CVE Vulnerability Database
Search and browse 424,817 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-21125 | HIGH | 8.6 | 0.2% | Oct 12, 2026 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows ... |
| CVE-2026-21124 | HIGH | 8.6 | 0.2% | Oct 12, 2026 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 al... |
| CVE-2026-21123 | MEDIUM | 6.7 | 0.1% | Oct 12, 2026 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with roo... |
| CVE-2026-21122 | HIGH | 7 | 0.2% | Oct 12, 2026 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code... |
| CVE-2026-21121 | MEDIUM | 6.9 | 0.2% | Oct 12, 2026 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use th... |
| CVE-2026-21120 | HIGH | 8.9 | 0.2% | Oct 12, 2026 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary co... |
| CVE-2026-21119 | MEDIUM | 4.8 | 0.1% | Oct 12, 2026 | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to ... |
| CVE-2026-21118 | MEDIUM | 6.9 | 0.1% | Oct 12, 2026 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in sc... |
| CVE-2026-21117 | MEDIUM | 5.1 | 0.2% | Oct 12, 2026 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive... |
| CVE-2026-21116 | MEDIUM | 5.1 | 0.2% | Oct 12, 2026 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds... |
| CVE-2026-21115 | MEDIUM | 5.1 | 0.2% | Oct 12, 2026 | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-b... |
| CVE-2026-21114 | HIGH | 7 | 0.2% | Oct 12, 2026 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary c... |
| CVE-2026-108801 | MEDIUM | 6.3 | 0.3% | Oct 12, 2026 | A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_... |
| CVE-2026-108800 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulat... |
| CVE-2026-108799 | HIGH | 7.3 | 0.4% | Oct 12, 2026 | A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function Pu... |
| CVE-2026-108798 | HIGH | 7.3 | 0.3% | Oct 12, 2026 | A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The m... |
| CVE-2026-108797 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of t... |
| CVE-2026-108796 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/fing... |
| CVE-2026-108795 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functio... |
| CVE-2026-108985 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z... |
| CVE-2026-108982 | HIGH | 7.2 | 0.1% | Oct 12, 2026 | VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate th... |
| CVE-2026-108981 | LOW | 3.6 | 0.1% | Oct 12, 2026 | ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served... |
| CVE-2026-108794 | MEDIUM | 6.3 | 0.2% | Oct 12, 2026 | A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability i... |
| CVE-2026-108791 | MEDIUM | 4.3 | 0.4% | Oct 12, 2026 | A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the fun... |
| CVE-2026-108790 | MEDIUM | 4.7 | 0.5% | Oct 12, 2026 | A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts t... |