Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.337 | 0,9 % |
| ≥10 % | 22.176 | 5,7 % |
| <10 % | 362.843 | 93,2 % |
CVE-2026-106268 | Google Chrome up to 154.0.8037.97 WebRTC use after free (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. Affected is an unknown function of the component WebRTC. The manipulation results in use after free. This vulnerability is identified as CVE-2026-106268. The attack can be e
CVE-2026-106267 | Google Chrome up to 154.0.8037.97 Network improper authorization (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, has been found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Network. This manipulation causes improper authorization. This vulnerability is
CVE-2026-106266 | Google Chrome up to 154.0.8037.97 Contextual Tasks privileges management (WID-SEC-2026-3761)
A vulnerability classified as critical has been found in Google Chrome. This impacts an unknown function of the component Contextual Tasks. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-202
CVE-2026-106265 | Google Chrome up to 154.0.8037.97 privileges management (WID-SEC-2026-3761)
A vulnerability categorized as critical has been discovered in Google Chrome. This impacts an unknown function. Such manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2026-106265. The atta
CVE-2026-106264 | Google Chrome up to 154.0.8037.97 Web Authentication improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as critical. The impacted element is an unknown function of the component Web Authentication. The manipulation results in improper authorization. This vulnerability is known a
CVE-2026-106263 | Google Chrome up to 154.0.8037.97 SignIn access control (Nessus ID 363728 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component SignIn. This manipulation causes improper access controls. This vulnerability is handled as CVE-2026-106263. The at
CVE-2026-106262 | Google Chrome up to 154.0.8037.97 GetUserMedia input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. The affected element is the function GetUserMedia. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-106262. It is p
CVE-2026-106261 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability classified as problematic was found in Google Chrome. Affected by this issue is some unknown functionality of the component Video. The manipulation results in uninitialized resource. This vulnerability is cataloged as CVE-20
CVE-2026-106260 | Google Chrome up to 154.0.8037.97 DevTools improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This issue affects some unknown processing of the component DevTools. Performing a manipulation results in improper authorization. This vulnerability is reported
CVE-2026-106259 | Google Chrome up to 154.0.8037.97 PermissionElement access control (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Impacted is an unknown function of the component PermissionElement. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2
CVE-2026-106258 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. This affects an unknown part of the component ANGLE. This manipulation causes uninitialized resource. This vulnerability is registered as CVE-2026-106258
CVE-2026-106257 | Google Chrome up to 154.0.8037.97 HTML use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. This vulnerability affects unknown code of the component HTML. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-106257. Th
CVE-2026-106256 | Google Chrome up to 154.0.8037.97 Passwords information disclosure (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. This vulnerability affects unknown code of the component Passwords. Executing a manipulation can lead to information disclosure. The identification of this vul
Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. This article has been indexed from SecurityWeek Read the original article: Ivanti Patches Two More Zero-Days
Critical BeyondTrust Vulnerability Faces Fresh Exploitation Probes as Hackers Prepare for Mass Scanning
Fresh probes targeting CVE-2026-102764 have raised concerns that attacks against BeyondTrust Remote Support could spread beyond targeted espionage. Previdian reported two probes against decoy appliances in the United States and Europe, both
CVE-2026-120344 | WAVLINK WN551X3-A M51X3_V251020-WO-182e965 WireGuard CLI Group /bin/ioos system group_name os command injection (EUVD-2026-115067)
A vulnerability categorized as very critical has been discovered in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the ar
CVE-2026-120342 | mathurvishal CloudClassroom-PHP-Project viewquery.php eid sql injection (EUVD-2026-115065)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been declared as critical. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. Th
CVE-2025-11969 | WSO2 API Control Plane access control (EUVD-2025-211233)
A vulnerability was found in WSO2 API Control Plane, API Manager, API Manager Rest API Common Functions, API Manager Rest API Utility, Carbon API Manager Rest API Common Functions, Carbon API Manager Rest API Utility, Identity Server as Key
CVE-2024-5617 | WSO2 API Manager Account Lock Feature improper authentication (EUVD-2024-55832)
A vulnerability was found in WSO2 API Manager, Identity Server, Carbon Identity Management and Carbon User Manager Kernel. It has been declared as critical. Impacted is an unknown function of the component Account Lock Feature. Such manipul
