CVE-2026-103227 | Medium | 6.3 | 2026-09-30 | A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_url of the file src/media_tools/dash_client.c of t… |
CVE-2026-81433 | | | 2026-09-30 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an unauthenticated attacker with adjacent n… |
CVE-2026-76723 | Critical | 9.6 | 2026-09-29 | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achie… |
CVE-2026-102296 | Medium | 6.5 | 2026-09-28 | ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting a… |
CVE-2026-88775 | Critical | 9.8 | 2026-09-27 | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-… |
CVE-2026-6730 | Critical | 9.8 | 2026-09-23 | IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbi… |
CVE-2026-88409 | High | 8.8 | 2026-09-21 | FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function (/v19/decode_matrix.c). This vulnerab… |
CVE-2026-94101 | Critical | 9.9 | 2026-09-21 | A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/… |
CVE-2026-94100 | Critical | 9.9 | 2026-09-21 | A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the componen… |
CVE-2026-93741 | Critical | 10.0 | 2026-09-19 | A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlW… |
CVE-2026-93740 | Critical | 10.0 | 2026-09-18 | A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulatio… |
CVE-2026-93739 | Critical | 9.9 | 2026-09-18 | A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation… |
CVE-2026-93738 | Critical | 9.9 | 2026-09-18 | A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boafrm/formSchedule. Performing a manipula… |
CVE-2026-76705 | Medium | 5.5 | 2026-09-15 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated… |
CVE-2026-76703 | Medium | 5.5 | 2026-09-15 | A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated at… |
CVE-2026-76699 | Medium | 6.4 | 2026-09-15 | A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allo… |
CVE-2026-76695 | Medium | 6.5 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remo… |
CVE-2026-76691 | High | 7.2 | 2026-09-15 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated r… |
CVE-2026-76683 | High | 8.1 | 2026-09-15 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to… |
CVE-2026-76682 | High | 8.2 | 2026-09-15 | A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited… |
CVE-2026-76674 | Critical | 9.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remo… |
CVE-2026-58710 | High | 8.8 | 2026-09-15 | In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2026-58695 | High | 7.8 | 2026-09-15 | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escal… |
CVE-2026-56978 | High | 8.4 | 2026-09-15 | In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2026-56892 | Medium | 6.2 | 2026-09-15 | In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure wi… |
CVE-2026-55343 | High | 8.0 | 2026-09-15 | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with n… |
CVE-2026-55331 | High | 8.8 | 2026-09-15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no addition… |
CVE-2026-55301 | High | 8.4 | 2026-09-15 | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2026-0177 | Medium | 4.4 | 2026-09-15 | In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure… |
CVE-2026-91953 | Medium | 6.5 | 2026-09-15 | FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request() that fails to validate the LB_LOAD_BALANCE_INFO… |
CVE-2026-92043 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunder… |
CVE-2026-92020 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41… |
CVE-2026-92014 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 115.41, Firefox ESR 140.16, an… |
CVE-2026-92013 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92012 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92011 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92010 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92009 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92008 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92007 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-92006 | High | 8.8 | 2026-09-15 | Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 115… |
CVE-2026-84632 | High | 7.3 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequo… |
CVE-2026-84609 | Critical | 9.8 | 2026-09-14 | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS T… |
CVE-2026-84581 | High | 8.4 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a ma… |
CVE-2026-84577 | High | 8.2 | 2026-09-14 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass… |
CVE-2026-84571 | Medium | 4.3 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS… |
CVE-2026-84520 | Critical | 9.8 | 2026-09-14 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected sy… |
CVE-2026-84512 | High | 8.8 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a ma… |
CVE-2026-84497 | High | 7.8 | 2026-09-14 | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac… |
CVE-2026-84489 | Medium | 5.5 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 2… |
CVE-2026-65398 | High | 7.8 | 2026-09-14 | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS… |
CVE-2026-65357 | High | 7.8 | 2026-09-14 | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26… |
CVE-2026-28934 | Medium | 6.5 | 2026-09-14 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a ma… |
