High-severity CVEs (page 78)
Page 78 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73458 | High | 8.2 | 2026-09-15 | On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause… |
CVE-2026-71047 | High | 8.8 | 2026-09-15 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 1… |
CVE-2026-70915 | High | 8.8 | 2026-09-15 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 1… |
CVE-2026-69218 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS… |
CVE-2026-69217 | High | 8.7 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and u… |
CVE-2026-69210 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Inte… |
CVE-2026-69205 | High | 8.7 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Enco… |
CVE-2026-69203 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGS_… |
CVE-2026-69202 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received fr… |
CVE-2026-51134 | High | 7.5 | 2026-09-15 | The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml. |
CVE-2026-18424 | High | 7.1 | 2026-09-15 | Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple… |
CVE-2026-18423 | High | 7.1 | 2026-09-15 | Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs . An auth… |
CVE-2026-13327 | High | 8.3 | 2026-09-15 | Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to in… |
CVE-2026-92180 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows l… |
CVE-2026-92179 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… |
CVE-2026-92178 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2026-92177 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… |
CVE-2026-92176 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2026-79411 | High | 8.8 | 2026-09-15 | Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.us… |
CVE-2026-79410 | High | 8.1 | 2026-09-15 | Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below… |
CVE-2026-69213 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 serializes outbound frames through one unbounded queue consumed by… |
CVE-2026-69209 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The shared WebSocket decoder permits unbounded message buffering because defragm… |
CVE-2026-69208 | High | 7.5 | 2026-09-15 | Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the… |
CVE-2026-58766 | High | 7.8 | 2026-09-15 | In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2026-58744 | High | 7.8 | 2026-09-15 | In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no a… |
CVE-2026-58734 | High | 7.0 | 2026-09-15 | In google_mba_recv_msg of google_mba_poll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege… |
CVE-2026-58728 | High | 7.0 | 2026-09-15 | In ARM64_TLBI of mmu.h, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-58724 | High | 7.0 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-58710 | High | 8.8 | 2026-09-15 | In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution… |
CVE-2026-58704 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privileg… |
CVE-2026-58701 | High | 7.0 | 2026-09-15 | In trusty_dputc of generic-arm64-smcall.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege wi… |
CVE-2026-58699 | High | 8.4 | 2026-09-15 | In Vp9DecEndOfStream of vp9hwd_output.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2026-58695 | High | 7.8 | 2026-09-15 | In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escal… |
CVE-2026-58691 | High | 8.4 | 2026-09-15 | In FsmReleaseKey of fsm.c, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no add… |
CVE-2026-58683 | High | 8.8 | 2026-09-15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no addition… |
CVE-2026-58679 | High | 8.4 | 2026-09-15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible heap buffer overflow due to a logic error in the code. This could lead to local escalation of pri… |
CVE-2026-58678 | High | 7.8 | 2026-09-15 | In Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution p… |
CVE-2026-57014 | High | 7.8 | 2026-09-15 | In phNxpNciHal_ext_process_nfc_init_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local… |
CVE-2026-57012 | High | 8.4 | 2026-09-15 | In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no ad… |
CVE-2026-57008 | High | 7.5 | 2026-09-15 | In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional exec… |
CVE-2026-56997 | High | 8.8 | 2026-09-15 | In Av1DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privi… |
CVE-2026-56986 | High | 8.4 | 2026-09-15 | In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution… |
CVE-2026-56985 | High | 8.4 | 2026-09-15 | In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-56982 | High | 7.8 | 2026-09-15 | In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privile… |
CVE-2026-56978 | High | 8.4 | 2026-09-15 | In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2026-56974 | High | 8.8 | 2026-09-15 | In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution… |
CVE-2026-56970 | High | 8.4 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additi… |
CVE-2026-56967 | High | 8.0 | 2026-09-15 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no… |
CVE-2026-56945 | High | 7.8 | 2026-09-15 | In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privile… |
