CVE Vulnerability Database

Search and browse 420,409 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-116728MEDIUM5.5libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvde_encrypted_metadata_read_type_0x0024...
CVE-2026-116727LOW3.3gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM comma...
CVE-2026-116726LOW3.3Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify fil...
CVE-2026-116725MEDIUM5.5gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject RO...
CVE-2026-116724HIGH7.8FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel ...
CVE-2026-116723HIGH7.8FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attacke...
CVE-2026-116591HIGH8.7compress provides various compression algorithms. Prior to 1.20.2, the zstd DecodeAll and streaming decoder paths can pa...
CVE-2026-116590MEDIUM5.9snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to 1.1.10.9, Sna...
CVE-2026-116589HIGH8.2Datadog dd-trace-py is the Datadog Python APM client. From 3.13.0 until 4.15.5, the IAST string-processing instrumentati...
CVE-2026-116588HIGH8.7Datadog dd-trace-py is the Datadog Python APM client. From 1.5.0 until 3.19.9 and 4.15.6, the default query-string obfus...
CVE-2026-116587HIGH7.5Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup...
CVE-2026-116586MEDIUM6.9Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup...
CVE-2026-116585MEDIUM6.9Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including sup...
CVE-2026-116515MEDIUM6.3A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown cod...
CVE-2026-116514MEDIUM4.3A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file ...
CVE-2026-116508CRITICAL10A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function su...
CVE-2026-116507MEDIUM5.3A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function...
CVE-2026-86992HIGH7.5The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and...
CVE-2026-86991HIGH7.5A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS ...
CVE-2026-86990MEDIUM5.1An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, ...
CVE-2026-86989MEDIUM5.1An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2...
CVE-2026-86988MEDIUM4.3The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, t...
CVE-2026-86987MEDIUM5.5An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. ...
CVE-2026-86986HIGH7.5A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and...
CVE-2026-86985MEDIUM6.5This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7....