Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%Oct 16, 2026
- Medium5.9A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS.EPSS 0.1%Oct 14, 2026
- Medium4.3A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.EPSS 0.1%Oct 14, 2026
- Medium5.3An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, wh…EPSS 0.3%Oct 14, 2026
- Medium6.7The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.EPSS 1.7%Oct 14, 2026
- Medium4.3Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.EPSS 0.1%Oct 14, 2026
- High8.2Metalama allows local code execution through DLL planting in shared temporary directoriesOct 14, 2026
- High7.8Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege VulnerabilityOct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityOct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityOct 13, 2026
- High7.4Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilityOct 13, 2026
- High7.8Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege VulnerabilityOct 13, 2026
- High7.0VNote is a note-taking platform.EPSS 0.1%Oct 13, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityEPSS 0.8%Oct 13, 2026
- High7.1The macOS version of the DigiD app is not signed with Hardened Runtime.EPSS 0.1%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityEPSS 0.8%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityEPSS 0.6%Oct 13, 2026
- Medium5.9Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%Oct 13, 2026
- High8.8Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Mini…EPSS 0.3%Oct 12, 2026
- High7.2VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data.EPSS 0.1%Oct 12, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryOct 9, 2026
- High8.4Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an…EPSS 0.1%Oct 1, 2026
- High8.8Apple Multiple Products Out-of-Bounds Write VulnerabilityKEVEPSS 1.2%Sep 28, 2026
- High8.8A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration valu…Sep 23, 2026
- UnknownCVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM)EPSS 0.1%Sep 12, 2026
355 records · page 1 of 15
PreviousNext