Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Mini…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.3Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.Check if you run itEPSS 0.12%Oct 12, 2026
- High7.3ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name…Check if you run itEPSS 0.13%Oct 11, 2026
- UnknownMalicious code in agent-vx (PyPI)Open the advisoryOct 10, 2026
- UnknownMalicious code in media-manager5 (PyPI)Open the advisoryOct 10, 2026
- UnknownMalicious code in passwordcracker (npm)Open the advisoryOct 10, 2026
- UnknownMalicious code in passwordcrackv2 (npm)Open the advisoryOct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 9, 2026
- UnknownRoot.Mkdir(All) can follow junctions out of the root on Windows in osCheck if you run itEPSS 0.49%Oct 8, 2026
- Medium4.6Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access.Check if you run itEPSS 0.10%Oct 6, 2026
- Medium5.3Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensi…Check if you run itEPSS 0.27%Oct 6, 2026
- High7.0Out of Bound Write on WibuKey for WindowsCheck if you run itEPSS 0.10%Oct 6, 2026
- Unknownuv: Path traversal on Windows through wheel extractionCheck if you run itEPSS 0.43%Oct 5, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…Check if you run itEPSS 0.13%Oct 1, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.29%Oct 1, 2026
- Unknownpalletsprojects werkzeug Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.78%Sep 30, 2026
- Medium6.1Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.24%Sep 29, 2026
- UnknownMalicious code in gemini-computer-use (npm)Open the advisorySep 21, 2026
- Medium5.3ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation VulnerabilityOpen the advisorySep 16, 2026
- UnknownSubpath symlinking on Windows nodes permits NTLM coercionOpen the advisorySep 14, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.19%Sep 14, 2026
- UnknownCVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM)Check if you run itEPSS 0.33%Sep 12, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.61%Sep 10, 2026
- UnknownCVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)Check if you run itEPSS 0.10%Sep 9, 2026