CVE Watch408.702 no arquivo completo

Vulnerabilidades exploráveis hoje

17,439na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,768

Novos KEV · 24H0

Exploit Today ≥ 701,700

Distribuição · última janela

Crítica
5,723
Alta
22,286
Média
21,697
Baixa
2,147

Filtros

Janela

Severidade

Filtros

Vulnerabilidades681–720 · 17,439

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-69066—

3.4%

——1Memory corruption in GPU driver due to improper validation of VMID reservation.1d CVE-2026-69050—

3.4%

——1Out-of-bounds memory access in a device driver due to improper resource state tracking.1d CVE-2026-69044—

3.4%

——1In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.1d CVE-2026-69043—

3.4%

——1In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption1d CVE-2026-69025—

3.4%

——1In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service1d CVE-2026-69006—

3.4%

——1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.1d CVE-2026-69005—

3.4%

——1Integer overflow in NPU driver parameter processing due to insufficient bounds checking.1d CVE-2026-69002—

2.8%

——1Incorrect authorization in Samsung framework services due to missing permission checks1d CVE-2026-68994—

3.4%

——1A double free vulnerability in NPU driver due to improper pointer management (941)1d CVE-2026-68993—

3.4%

——1A double free vulnerability in NPU driver due to improper pointer management (940)1d CVE-2026-68991—

3.4%

——1In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.1d CVE-2026-68990—

3.4%

——1In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.1d CVE-2026-68985—

3.4%

——1In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.1d CVE-2026-68984—

3.4%

——1In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.1d CVE-2026-48186—

3.4%

——1Improper handling of messages before AS security activation can cause unexpected behavior1d CVE-2026-48183—

2.8%

——1Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions1d CVE-2026-48179—

3.4%

——1In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service1d CVE-2026-48178—

1.4%

——0Out of bound access in PPC due to race condition in global variable access1d CVE-2026-48176—

3.4%

——1A memory corruption vulnerability caused by improper validation of messages1d CVE-2026-481755.5 MÉD

3.4%

——1Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.22h CVE-2026-48174—

6.4%

——2In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.1d CVE-2026-48173—

3.4%

——1In the NAS message handler, improper validation of the length field in NAS message causes memory corruption1d CVE-2026-35495—

4.2%

——1In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability1d CVE-2026-35494—

3.4%

——1In the baseband, memory corruption during NAS packet processing can cause a denial of service.1d CVE-2026-33972—

4.2%

——1In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.1d CVE-2026-33971—

7.6%

——2In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.1d CVE-2026-33969—

7.0%

——2In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.1d CVE-2026-33965—

3.6%

——1An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.1d CVE-2026-33958—

4.2%

——1Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.1d CVE-2026-122992—

24.9%

——7In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field.1d CVE-2026-1223237.5 ALT

27.2%

——8Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that decompress beyond maxPayloadSize, causing admission controller OOM kills and denial of service.22h CVE-2026-1223227.5 ALT

33.9%

——10Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.22h CVE-2026-1223219.1 CRÍ

13.6%

——4Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip signature and attestation checks. An attacker who can submit workloads and move a registry tag can warm the cache with a signed image, repoint the tag, and have Kyverno admit the workload and use mutateDigest to pin the unverified digest.22h CVE-2026-1223207.7 ALT

11.6%

——3Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim namespace's sensitive ConfigMap into the attacker's namespace, enabling cross-tenant data disclosure.22h CVE-2026-1223197.5 ALT

20.4%

——6Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of integers, booleans, or mixed types, triggering a panic that disrupts admission control and policy enforcement.22h CVE-2026-1223187.7 ALT

7.2%

——2Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set the expected Fulcio issuer OID, and sign malicious images that are admitted despite signer pinning.22h CVE-2026-1223168.5 ALT

6.2%

——2Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting Namespace objects or victim-namespace resources via CEL expressions, making the background-controller ServiceAccount strip Pod Security labels cluster-wide.22h CVE-2026-1223157.5 ALT

34.6%

——10Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under failurePolicy Ignore or crash-loop the reports-controller.22h CVE-2026-1223147.5 ALT

23.4%

——7Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by {{- variable }} shallow substitution in policies, causing a panic that yields webhook denial of service and policy bypass under failurePolicy Ignore.22h CVE-2026-1223139.9 CRÍ

24.1%

——7Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lacking namespace checks. Attackers can emit a literal target such as another tenant's RoleBinding, which the cluster-wide background controller then mutates to add attacker subjects or alter Roles, NetworkPolicies, and ConfigMaps.22h