Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium5.3Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs.CVE-2026-63792 · CVE.org · NIST NVDOct 14, 2026
Medium6.5A flaw was found in Samba’s vfs_worm module.CVE-2026-2340 · redhat · openshift container platform · CVE.org · FIRST EPSS · NIST NVD · linux, redhatEPSS 0.9%May 27, 2026
High7.8Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-27910 · microsoft · windows 10 1607 · CVE.org · FIRST EPSS · NIST NVD · microsoftEPSS 0.3%Apr 14, 2026
High7.8Android Pixel Privilege Escalation VulnerabilityCVE-2024-29748 · google · android · CISA KEV · CVE.org · FIRST EPSS · androidKEVEPSS 0.7%Apr 4, 2024