CVE-2026-55209 | Critical | 9.8 | 2026-09-14 | resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields… |
CVE-2026-90804 | Medium | 4.8 | 2026-09-14 | A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the… |
CVE-2026-90803 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf… |
CVE-2026-90801 | Medium | 5.3 | 2026-09-14 | A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation… |
CVE-2026-82772 | High | 8.8 | 2026-09-14 | Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted request to the product's web service, an arbitrary… |
CVE-2026-82770 | High | 8.8 | 2026-09-14 | Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafted request to the product's web service, an arbitr… |
CVE-2026-16726 | | | 2026-09-14 | Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows
attackers to stop Windows. |
CVE-2023-24291 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. |
CVE-2023-24287 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. |
CVE-2023-24286 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. |
CVE-2023-24285 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed. |
CVE-2023-24284 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. |
CVE-2023-24283 | Low | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a… |
CVE-2026-90608 | Critical | 9.9 | 2026-09-14 | A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component bo… |
CVE-2026-90607 | Critical | 9.9 | 2026-09-14 | A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the compone… |
CVE-2026-90606 | Critical | 9.9 | 2026-09-14 | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Set… |
CVE-2026-90605 | Critical | 9.9 | 2026-09-14 | A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the… |
CVE-2026-90780 | High | 7.5 | 2026-09-13 | SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content… |
CVE-2026-90778 | High | 7.5 | 2026-09-13 | SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more… |
CVE-2026-48490 | | | 2026-09-11 | ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attac… |
CVE-2026-42808 | Medium | 6.8 | 2026-09-10 | An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.
The host streaming API function {{coines_read_stream_sensor_data()}} fails… |
CVE-2026-87931 | Critical | 9.6 | 2026-09-10 | A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the co… |
CVE-2026-71613 | High | 7.8 | 2026-09-09 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function… |
CVE-2026-71612 | High | 8.4 | 2026-09-09 | Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function… |
CVE-2026-58839 | High | 7.8 | 2026-09-08 | In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no… |
CVE-2026-58823 | High | 7.8 | 2026-09-08 | In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2026-55290 | Low | 3.3 | 2026-09-08 | In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2026-55285 | High | 7.8 | 2026-09-08 | In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2026-55277 | High | 8.0 | 2026-09-08 | In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proxima… |
CVE-2026-49895 | Low | 3.5 | 2026-09-08 | In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (… |
CVE-2026-49884 | High | 7.8 | 2026-09-08 | In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privile… |
CVE-2026-44756 | Critical | 10.0 | 2026-09-08 | A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could e… |
CVE-2026-86166 | High | 8.8 | 2026-09-06 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component B… |
CVE-2026-86165 | Critical | 9.8 | 2026-09-06 | A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulatio… |
CVE-2026-75438 | High | 7.5 | 2026-09-04 | Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function |
CVE-2026-85110 | High | 8.8 | 2026-09-03 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Serv… |
CVE-2026-85109 | Critical | 9.8 | 2026-09-03 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Serve… |
CVE-2026-85031 | Critical | 9.9 | 2026-09-03 | A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of t… |
CVE-2021-43614 | Medium | 6.7 | 2026-09-03 | Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure. |
CVE-2026-73774 | High | 7.6 | 2026-09-01 | A buffer overflow vulnerability exists in the underlying operating system of AOS-CX that could lead to unauthenticated disclosure of sensitive information by s… |
CVE-2026-73772 | Medium | 6.5 | 2026-09-01 | Buffer overflow vulnerabilities exist in an underlying service of AOS-CX that could lead to an unauthenticated denial-of-service condition by sending specially… |
CVE-2026-52295 | Low | 2.9 | 2026-09-01 | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c. |
CVE-2026-51934 | Critical | 9.8 | 2026-09-01 | Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd. Tenda A18 v.15.13.07.09 allows a remote attacker to execute arbitrary code via th… |
CVE-2026-9625 | | | 2026-09-01 | A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet with an oversized embedded message request can cause the RSLinx® Classic… |
CVE-2026-84126 | Medium | 4.3 | 2026-09-01 | Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155. |
CVE-2026-83596 | High | 8.8 | 2026-08-31 | A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. |
CVE-2026-82542 | Critical | 10.0 | 2026-08-30 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of th… |