CVE Vulnerability Database
Search and browse 420,152 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-121416 | HIGH | 7.1 | — | Nov 3, 2026 | SurrealDB 2.0.0 before 3.3.1 does not enforce --deny-funcs restrictions on method-style function calls in the streaming ... |
| CVE-2026-121415 | LOW | 3.7 | — | Nov 3, 2026 | Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips field type validation for null-valued dot n... |
| CVE-2026-121414 | MEDIUM | 5.9 | 0.3% | Nov 3, 2026 | Parse Server before 8.6.110 and 9.0.0 before 9.10.6-alpha.2 fails to contain a serialization error when an object update... |
| CVE-2026-121413 | LOW | 3.1 | — | Nov 3, 2026 | Parse Server before 8.6.112 and 9.0.0 before 9.10.6-alpha.4 contains an authorization bypass in the session upgrade endp... |
| CVE-2026-121412 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource consumption vulnerability in the proxy that lets conn... |
| CVE-2026-121411 | LOW | 3.1 | — | Nov 3, 2026 | FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUT... |
| CVE-2026-121410 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the RDPGFX ALPHA WIRETOSURFACE_2 handler that fails ... |
| CVE-2026-121409 | MEDIUM | 5.9 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthenticated peers ... |
| CVE-2026-121408 | MEDIUM | 5.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redirection channel because FindChannelById returns a ... |
| CVE-2026-121407 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allow... |
| CVE-2026-121406 | MEDIUM | 4.3 | 0.2% | Nov 3, 2026 | FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zgfx_decompr... |
| CVE-2026-121405 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious serv... |
| CVE-2026-121404 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server that allows authenticated RDP clie... |
| CVE-2026-121403 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncat... |
| CVE-2026-121402 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerability that allows malicious RDP servers to crash xfree... |
| CVE-2026-121401 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYPE_EXTENDED... |
| CVE-2026-121400 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a malicious R... |
| CVE-2026-121399 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gatewa... |
| CVE-2026-121398 | MEDIUM | 5.9 | 0.3% | Nov 3, 2026 | FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerability in the freerdp-proxy dyn-channel-dump module ... |
| CVE-2026-121397 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability in save_png_to_buffer() that allows malicious RDP s... |
| CVE-2026-121396 | MEDIUM | 4.3 | — | Nov 3, 2026 | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_a... |
| CVE-2026-121395 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR ... |
| CVE-2026-121394 | MEDIUM | 6.5 | 0.3% | Nov 3, 2026 | FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the RemoteFX RLGR decoder that allows malicious serve... |
| CVE-2026-121393 | MEDIUM | 6.5 | — | Nov 3, 2026 | FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerability that allows malicious RDP servers to abort c... |
| CVE-2026-121392 | HIGH | 7.4 | — | Nov 3, 2026 | FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tls_verify_certificate() that accepts... |