CVE Vulnerability Database
Search and browse 425,062 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-55270 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead t... |
| CVE-2026-55269 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. Th... |
| CVE-2026-55266 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lea... |
| CVE-2026-55265 | MEDIUM | 6.5 | 0.2% | Oct 5, 2026 | In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This coul... |
| CVE-2026-49937 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. Th... |
| CVE-2026-49933 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth proces... |
| CVE-2026-49885 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead ... |
| CVE-2026-49880 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This c... |
| CVE-2026-49878 | HIGH | 7.2 | 0.3% | Oct 5, 2026 | In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in... |
| CVE-2026-45524 | HIGH | 8.8 | 0.1% | Oct 5, 2026 | In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This coul... |
| CVE-2026-28667 | MEDIUM | 5.5 | 0.1% | Oct 5, 2026 | In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lea... |
| CVE-2026-28648 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of priv... |
| CVE-2026-28647 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error i... |
| CVE-2026-28641 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission byp... |
| CVE-2026-28640 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass du... |
| CVE-2026-28625 | HIGH | 7.8 | 0.1% | Oct 5, 2026 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local ... |
| CVE-2026-105712 | LOW | 3.6 | 0.1% | Oct 5, 2026 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted arch... |
| CVE-2026-105646 | MEDIUM | 4.9 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessi... |
| CVE-2026-105645 | MEDIUM | 4.9 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner ... |
| CVE-2026-105644 | MEDIUM | 6.8 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were store... |
| CVE-2026-105643 | HIGH | 7.3 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could by... |
| CVE-2026-105642 | HIGH | 8.8 | 0.3% | Oct 5, 2026 | Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost c... |
| CVE-2026-105641 | CRITICAL | 9.8 | 0.5% | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/comm... |
| CVE-2026-105640 | CRITICAL | 9.1 | — | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth an... |
| CVE-2026-105639 | CRITICAL | 9.8 | 0.4% | Oct 5, 2026 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for an... |