CVE-2026-47497 | High | 7.8 | 2026-09-30 | NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by send… |
CVE-2026-79417 | Medium | 5.3 | 2026-09-29 | Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle acces… |
CVE-2026-95360 | Medium | 5.3 | 2026-09-29 | Race condition in Editing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain sensitive information via a… |
CVE-2026-95344 | High | 8.0 | 2026-09-29 | Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a craft… |
CVE-2026-92369 | High | 7.3 | 2026-09-29 | TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged a… |
CVE-2026-101088 | Medium | 5.3 | 2026-09-27 | Nezha is a server and website monitoring tool. In versions >= 2.2.11 and < 2.3.1, the service sentinel worker (service/singleton/servicesentinel.go) contains a… |
CVE-2026-100713 | High | 7.8 | 2026-09-26 | Froxlor 2.3.10 and earlier contain a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchronization cron (lib/Froxlor/Cron/System/SshKeys.php… |
CVE-2026-100597 | High | 7.8 | 2026-09-26 | OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation ope… |
CVE-2026-91813 | High | 8.8 | 2026-09-23 | A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege extraction due to ins… |
CVE-2026-77242 | High | 7.5 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's… |
CVE-2026-86805 | Medium | 6.3 | 2026-09-22 | A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local att… |
CVE-2026-77633 | High | 7.1 | 2026-09-22 | Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory use… |
CVE-2026-63334 | Medium | 6.8 | 2026-09-21 | draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.7, deployments with ENABLE_DRAWIO_PROXY=1 are vulnerable to server-s… |
CVE-2026-55567 | High | 7.8 | 2026-09-21 | BleachBit cleans files to free disk space and to maintain privacy. Prior to 6.0.1, privileged Windows cleaning does not lock and validate a target's parent dir… |
CVE-2026-93380 | Low | 3.1 | 2026-09-17 | Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social en… |
CVE-2026-45720 | High | 7.0 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interce… |
CVE-2026-54587 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c u… |
CVE-2026-54576 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), a… |
CVE-2026-54575 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, privileged package fetch and cache-cleaning operations used race-prone path handling across libmport/… |
CVE-2026-86861 | Medium | 5.9 | 2026-09-17 | pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.check_access_permiss… |
CVE-2026-82761 | | | 2026-09-17 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its… |
CVE-2026-25278 | High | 7.8 | 2026-09-17 | Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying. |
CVE-2024-11222 | Medium | 6.4 | 2026-09-16 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain co… |
CVE-2026-91748 | High | 8.3 | 2026-09-15 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged… |
CVE-2026-91744 | Medium | 5.3 | 2026-09-15 | Race condition in PlatformIntegration in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and… |
CVE-2026-91743 | High | 8.3 | 2026-09-15 | Race condition in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitr… |
CVE-2026-91712 | High | 8.3 | 2026-09-15 | Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to potentiall… |
CVE-2026-91708 | Low | 3.1 | 2026-09-15 | Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin dat… |
CVE-2026-79994 | | | 2026-09-15 | The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the p… |
CVE-2026-58716 | Medium | 6.7 | 2026-09-15 | In multiple locations, there is a possible time-of-check to time-of-use due to a race condition. This could lead to local escalation of privilege with System e… |
CVE-2026-40058 | High | 8.8 | 2026-09-15 | CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office Fil… |
CVE-2026-77972 | | | 2026-09-15 | Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinat… |
CVE-2026-18069 | Medium | 6.0 | 2026-09-14 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use (TOCTOU) r… |
CVE-2026-86836 | | | 2026-09-14 | In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived fr… |
CVE-2026-53708 | Medium | 6.6 | 2026-09-14 | ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior t… |
CVE-2026-82430 | High | 7.8 | 2026-09-14 | Description
When launching a Docker or OCI worker, the setuid-root `worker-launcher` first changes ownership of the
entire worker directory to the untrusted t… |
CVE-2026-82429 | High | 7.8 | 2026-09-14 | Description
The setuid-root `worker-launcher` binary adjusts ownership and permissions of worker directories by walking
the tree with FTS and calling `lchown`… |
CVE-2026-23786 | Low | 2.8 | 2026-09-14 | An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exyn… |
CVE-2022-42917 | Medium | 6.7 | 2026-09-14 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replac… |
CVE-2026-68488 | Critical | 9.9 | 2026-09-10 | A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file… |
CVE-2026-88924 | High | 7.0 | 2026-09-10 | A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus sockets by calling the li… |
CVE-2026-87996 | High | 7.7 | 2026-09-09 | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/open_webui/re… |
CVE-2026-79968 | Medium | 5.6 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Ra… |
CVE-2026-79730 | Medium | 5.6 | 2026-09-09 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Ra… |
CVE-2026-87554 | High | 8.1 | 2026-09-09 | Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a… |
CVE-2026-87523 | Medium | 5.3 | 2026-09-09 | Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information… |
CVE-2026-87517 | Low | 3.1 | 2026-09-09 | Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy… |
CVE-2026-87457 | High | 8.1 | 2026-09-09 | Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a lo… |
