60.383 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.383 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2019-10142 | HIGH 7.1 | linux linux_kernel A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker | 0.4% | — |
| CVE-2018-20509 | MED 5.5 | linux linux_kernel The print_binder_ref_olocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading " ref *desc *node" lines in a debugfs file. | 0.4% | — |
| CVE-2018-1711 | HIGH 8.4 | ibm db2 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 could allow a local user to to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 146369. | 0.4% | — |
| CVE-2017-4912 | HIGH 7.8 | vmware horizon_view VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Deni | 0.4% | — |
| CVE-2017-4911 | HIGH 7.8 | vmware horizon_view VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Serv | 0.4% | — |
| CVE-2017-4910 | HIGH 7.8 | vmware horizon_view VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Servi | 0.4% | — |
| CVE-2017-4909 | HIGH 7.8 | vmware horizon_view VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font (TTF) parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of S | 0.4% | — |
| CVE-2017-4908 | HIGH 7.8 | vmware horizon_view VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Ser | 0.4% | — |
| CVE-2017-0321 | HIGH 8.8 | nvidia gpu_driver All versions of NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges. | 0.4% | — |
| CVE-2016-9215 | HIGH 7.8 | cisco ios_xr A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the root user. More Information: CSCva38434. Known Affected Releases: 6.1.1.BASE. | 0.4% | — |
| CVE-2016-8008 | HIGH 8.8 | mcafee security_scan_plus Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system. | 0.4% | — |
| CVE-2016-6213 | MED 4.7 | linux linux_kernel fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service (memory consumption and deadlock) via MS_BIND mount system calls, as demonstrated by a loop th | 0.4% | — |
| CVE-2007-6063 | MED 6.9 | linux linux_kernel Buffer overflow in the isdn_net_setcfg function in isdn_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a crafted argument to the isdn_ioctl function. | 0.4% | — |
| CVE-2007-5087 | MED 4.9 | linux linux_kernel The ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local users to cause a denial of service (kernel panic) by reading /proc/net/atm/arp before the CLIP module has been loaded. | 0.4% | — |
| CVE-2007-2453 | LOW 1.2 | linux linux_kernel The random number feature in Linux kernel 2.6 before 2.6.20.13, and 2.6.21.x before 2.6.21.4, (1) does not properly seed pools when there is no entropy, or (2) uses an incorrect cast when extracting entropy, which might cause the random number generator to pro | 0.4% | — |
| CVE-2006-0561 | HIGH 7.2 | cisco secure_access_control_server Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptogra | 0.4% | — |
| CVE-2006-0037 | MED 4.9 | linux linux_kernel ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be cal | 0.4% | — |
| CVE-2003-0018 | LOW 3.6 | linux linux_kernel Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers with write privileges to read portions of previously deleted files, or cause file system corruption. | 0.4% | — |
| CVE-2000-0368 | LOW 2.1 | cisco ios Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. | 0.4% | — |
| CVE-2026-97798 | HIGH 7.8 | microsoft windows_10_21h2 Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-85939 | MED 5.3 | microsoft windows_10_1607 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2026-82432 | HIGH 8.1 | Description Nimbus validated `topology.blobstore.map` against the calling subject at submission time only. The rebalance operation accepts configuration overrides and stripped a small set of keys from them, but never re-ran that validation, so a caller author | 0.4% | — |
| CVE-2026-78384 | HIGH 7.5 | apache cxf CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to gigabytes on the heap. Reachable via JWE decryption when zip=DEF (e.g. JoseSessionTokenProvider with RSA-OAEP key wr | 0.4% | — |
| CVE-2026-69612 | HIGH 7.8 | microsoft windows_10_1607 Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69445 | HIGH 7.8 | microsoft windows_10_1607 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally. | 0.4% | — |