CVE-2026-56942 | High | 8.8 | 2026-09-15 | In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege… |
CVE-2026-56941 | High | 8.4 | 2026-09-15 | In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege w… |
CVE-2026-56920 | High | 8.8 | 2026-09-15 | In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code executi… |
CVE-2026-56914 | High | 8.4 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional executio… |
CVE-2026-56882 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional exe… |
CVE-2026-56881 | High | 8.4 | 2026-09-15 | In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no… |
CVE-2026-55359 | High | 7.8 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execu… |
CVE-2026-55351 | High | 7.8 | 2026-09-15 | In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privi… |
CVE-2026-55343 | High | 8.0 | 2026-09-15 | In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with n… |
CVE-2026-55331 | High | 8.8 | 2026-09-15 | In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no addition… |
CVE-2026-55323 | High | 7.8 | 2026-09-15 | In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privi… |
CVE-2026-55318 | High | 8.8 | 2026-09-15 | In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privil… |
CVE-2026-55306 | High | 7.5 | 2026-09-15 | In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execu… |
CVE-2026-55301 | High | 8.4 | 2026-09-15 | In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no… |
CVE-2026-19886 | High | 7.8 | 2026-09-15 | OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2026-19885 | High | 7.8 | 2026-09-15 | OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2026-19781 | High | 7.8 | 2026-09-15 | Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2026-19774 | High | 7.1 | 2026-09-15 | BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on a… |
CVE-2026-0200 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional… |
CVE-2026-0199 | High | 7.8 | 2026-09-15 | In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of priv… |
CVE-2026-0194 | High | 8.4 | 2026-09-15 | In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional ex… |
CVE-2026-0189 | High | 8.4 | 2026-09-15 | In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no a… |
CVE-2026-0171 | High | 8.8 | 2026-09-15 | In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional ex… |
CVE-2026-0170 | High | 8.8 | 2026-09-15 | In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privi… |
CVE-2026-0159 | High | 8.8 | 2026-09-15 | In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution… |
CVE-2026-88765 | High | 8.5 | 2026-09-15 | GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions cou… |
CVE-2026-85234 | High | 7.5 | 2026-09-15 | A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can p… |
CVE-2026-81240 | High | 8.6 | 2026-09-15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attack… |
CVE-2026-81239 | High | 8.6 | 2026-09-15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attack… |
CVE-2026-81238 | High | 7.5 | 2026-09-15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker w… |
CVE-2026-81236 | High | 8.6 | 2026-09-15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attack… |
CVE-2026-81235 | High | 8.0 | 2026-09-15 | Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access c… |
CVE-2026-61668 | High | 8.1 | 2026-09-15 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities… |
CVE-2026-58485 | High | 7.1 | 2026-09-15 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read r… |
CVE-2026-58483 | High | 7.5 | 2026-09-15 | mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, web_url_read i… |
CVE-2026-56829 | High | 8.1 | 2026-09-15 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without ed… |
CVE-2026-56827 | High | 8.1 | 2026-09-15 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/… |
CVE-2026-56825 | High | 8.1 | 2026-09-15 | Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('de… |
CVE-2026-55225 | High | 8.0 | 2026-09-15 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacke… |
CVE-2026-54549 | High | 8.3 | 2026-09-15 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the upload_ad_image tool in meta_ads_mcp/… |
CVE-2026-54547 | High | 7.4 | 2026-09-15 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in meta_ads_mcp/c… |
CVE-2026-52484 | High | 8.8 | 2026-09-15 | An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-uti… |
CVE-2026-40058 | High | 8.8 | 2026-09-15 | CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office Fil… |
CVE-2026-13210 | High | 7.7 | 2026-09-15 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain co… |
CVE-2026-12752 | High | 7.1 | 2026-09-15 | IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote a… |
CVE-2026-12728 | High | 8.8 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-12667 | High | 7.1 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-12666 | High | 8.1 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-12358 | High | 7.5 | 2026-09-15 | IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources. |
CVE-2026-12355 | High | 8.1 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |
CVE-2026-12354 | High | 7.5 | 2026-09-15 | IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4… |