59.452 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.452 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-64046 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text SG Sashiko points out that if end = 0 (start != 0) the current code will create a chain link to content type right after the wrap link: T | 0.5% | — |
| CVE-2026-64007 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensure_writable synproxy_tstamp_adjust() rewrites the TCP timestamp option in place and then patches the TCP checksum via inet_proto_csum_replac | 0.5% | — |
| CVE-2026-63994 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Sashiko found that iptunnel_pmtud_build_icmp() and iptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ip | 0.5% | — |
| CVE-2026-63993 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() skb_tunnel_check_pmtu() can change skb->head. Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF. Use ins | 0.5% | — |
| CVE-2026-63992 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() In some cases, iptunnel_pmtud_check_icmp() can be called while skb transport header is not set. This triggers an out-o | 0.5% | — |
| CVE-2026-53186 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: bound SRP_RSP sense copy by the received length srp_process_rsp() copies sense data from rsp->data + resp_data_len, where resp_data_len is the full 32-bit value supplied by the SRP | 0.5% | — |
| CVE-2026-53045 | CRIT 9.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The code checking whether the specified memory timing enables DLL in the EMRS register was reversed. DLL is enabled if bit A0 is low. Fix the check | 0.5% | — |
| CVE-2026-53043 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in dlm_match_regions()". In dlm_match_regions(), the qr_numregions field from a DLM_QUERY_REGI | 0.5% | — |
| CVE-2026-46043 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv rxe_rcv() currently checks only that the incoming packet is at least header_size(pkt) bytes long before payload_size() is use | 0.5% | — |
| CVE-2026-108455 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2026-108454 | MED 6.5 | microsoft 365_apps Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2026-108438 | MED 6.5 | microsoft 365_apps Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2026-108436 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2026-108435 | MED 6.5 | microsoft 365_apps Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2026-108434 | MED 6.5 | microsoft 365_apps Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 0.5% | — |
| CVE-2025-23335 | MED 4.4 | nvidia triton_inference_server NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configuration and a specific input. A successful exploit of this vulnerability might lead to d | 0.5% | — |
| CVE-2024-38195 | HIGH 7.8 | microsoft azure_cyclecloud Azure CycleCloud Remote Code Execution Vulnerability | 0.5% | — |
| CVE-2024-29986 | MED 5.4 | microsoft edge_chromium Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-20098 | MED 4.4 | cisco catalyst_sd-wan_manager A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversal character sequences within system commands. An attacker | 0.5% | — |
| CVE-2022-40676 | HIGH 7.5 | fortinet fortinac A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 all | 0.5% | — |
| CVE-2022-38431 | HIGH 7.8 | adobe photoshop Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this | 0.5% | — |
| CVE-2020-5428 | MED 6.0 | vmware spring_cloud_task In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer. | 0.5% | — |
| CVE-2019-17054 | LOW 3.3 | linux linux_kernel atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c. | 0.5% | — |
| CVE-2005-0003 | LOW 2.1 | avaya converged_communications_server The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code | 0.5% | — |
| CVE-2026-81357 | HIGH 8.2 | microsoft visual_studio_code Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. | 0.5% | — |