CVE-2026-120343 | mathurvishal CloudClassroom-PHP-Project manageassessment2.php ExamName/Q1/Q2/Q3/Q4/Q5 cross site scripting (EUVD-2026-115066)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been rated as problematic. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5
CVE-2026-120341 | mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect (EUVD-2026-115064)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project. It has been classified as critical. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. This vulnerability
CVE-2026-120340 | mathurvishal CloudClassroom-PHP-Project Global Session session expiration (EUVD-2026-115063)
A vulnerability was found in mathurvishal CloudClassroom-PHP-Project and classified as critical. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. Th
CVE-2026-120348 | dayrui XunRuiCMS up to 4.7.4 Email Template Rendering Notice.php _get_tpl_content code injection (EUVD-2026-115070)
A vulnerability marked as critical has been reported in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The
CVE-2026-120347 | dayrui XunRuiCMS up to 4.7.4 Member View.php View catid sql injection (EUVD-2026-115069)
A vulnerability labeled as critical has been found in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead
CVE-2026-120345 | WAVLINK WN551X3-A M51X3_V251020-WO-182e965 DNS Resolution /bin/ioos sub_41a430 data os command injection (EUVD-2026-115068)
A vulnerability identified as very critical has been detected in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of th
CVE-2026-99163 | Linux Kernel up to 6.18.58/7.2.12 Histograms check_synth_field stack-based overflow
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.58/7.2.12. This impacts the function check_synth_field of the component Histograms. Such manipulation leads to stack-based buffer overflow. This vulnera
CVE-2026-99156 | Linux Kernel up to 6.18.58/7.2.12 scsi drivers/scsi/st.c st_remove/st_open use after free
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.58/7.2.12. This issue affects the function st_remove/st_open of the file drivers/scsi/st.c of the component scsi. Performing a manipulation results in use
CVE-2026-99154 | Linux Kernel up to 6.18.58/7.2.12 libiscsi beiscsi_parse_pdu itt comparison
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function beiscsi_parse_pdu of the component libiscsi. Executing a manipulation of the argument itt can le
CVE-2026-99153 | Linux Kernel up to 6.18.58/7.2.12 libiscsi iscsi_nop_out_rsp null pointer dereference
A vulnerability described as very critical has been identified in Linux Kernel up to 6.18.58/7.2.12. This issue affects the function iscsi_nop_out_rsp of the component libiscsi. Such manipulation leads to null pointer dereference. This vuln
CVE-2026-99152 | Linux Kernel up to 6.18.58/7.2.12 libiscsi __iscsi_complete_pdu null pointer dereference
A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function __iscsi_complete_pdu of the component libiscsi. This manipulation causes null pointer dereference. This vulne
CVE-2026-99148 | Linux Kernel up to 6.18.58/7.2.12 amdgpu drm/amdgpu amdgpu_gem_object_close ref_count race condition
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function amdgpu_gem_object_close of the file drm/amdgpu of the component amdgpu. The manipulation of the argument ref_coun
CVE-2026-99143 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse out-of-bounds write
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function predicate_parse of the component tracing. This manipulation causes out-of-bounds write. This vul
CVE-2026-99142 | Linux Kernel up to 6.18.58/7.2.12 tracing predicate_parse stack-based overflow
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as very critical. This affects the function predicate_parse of the component tracing. The manipulation leads to stack-based buffer overflow. This vulnerabilit
CVE-2026-99136 | Linux Kernel up to 6.18.58/7.2.12 dm-crypt crypt_dec_pending race condition
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.58/7.2.12. The affected element is the function crypt_dec_pending of the component dm-crypt. Such manipulation leads to race condition. This vulnera
CVE-2026-99131 | Linux Kernel up to 6.18.58/7.2.12 xfs ns_capable_noaudit privileges management
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been classified as problematic. Affected by this vulnerability is the function ns_capable_noaudit of the component xfs. Performing a manipulation results in improper pri
CVE-2026-99123 | Linux Kernel up to 6.18.58/7.2.12 vsock virtio virtio_transport_recv_pkt information disclosure
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function virtio_transport_recv_pkt of the component vsock virtio. The manipulation results in information disc
CVE-2026-99122 | Linux Kernel up to 6.18.58/7.2.12 vsock vmci_transport_recv_stream_cb input validation
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12. It has been rated as critical. Impacted is the function vmci_transport_recv_stream_cb of the component vsock. This manipulation causes improper input validation. This vulnerabi
CVE-2026-99117 | Linux Kernel up to 6.18.58/7.2.12 Bridge Multicast __br_multicast_disable_port_ctx use after free
A vulnerability has been found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. The impacted element is the function __br_multicast_disable_port_ctx of the component Bridge Multicast. This manipulation causes use after
CVE-2026-99116 | Linux Kernel up to 6.18.58/7.2.12 PSP sock_copy use after free
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. This affects the function sock_copy of the component PSP. Executing a manipulation can lead to use after free. This vulnerability appears as CVE
