High-severity CVEs (page 31)

Page 31 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.

All high-severity CVEs — newest first (page 31 of 100)
CVESeverityScorePublishedSummary
CVE-2026-102193High7.02026-10-13Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-102192High7.52026-10-13Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-102191High7.02026-10-13Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-102189High7.02026-10-13Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100225High7.02026-10-13Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100220High8.82026-10-13Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.
CVE-2026-100218High8.12026-10-13Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
CVE-2026-100217High7.82026-10-13Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
CVE-2026-100216High7.02026-10-13Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100215High7.82026-10-13Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
CVE-2026-100214High8.82026-10-13Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.
CVE-2026-100212High8.82026-10-13Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100211High8.82026-10-13Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100210High8.82026-10-13Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100209High8.82026-10-13Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-100207High7.32026-10-13Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code lo…
CVE-2026-100205High7.12026-10-13Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
CVE-2026-100203High7.02026-10-13Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100201High7.02026-10-13Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100200High7.02026-10-13Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-23707High7.22026-10-13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 th…
CVE-2026-23705High7.22026-10-13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 th…
CVE-2026-108385High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108384High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108383High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108382High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108381High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108380High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108379High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108378High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108377High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108376High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-108375High8.82026-10-13dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From ver…
CVE-2026-104085High8.82026-10-13odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploadi…
CVE-2025-57739High8.82026-10-13An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 throug…
CVE-2025-46773High8.82026-10-13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 th…
CVE-2026-85990High8.82026-10-13Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime'…
CVE-2026-82416High7.72026-10-13FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session exten…
CVE-2026-61642High7.72026-10-13Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request S…
CVE-2026-54641High7.72026-10-13OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/…
CVE-2026-54640High7.62026-10-13OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/…
CVE-2026-110128High7.52026-10-13fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via t…
CVE-2026-110124High8.12026-10-13FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and…
CVE-2026-110123High7.12026-10-13Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by cal…
CVE-2026-110119High7.12026-10-13Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwri…
CVE-2026-110115High7.52026-10-13Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler tha…
CVE-2026-110108High8.12026-10-13MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /…
CVE-2026-110102High7.52026-10-13Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -…
CVE-2026-110097High8.12026-10-13Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the…
CVE-2026-109620High7.32026-10-13A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/inde…
CVE-2026-109607High7.32026-10-13A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the componen…
CVE-2026-109606High7.32026-10-13A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php…
CVE-2026-106047High7.72026-10-13A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read ar…
CVE-2026-106043High7.52026-10-13A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modi…
CVE-2026-103030High7.52026-10-13Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original…
CVE-2026-79610High8.82026-10-13XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect…
CVE-2026-79609High8.82026-10-13XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table e…
CVE-2026-55376High8.82026-10-13Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or e…
CVE-2026-110025High7.32026-10-13A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.i…
CVE-2026-109605High7.32026-10-13A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_clas…
CVE-2026-109525High7.32026-10-13A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of…
CVE-2026-104935High8.62026-10-13Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact I…
CVE-2026-102702High7.52026-10-13[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) a…
CVE-2026-102699High7.52026-10-13[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) a…
CVE-2026-95124High7.52026-10-13Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between it…
CVE-2026-95122High7.52026-10-13mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial…
CVE-2026-95121High7.82026-10-13An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can c…
CVE-2026-95115High7.52026-10-13Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser
CVE-2026-95114High7.52026-10-13libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial o…
CVE-2026-65198High8.62026-10-13Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the o…
CVE-2026-53420High8.02026-10-13Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access.
CVE-2026-53418High8.12026-10-13Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an esca…
CVE-2026-11732High8.82026-10-13An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent atta…
CVE-2026-11731High8.82026-10-13An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s…
CVE-2026-109523High7.32026-10-13A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an…
CVE-2026-109522High7.32026-10-13A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function…
CVE-2026-109521High7.32026-10-13A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function…
CVE-2026-108185High7.42026-10-13Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via netw…
CVE-2026-108184High7.42026-10-13Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access.
CVE-2026-95680High8.02026-10-13IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the…
CVE-2026-93907High8.12026-10-13IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation hand…
CVE-2026-74045High7.12026-10-13Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An…
CVE-2026-74037High7.22026-10-13Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist. Attacker…
CVE-2026-74036High7.22026-10-13Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration sourc…
CVE-2026-74035High7.22026-10-13Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password p…
CVE-2026-74034High7.52026-10-13Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-c…
CVE-2026-109967High7.52026-10-13yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attacke…
CVE-2026-109965High7.12026-10-13Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks in…
CVE-2026-109961High8.52026-10-13Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS…
CVE-2026-109960High7.72026-10-13Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a…
CVE-2026-109956High7.02026-10-13NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated…
CVE-2026-109676High8.82026-10-13FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle o…
CVE-2026-109520High8.82026-10-13A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of…
CVE-2026-109519High8.32026-10-13A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template R…
CVE-2026-103499High7.52026-10-13IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenti…
CVE-2026-65180High7.82026-10-13NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A…
CVE-2026-65172High8.62026-10-13NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may a…
CVE-2026-65170High8.62026-10-13NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery…
CVE-2026-65164High8.12026-10-13NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limita…
CVE-2026-65161High7.52026-10-13NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process b…