulnerability labeled as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument gro
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connec
CVE-2026-85330 | Microsoft Edge up to 154.0.4258.62 improper authorization (EUVD-2026-112935)
A vulnerability was found in Microsoft Edge. It has been rated as problematic. The affected element is an unknown function. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-85330. The attack may be ini
CVE-2026-96187 | Microsoft Edge up to 154.0.4258.62 type confusion (EUVD-2026-112937)
A vulnerability was found in Microsoft Edge. It has been declared as problematic. This vulnerability affects unknown code. The manipulation results in type confusion. This vulnerability is cataloged as CVE-2026-96187. The attack may be laun
CVE-2026-88090 | Microsoft Edge up to 153.0.4234.46 type confusion (EUVD-2026-113164)
A vulnerability, which was classified as critical, has been found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. This manipulation causes type confusion. This vulnerability is tracked as CVE-2026-88090. The a