CVE search
363,227 resultsCVE-2026-5138MEDIUMForeman: foreman: information disclosure via improper validation of nested request parametersEPSS 0.2%CVE-2026-5135MEDIUMForeman: foreman: unauthorized modification of host configurations via broken access controlEPSS 0.3%CVE-2026-5142MEDIUMForeman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypassEPSS 0.3%CVE-2026-12374MEDIUMImproper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperToolEPSS 0.1%CVE-2026-6688HIGHFatFs Buffer Overflow via Unbounded LFN Filename CopyEPSS 0.2%CVE-2026-6687HIGHFatFs Stack Buffer Overflow via Uncapped exFAT Label LengthEPSS 0.2%CVE-2026-6686MEDIUMFatFs Use of Uninitialized Clusters After Seek Past EOFEPSS 0.2%CVE-2026-23537CRITICALFeast: unauthenticated arbitrary file writeEPSS 0.6%CVE-2026-6685MEDIUMFatFs Integer Underflow in Dirty-Sector Cache FlushEPSS 0.2%CVE-2026-13602HIGHSession takeover vulnerabilityEPSS 0.2%CVE-2026-6684MEDIUMFatFs Infinite Loop in GPT Partition ScanEPSS 0.2%CVE-2026-6683MEDIUMFatFs Divide-by-Zero in exFAT SyncEPSS 0.2%CVE-2026-6682HIGHFatFs Integer Overflow in FAT32 Volume MountEPSS 0.2%CVE-2026-57692CRITICALWordPress PrivateContent plugin <= 9.9.2 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-53356—drm/i915/gem: Fix phys BO pread/pwrite with offsetEPSS 0.2%CVE-2026-53355—net: rds: clear i_sends on setup unwindEPSS 0.2%CVE-2026-53354—arm64: errata: Mitigate TLBI errata on various Arm CPUsEPSS 0.2%CVE-2026-53353—hsr: Remove WARN_ONCE() in hsr_addr_is_self().EPSS 0.2%CVE-2026-53352—signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()EPSS 0.2%CVE-2026-53351—riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFIEPSS 0.1%