CVE-2026-87433 | High | 8.8 | 2026-09-09 | Race condition in FileAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation v… |
CVE-2026-28671 | Low | 3.3 | 2026-09-08 | In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure… |
CVE-2026-78464 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-69859 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69804 | High | 7.5 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-69779 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally. |
CVE-2026-69563 | High | 7.0 | 2026-09-08 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69466 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-69440 | High | 7.0 | 2026-09-08 | Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-76925 | Medium | 5.8 | 2026-09-04 | A flaw was found in Flatpak. A Time-of-check to time-of-use (TOCTOU) race condition exists in the `org.freedesktop.Flatpak.SystemHelper` component. This vulner… |
CVE-2026-18567 | Medium | 4.4 | 2026-09-04 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket pa… |
CVE-2026-45197 | Low | 2.5 | 2026-09-04 | Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's… |
CVE-2026-85045 | High | 7.5 | 2026-09-03 | Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C… |
CVE-2026-78410 | High | 7.8 | 2026-09-02 | A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivil… |
CVE-2026-19118 | High | 7.5 | 2026-09-01 | A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required a… |
CVE-2026-80047 | High | 7.8 | 2026-09-01 | A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user consent when using… |
CVE-2026-78319 | | | 2026-09-01 | A service running on the affected products contains a potential Time-of-Check Time-of-Use (TOCTOU) race condition.
An unauthenticated remote attacker could exp… |
CVE-2026-78422 | | | 2026-08-31 | Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas… |
CVE-2026-19410 | | | 2026-08-31 | An Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-06-24 on Google Cloud Platform allows a remote a… |
CVE-2026-54754 | Critical | 9.6 | 2026-08-28 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderDa… |
CVE-2026-82238 | Low | 3.1 | 2026-08-28 | filebrowser from version 2.24.0 contains a race condition in the TUS upload handler that allows authenticated users to write past the declared Upload-Length by… |
CVE-2026-77573 | Low | 3.5 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component… |
CVE-2026-47836 | High | 7.2 | 2026-08-26 | The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check… |
CVE-2026-58094 | High | 7.8 | 2026-08-26 | The FIOSSHMLPGCNF ioctl(2) operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the… |
CVE-2026-65183 | High | 8.1 | 2026-08-25 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access… |
CVE-2026-79267 | Medium | 4.3 | 2026-08-25 | Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin polic… |
CVE-2026-79263 | High | 8.1 | 2026-08-25 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network… |
CVE-2026-79196 | Medium | 5.3 | 2026-08-25 | Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a… |
CVE-2026-79155 | High | 8.3 | 2026-08-25 | Race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute… |
CVE-2026-79089 | Medium | 5.3 | 2026-08-25 | Race condition in Transactions Platform in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass… |
CVE-2026-79071 | High | 8.3 | 2026-08-25 | Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitra… |
CVE-2026-79057 | High | 8.1 | 2026-08-25 | Race condition in Start in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arb… |
CVE-2026-79046 | Medium | 4.3 | 2026-08-25 | Race condition in Permissions in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origi… |
CVE-2026-79017 | Medium | 6.5 | 2026-08-25 | Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extens… |
CVE-2026-78991 | Medium | 5.3 | 2026-08-25 | Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive inf… |
CVE-2026-78894 | Low | 3.1 | 2026-08-25 | Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data… |
CVE-2026-55537 | High | 7.1 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.g… |
CVE-2026-55535 | Medium | 6.8 | 2026-08-25 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind th… |
CVE-2026-56708 | Medium | 5.3 | 2026-08-25 | Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by D… |
CVE-2026-9728 | Medium | 6.4 | 2026-08-24 | The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out… |
CVE-2026-49114 | High | 7.1 | 2026-08-21 | In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writ… |
CVE-2026-16935 | High | 7.8 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race cond… |
CVE-2026-76020 | High | 7.5 | 2026-08-20 | Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (… |
CVE-2026-64846 | Low | 2.8 | 2026-08-20 | Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exp… |
CVE-2026-16927 | High | 7.3 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain root privileges due to a time-of-check to time-of-use (TOCTOU) race conditio… |
CVE-2026-16922 | High | 7.0 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a time-of-check to time-of-use (TOCTOU) race condit… |
CVE-2026-16838 | High | 7.0 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check… |
CVE-2026-73829 | Low | 3.7 | 2026-08-19 | Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple… |
CVE-2024-13942 | High | 7.6 | 2026-08-19 | Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).
… |
CVE-2026-16819 | High | 7.7 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service and compromise data integrity due to a time-of-check ti… |
CVE-2026-56797 | High | 7.3 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local acc… |
CVE-2026-53477 | High | 7.8 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with l… |