Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,187 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-109679 | 6.0 Medium | FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response | Oct 13, 2026 |
| CVE-2026-109678 | 7.1 High | FreeRDP 3.0.0-beta1 before 3.32.0 Reachable Assertion via Emulated SCardStatusA | Oct 13, 2026 |
| CVE-2026-109677 | 7.1 High | FreeRDP 2.0.0-beta1 before 3.28.0 Out-of-Bounds Read via LocateCardsByATRA Handler | Oct 13, 2026 |
| CVE-2026-109676 | 8.7 High | FreeRDP 3.0.0-beta1 before 3.32.0 Use-After-Free via Smartcard Connect | Oct 13, 2026 |
| CVE-2026-107832 | 3.7 Low | fastify vulnerable to header validation bypass via case-sensitive propertyNames | Oct 13, 2026 |
| CVE-2026-109409 | 4.8 Medium | HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec command injection | Oct 13, 2026 |
| CVE-2026-65180 | 7.8 High | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation… | Oct 13, 2026 |
| CVE-2026-65104 | 7.1 High | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and… | Oct 13, 2026 |
| CVE-2026-65110 | 7.8 High | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution,… | Oct 13, 2026 |
| CVE-2026-65131 | 6.0 Medium | NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this… | Oct 13, 2026 |
| CVE-2026-65172 | 8.6 High | NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information or control existing ETL jobs by sending crafted GET or… | Oct 13, 2026 |
| CVE-2026-65164 | 8.1 High | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member… | Oct 13, 2026 |
| CVE-2026-65173 | 9.1 Critical | NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering… | Oct 13, 2026 |
| CVE-2026-65101 | 8.6 High | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might… | Oct 13, 2026 |
| CVE-2026-65170 | 8.6 High | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability… | Oct 13, 2026 |
| CVE-2026-65162 | 10.0 Critical | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code… | Oct 13, 2026 |
| CVE-2026-65161 | 7.5 High | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to… | Oct 13, 2026 |
| CVE-2026-65103 | 8.1 High | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a… | Oct 13, 2026 |
| CVE-2026-109407 | 2.3 Low | macrozheng mall Coupon Redemption generateOrder race condition | Oct 13, 2026 |
| CVE-2026-109406 | 5.3 Medium | macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error | Oct 13, 2026 |
| CVE-2026-67456 | 4.4 Medium | NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service. | Oct 13, 2026 |
| CVE-2026-65148 | 7.3 High | NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. | Oct 13, 2026 |
| CVE-2026-65150 | 7.3 High | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service. | Oct 13, 2026 |
| CVE-2026-65149 | 7.3 High | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. | Oct 13, 2026 |
| CVE-2026-65147 | 7.3 High | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service. | Oct 13, 2026 |
| CVE-2026-65141 | 7.8 High | NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. | Oct 13, 2026 |
| CVE-2026-109405 | 6.9 Medium | conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery | Oct 13, 2026 |
| CVE-2026-109783 | 8.3 High | Mitigation bypass in the File Handling component | Oct 13, 2026 |
| CVE-2026-109782 | 8.3 High | Mitigation bypass in the File Handling component | Oct 13, 2026 |
| CVE-2026-109781 | 6.5 Medium | Denial-of-service in the Printing: Output component | Oct 13, 2026 |
| CVE-2026-109780 | 9.8 Critical | Mitigation bypass in the DOM: Core & HTML component | Oct 13, 2026 |
| CVE-2026-109779 | 4.2 Medium | Race condition in the Networking: DNS component | Oct 13, 2026 |
| CVE-2026-109778 | 8.8 High | Privilege escalation in the WebExtensions component | Oct 13, 2026 |
| CVE-2026-109777 | 4.3 Medium | Information disclosure in the Storage: IndexedDB component | Oct 13, 2026 |
| CVE-2026-109776 | 4.2 Medium | Race condition in the XPCOM component | Oct 13, 2026 |
| CVE-2026-109775 | 6.5 Medium | Denial-of-service in the WebRTC component | Oct 13, 2026 |
| CVE-2026-109774 | 9.8 Critical | Invalid pointer, undefined behavior in the DOM: Notifications component | Oct 13, 2026 |
| CVE-2026-109773 | 6.5 Medium | Denial-of-service in the Sync component | Oct 13, 2026 |
| CVE-2026-109772 | 9.1 Critical | Same-origin policy bypass in the DevTools component | Oct 13, 2026 |
| CVE-2026-109771 | 4.3 Medium | Information disclosure in the WebRTC: Networking component | Oct 13, 2026 |
| CVE-2026-109770 | 6.1 Medium | Spoofing issue in the DOM: Web Serial component | Oct 13, 2026 |
| CVE-2026-109769 | 4.3 Medium | Information disclosure in the Networking: Cache component | Oct 13, 2026 |
| CVE-2026-109768 | 6.5 Medium | Denial-of-service in the Site Reports component | Oct 13, 2026 |
| CVE-2026-109767 | 4.3 Medium | Information disclosure in the Networking component | Oct 13, 2026 |
| CVE-2026-109766 | 8.1 High | Mitigation bypass in the Enterprise Policies component | Oct 13, 2026 |
| CVE-2026-109765 | 4.2 Medium | Race condition, use-after-free in the Graphics: Text component | Oct 13, 2026 |
| CVE-2026-109764 | 5.4 Medium | Mitigation bypass in the Enterprise Policies component | Oct 13, 2026 |
| CVE-2026-109763 | 5.4 Medium | Mitigation bypass in the File Handling component | Oct 13, 2026 |
| CVE-2026-109762 | 8.8 High | Incorrect boundary conditions in the SVG component | Oct 13, 2026 |
| CVE-2026-109761 | 5.4 Medium | Use-after-free in the JavaScript: WebAssembly component | Oct 13, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.