Tagged “cve.org”
CVEs tagged cve.org, newest first.
46493 CVEsRSS
CVE-2026-20581Medium· 6.7In usb, there is a possible memory corruption due to use after free
In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch …
CVE-2026-20575Medium· 6.7In afe, there is a possible memory corruption due to use after free
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch …
CVE-2026-20574Medium· 6.7In afe, there is a possible memory corruption due to use after free
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch …
CVE-2026-20576Medium· 6.7In afe, there is a possible out of bounds write due to a missing bounds check
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitati…
CVE-2026-20573Medium· 6.7In afe, there is a possible memory corruption due to double free
In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID:…
CVE-2026-20572Medium· 6.7In adsp, there is a possible out of bounds write due to an integer overflow
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation…
CVE-2026-20571Medium· 6.7In afe, there is a possible memory corruption due to use after free
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch …
CVE-2026-20568Medium· 6.7In afe, there is a possible system crash due to use after free
In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: A…
CVE-2026-20570Medium· 6.7In adsp, there is a possible escalation of privilege due to use after free
In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.…
CVE-2026-20569Medium· 6.7In adsp, there is a possible memory corruption due to use after free
In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch…
CVE-2026-20599Medium· 6.7In Modem, there is a possible escalation of privilege due to a missing permission check
In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for …
CVE-2026-20595Medium· 6.7In neuropilot, there is a possible out of bounds write due to a missing bounds check
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exp…
CVE-2026-20591High· 8.4In GPU pdma, there is a possible escalation of privilege due to a missing permission check
In GPU pdma, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.…
CVE-2026-68591Medium· 6.7In Modem, there is a possible escalation of privilege due to a permissions bypass
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for …
CVE-2026-20567Medium· 6.7In afe, there is a possible out of bounds write due to a missing bounds check
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitati…
CVE-2026-68589Medium· 6.7In Modem, there is a possible out of bounds write due to a missing bounds check
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploita…
CVE-2026-20565High· 8.4In Modem, there is a possible out of bounds write due to an incorrect bounds check
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I…
CVE-2026-20559High· 7.8In GPU pdma, there is a possible memory corruption due to use after free
In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365081; Is…
CVE-2026-20558High· 8.4In GPU pdma, there is a possible escalation of privilege due to use after free
In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…
CVE-2026-20554High· 7.1In Modem, there is a possible system crash due to a missing bounds check
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privilege…
CVE-2026-94349High· 8.0Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with adjacent network access could poten…
CVE-2026-20546High· 7.5In Modem, there is a possible out of bounds write due to an incorrect bounds check
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution…
CVE-2026-18199High· 8.8Remote Code Execution Vulnerability
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
CVE-2026-8923High· 8.7Remote Code Execution
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versions before 13062 are vulnerable to Authenticated Remote Code Execution in Log Forward option.
CVE-2026-111560High· 8.6OS Command Injection in Barracuda Appliances
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root pr…
CVE-2026-116606Critical· 9.3PoCAuthentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting …
CVE-2026-120447High· 8.1PoCHotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code
HotGo 2.8.4 through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile…
CVE-2026-71450High· 8.7Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 throug…
Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 throug…
CVE-2026-120752High· 7.5PoCPyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout
PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callou…
CVE-2026-120740Low· 2.0Hivex: hivex: denial of service via out-of-bounds read in big-data block processing
A flaw was found in hivex. By supplying a specially crafted Windows registry hive file, an attacker can trigger an out-of-bounds memory read when hivex parses registry values containing malformed large data block lists. This issue can ca…