CVE Watch363,458 in full archive

Vulnerabilities exploitable today

363,458in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,671

New KEV · 24H0

Exploit Today ≥ 701,610

Distribution · last window

Critical
2,907
High
12,362
Medium
7,578
Low
709

Filters

Window

Severity

Flags

Vulnerabilities363,041–363,080 · 363,458

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-252607.8 HIG

0.0%

——0Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.29d CVE-2026-28549—

0.0%

——0——CVE-2026-15805—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.14d CVE-2026-70623—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.13d CVE-2026-51231—

—

——0Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.20d CVE-2026-51278—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.19d CVE-2021-47993—

—

——0Rejected reason: This CVE ID has been rejected.9d CVE-2026-51255—

—

——0Rejected reason: Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE.15d CVE-2026-72905—

—

——0Rejected reason: Further research determined the issue is not a vulnerability.10d CVE-2026-6889—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.21d CVE-2026-0158—

0.0%

——0——CVE-2025-30178—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused8d CVE-2026-28184—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.7d CVE-2026-35006—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10d CVE-2025-27570—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused8d CVE-2025-27245—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused8d CVE-2026-285863.3 LOW

0.0%

——0In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.29d CVE-2026-51277—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2d CVE-2026-73111—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2d CVE-2026-149707.5 HIG

—

——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow.6h CVE-2026-73112—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2d CVE-2026-763109.4 CRI

—

——0In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job dispatch archive, recover session material, and use it to access all relevant data available to the report owner and affect system integrity, including by performing administrative actions when the owner holds the "admin" Splunk role. The vulnerability is possible because embedded report access does not block Representational State Transfer (REST) API dispatch archive download requests. For more information see Additional configuration for embedded reports (https://help.splunk.com/en/splunk-enterprise/create-dashboards-and-reports/reporting-manual/9.1/report-management/additional-configuration-for-embedded-reports) and About configuring role-based user access (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/manage-splunk-platform-users-and-roles/about-configuring-role-based-user-access) in the Splunk documentation.8h CVE-2026-73103—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.2d CVE-2026-751468.1 HIG

—

——0FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.7h CVE-2026-68171—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.10d CVE-2026-61606—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61457. Reason: This candidate is a duplicate of CVE-2026-61457. Notes: All CVE users should reference CVE-2026-61457 instead of this candidate.36d CVE-2026-51276—

—

——0Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.9h CVE-2026-19489—

—

——0Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.8h CVE-2026-665967.1 HIG

—

——0Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.9h CVE-2026-761664.3 MED

—

——0A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest() that is not caught by the worker thread's exception handler. This causes the advertise listener thread to terminate permanently. The failure is silent (isListening() continues to return true) and persists until the node is restarted. The crash occurs before the AdvertiseSecurityKey comparison, so deployments with a configured security key are still affected.6h CVE-2026-61692—

—

——0Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61454. Reason: This candidate is a duplicate of CVE-2026-61454. Notes: All CVE users should reference CVE-2026-61454 instead of this candidate.38d CVE-2026-168377.5 HIG

—

——0IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate.6h CVE-2026-74228—

—

——0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.1d CVE-2026-252717.8 HIG

0.0%

——0Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.44d CVE-2026-765909.9 CRI

—

——0A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.9h CVE-2026-54743—

—

——0Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, comment bodies, private messages, and community and site sidebars through mdToHtml, which returns a raw __html object that Inferno injects without a sanitizer pass. setupMarkdown configures html as false but registers markdown-it-html5-embed@1.0.0 with useImageSyntax enabled, so an image targeting video media becomes a video element whose fallback incorporates the image alt text through unescaped string replacement. The html setting does not apply to plugin-generated output, allowing crafted alt text to reach the DOM as live HTML in contexts that do not use mdToHtmlNoImages. An approved member or a remote federated instance can store such content, and a viewer who renders it may execute JavaScript in the lemmy-ui origin, exposing the viewer's session and authenticated actions. The advisory notes that Content Security Policy prevents the described exploit in production, but also states that the tested default self-hosted deployment serves no Content-Security-Policy. This issue is fixed in lemmy-ui version 0.19.19-beta.1.1d