PULSE
ES
FEED
ransomqilin reclama a Aryza · AR · Technologyransomqilin reclama a Aerotop · CL · Transportationransomqilin reclama a CDG Chartered Accounting · AU · Professional Servicesransomqilin reclama a Revi Group · MX · Otherransomakira reclama a Bankruptcy Software Specialists · Professional Servicesransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturingransomqilin reclama a Aryza · AR · Technologyransomqilin reclama a Aerotop · CL · Transportationransomqilin reclama a CDG Chartered Accounting · AU · Professional Servicesransomqilin reclama a Revi Group · MX · Otherransomakira reclama a Bankruptcy Software Specialists · Professional Servicesransomakira reclama a Bravilor Bonamat · NL · Manufacturingransomakira reclama a SCHWAB-SYSTEM · DE · Financial Servicesransomorova reclama a Wah Chan Consolidated Sdn Bhd · MY · Otherransomorova reclama a Trevi Technology · TW · Technologyransomdoommageddon reclama a R*********b R**-L** · Not Foundransomsarcoma reclama a Don Pickett & Associates · Professional Servicesransomscarlettgroup reclama a vinsolutions.com · US · Professional Servicesransomauditteam reclama a Ca***ka · ES · Not Foundransomrhysida reclama a Line2Line Coatings · Manufacturing
CVE Watch402,410 in full archive

Vulnerabilities exploitable today

16,813in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754
New KEV · 24H0
Exploit Today ≥ 701,668

Distribution · last window

  • Critical
    3,555
  • High
    15,932
  • Medium
    14,842
  • Low
    1,456
Filters
Filters

Window

Severity

Flags

Vulnerabilities8,401–8,440 · 16,813
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-651708.6 HIG
33.4%
——10NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.10dCVE-2026-651648.1 HIG
56.5%
——17NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to arbitrary file creation or overwrite, code execution, information disclosure, data tampering, and denial of service.10dCVE-2026-6516210.0 CRI
51.0%
——15NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.10dCVE-2026-651617.5 HIG
51.0%
——15NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted absolute source path. A successful exploit may lead to information disclosure.10dCVE-2026-651507.3 HIG
2.0%
——1NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service.8dCVE-2026-651497.3 HIG
2.0%
——1NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.8dCVE-2026-651487.3 HIG
2.7%
——1NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.10dCVE-2026-651477.3 HIG
1.5%
——0NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service.8dCVE-2026-651417.8 HIG
5.5%
——2NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.10dCVE-2026-651316.0 MED
2.8%
——1NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service.10dCVE-2026-651107.8 HIG
13.1%
——4NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.10dCVE-2026-651047.1 HIG
3.0%
——1NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure.10dCVE-2026-651038.1 HIG
59.3%
——18NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target, resulting in the arbitrary creation or overwrite of a file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, data tampering, and denial of service.10dCVE-2026-651018.6 HIG
22.6%
——7NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.10dCVE-2026-1099764.7 MED
0.8%
——0A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk decryption from completing during boot.8dCVE-2026-1098335.9 MED
29.4%
——9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaining peeked bytes into the caller-supplied buffer instead of compacting the peek buffer. A remote attacker who can reach an enabled VNC TLS listener and trigger a peek/read size mismatch can cause an out-of-bounds write, leading to denial of service.8dCVE-2026-109783—
4.5%
——1Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.10dCVE-2026-109782—
4.5%
——1Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5.10dCVE-2026-1097816.5 MED
14.9%
——4Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-109780—
9.1%
——3Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097794.2 MED
3.1%
——1Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097788.8 HIG
19.4%
——6Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-1097774.3 MED
10.6%
——3Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-1097764.2 MED
3.5%
——1Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.8dCVE-2026-1097756.5 MED
14.9%
——4Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-109774—
7.9%
——2Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097736.5 MED
14.0%
——4Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-109772—
4.5%
——1Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097714.3 MED
9.7%
——3Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097706.1 MED
7.8%
——2Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.4dCVE-2026-1097694.3 MED
9.7%
——3Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097686.5 MED
14.0%
——4Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097674.3 MED
10.6%
——3Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-1097668.1 HIG
26.2%
——8Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.4dCVE-2026-1097654.2 MED
6.6%
——2Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-1097645.4 MED
13.6%
——4Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.4dCVE-2026-109763—
5.6%
——2Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.10dCVE-2026-1097628.8 HIG
27.4%
——8Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.4dCVE-2026-1097615.4 MED
12.3%
——4Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.10dCVE-2026-1097608.1 HIG
26.2%
——8Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.4d