KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.
Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out…
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access.…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access.…
Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (Chromium security…
Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)
Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized…
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access.…
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on…
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit…
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of…
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-105390 Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to… |
Pozostałe |
CVSS 6,9EPSS 0,11 % | ||
| CVE-2026-84419 Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3… |
Pozostałe |
CVSS 6,8EPSS 0,11 % | ||
| CVE-2026-84420 Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507… |
Pozostałe |
CVSS 5,8EPSS 0,09 % | ||
| CVE-2026-77205 Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same… |
Pozostałe |
CVSS 3,7EPSS 0,18 % | ||
| CVE-2026-110170 Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High) |
Pozostałe |
CVSS 4,3EPSS 0,18 % | ||
| CVE-2026-48377 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass… |
Pozostałe |
CVSS 5,3EPSS 0,38 % | ||
| CVE-2026-48378 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass… |
Pozostałe |
CVSS 5,3EPSS 0,38 % | ||
| CVE-2026-110160 Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to… |
Pozostałe |
CVSS 4,2EPSS 0,16 % | ||
| CVE-2026-110143 Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file.… |
Pozostałe |
CVSS 4,3EPSS 0,19 % | ||
| CVE-2026-110146 Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page.… |
Pozostałe |
CVSS 6,5EPSS 0,25 % | ||
| CVE-2026-110150 Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-110141 Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
Pozostałe |
CVSS 3,1EPSS 0,18 % | ||
| CVE-2026-103820 CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write.… |
Pozostałe |
CVSS 5,5EPSS 0,22 % | ||
| CVE-2026-103294 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to… |
Pozostałe |
CVSS 5,9EPSS 0,24 % | ||
| CVE-2026-102501 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass… |
Pozostałe |
CVSS 5,3EPSS 0,38 % | ||
| CVE-2026-102502 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this… |
Pozostałe |
CVSS 5,3EPSS 0,35 % | ||
| CVE-2026-100125 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass… |
Pozostałe |
CVSS 5,9EPSS 0,54 % | ||
| CVE-2026-100116 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to… |
Pozostałe |
CVSS 5,9EPSS 0,24 % | ||
| CVE-2026-95640 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the… |
Pozostałe |
CVSS 5,5EPSS 0,17 % | ||
| CVE-2026-94520 Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. |
Pozostałe |
CVSS 4,9EPSS 0,61 % | ||
| CVE-2026-88085 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
Pozostałe |
CVSS 6,4EPSS 0,25 % | ||
| CVE-2026-88086 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. |
Pozostałe |
CVSS 5,3EPSS 0,36 % | ||
| CVE-2026-88089 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
Pozostałe |
CVSS 6,7EPSS 0,31 % | ||
| CVE-2026-88084 Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. |
Pozostałe |
CVSS 5,3EPSS 0,68 % | ||
| CVE-2026-85473 The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token parsing,… |
Pozostałe |
CVSS 5,3EPSS 0,32 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 7.11.2026, 19:02 UTC – 8.11.2026, 00:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.