CVE Vulnerability Database
Search and browse 397,696 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-34182 | CRITICAL | 9.1 | 0.2% | Jun 9, 2026 | Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the ciphe... |
| CVE-2026-34181 | HIGH | 7.4 | 0.2% | Jun 9, 2026 | Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Base... |
| CVE-2026-34180 | HIGH | 7.5 | 0.5% | Jun 9, 2026 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes ... |
| CVE-2026-33828 | HIGH | 7.8 | 0.3% | Jun 9, 2026 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-33113 | MEDIUM | 6.1 | 0.5% | Jun 9, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo... |
| CVE-2026-32193 | HIGH | 8.8 | 0.3% | Jun 9, 2026 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service all... |
| CVE-2026-28301 | MEDIUM | 4.8 | 0.2% | Jun 9, 2026 | A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended websit... |
| CVE-2026-26142 | CRITICAL | 9.8 | 1.9% | Jun 9, 2026 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
| CVE-2026-24181 | HIGH | 7.3 | 0.1% | Jun 9, 2026 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A succes... |
| CVE-2026-24180 | HIGH | 7.3 | 0.2% | Jun 9, 2026 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A succes... |
| CVE-2026-22926 | HIGH | 7.8 | 0.1% | Jun 9, 2026 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
| CVE-2026-0420 | MEDIUM | 5.9 | 0.1% | Jun 9, 2026 | An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which co... |
| CVE-2026-0419 | HIGH | 8 | 0.3% | Jun 9, 2026 | Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows u... |
| CVE-2026-0418 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local n... |
| CVE-2026-0417 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected ... |
| CVE-2026-0416 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated admini... |
| CVE-2026-0415 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t... |
| CVE-2026-0414 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected t... |
| CVE-2026-0413 | MEDIUM | 4.5 | 0.3% | Jun 9, 2026 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated a... |
| CVE-2026-0412 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in ... |
| CVE-2026-0411 | HIGH | 8 | 0.3% | Jun 9, 2026 | An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected... |
| CVE-2026-0410 | MEDIUM | 4.5 | 0.2% | Jun 9, 2026 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorize... |
| CVE-2026-0409 | MEDIUM | 6.4 | 0.3% | Jun 9, 2026 | A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the rout... |
| CVE-2026-8045 | MEDIUM | 6.5 | 0.2% | Jun 9, 2026 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosu... |
| CVE-2026-8025 | CRITICAL | 9.8 | 0.3% | Jun 9, 2026 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information T... |