CVE-2026-99112 | Linux Kernel up to 6.18.58/7.2.12 cls_flower net/sched/cls_flower.c fl_change out-of-bounds
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.18.58/7.2.12. Affected by this vulnerability is the function fl_change of the file net/sched/cls_flower.c of the component cls_flower. Such manipulati
CVE-2026-99110 | Linux Kernel up to 6.18.58/7.2.12 SMB Client cifs_do_set_acl heap-based overflow
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.58/7.2.12. This vulnerability affects the function cifs_do_set_acl of the component SMB Client. Performing a manipulation results in heap-based buffer ove
CVE-2026-20593 | MediaTek MT8893 input validation (MOLY01707455 / EUVD-2026-115053)
A vulnerability identified as critical has been detected in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6
CVE-2026-20592 | MediaTek MT8883 Modem information disclosure (MOLY01744265 / EUVD-2026-115052)
A vulnerability labeled as problematic has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-20597 | MediaTek MT8893 Modem out-of-bounds (MOLY01758223 / EUVD-2026-115057)
A vulnerability described as critical has been identified in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT
CVE-2026-20596 | MediaTek Modem out-of-bounds (MOLY01758225 / EUVD-2026-115056)
A vulnerability marked as critical has been reported in MediaTek Modem. The impacted element is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20596. Remote exploitation of th
CVE-2026-20595 | MediaTek MT8911 out-of-bounds write (ALPS11263078 / EUVD-2026-115055)
A vulnerability categorized as critical has been discovered in MediaTek MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6858, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897,
CVE-2026-20594 | MediaTek Modem out-of-bounds (MOLY01349680/MOLY01369097 / EUVD-2026-115054)
A vulnerability categorized as critical has been discovered in MediaTek Modem. The affected element is an unknown function. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20594. It is possible to
CVE-2026-20600 | MediaTek MT8883 denial of service (MOLY01416152 / EUVD-2026-114931)
A vulnerability classified as critical was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8875 and
CVE-2026-20599 | MediaTek MT8893 privileges management (MOLY01790985 / EUVD-2026-114930)
A vulnerability, which was classified as very critical, has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT683
CVE-2026-20598 | MediaTek MT8883 Modem integer overflow (MOLY01755742 / EUVD-2026-115058)
A vulnerability, which was classified as critical, was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863,
CVE-2026-68589 | MediaTek MT8893 out-of-bounds write (MOLY01320076 / EUVD-2026-114933)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689
CVE-2026-68588 | MediaTek MT8883 Modem integer overflow (MOLY01334054/MOLY01312486 / EUVD-2026-114932)
A vulnerability classified as critical has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-75913 | Hmbown CodeWhale up to 0.8.63 git_show tool rev argument injection
A vulnerability was found in Hmbown CodeWhale up to 0.8.63. It has been rated as problematic. The impacted element is the function git_show of the component git_show tool. This manipulation of the argument rev causes argument injection. Thi
CVE-2026-75857 | Hmbown CodeWhale up to 0.8.63 exec_shell_interact injection
A vulnerability labeled as critical has been found in Hmbown CodeWhale up to 0.8.63. The impacted element is the function exec_shell_interact. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-75857
CVE-2026-74600 | Linux Kernel up to 7.1.8 Page Table Check mm/page_table_check.c page_table_check_set/page_table_check_clear resource consumption (Nessus ID 339003 / WID-SEC-2026-2970)
A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.8. The impacted element is the function page_table_check_set/page_table_check_clear of the file mm/page_table_check.c of the component Page Table Check. The
CVE-2026-74599 | Linux Kernel up to 6.18.44/7.1.8 ptdump mm/ptdump.c ptdump_walk_pgd race condition (WID-SEC-2026-2970)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.44/7.1.8. The affected element is the function ptdump_walk_pgd of the file mm/ptdump.c of the component ptdump. The manipulation leads to race
CVE-2026-74544 | Linux Kernel up to 7.1.7/7.2-rc5 cls_u32 net/sched/cls_u32.c u32_change offshift out-of-bounds
A vulnerability classified as very critical was found in Linux Kernel up to 7.1.7/7.2-rc5. This vulnerability affects the function u32_change of the file net/sched/cls_u32.c of the component cls_u32. Such manipulation of the argument offshi
CVE-2026-74537 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 Bluetooth iso_conn_ready use after free (Nessus ID 335855)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5. The impacted element is the function iso_conn_ready of the component Bluetooth. Such manipulation leads to use after free. This vulnerabili
CVE-2026-74527 | Linux Kernel up to 7.1.7/7.2-rc5 octeontx2-af cgx_get_pkind/rvu_cgx_is_pkind_config_permitted state issue
A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.7/7.2-rc5. Affected by this issue is the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation leads to
CVE-2026-74417 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 radeon radeon_align_pitch integer overflow
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function radeon_align_pitch of the component radeon. The manipulation results in integer overflow. This v