60.383 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.383 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2011-1044 | LOW 2.1 | linux linux_kernel The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37 does not initialize a certain response buffer, which allows local users to obtain potentially sensitive information from kernel memory via vectors that cau | 0.4% | — |
| CVE-2010-4650 | MED 4.6 | linux linux_kernel Buffer overflow in the fuse_do_ioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server. | 0.4% | — |
| CVE-2026-96921 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96860 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96859 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96851 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96849 | MED 5.5 | microsoft windows_11_26h1 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96848 | MED 5.5 | microsoft windows_10_1809 Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96314 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96247 | MED 5.5 | microsoft windows_10_1607 Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-88140 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85935 | MED 5.5 | microsoft windows_10_1607 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85880 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. | 0.4% | |
| CVE-2026-85852 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-85336 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-84842 | HIGH 8.1 | ibm guardium_data_protection IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact | 0.4% | — |
| CVE-2026-79139 | HIGH 7.5 | google chrome Improper input validation in Media in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security se | 0.4% | — |
| CVE-2026-65680 | MED 6.7 | microsoft onedrive Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-64374 | HIGH 7.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT RT migration is done aggressively. When a CPU schedules out a high priority RT task for a lower priority task, it will look to se | 0.4% | — |
| CVE-2026-63893 | HIGH 8.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() entry->value is u32 and entry->length is u16; the sum is performed in u32 and wraps. A malicious XDomain peer can pick va | 0.4% | — |
| CVE-2026-44613 | MED 6.1 | apache zeppelin Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an attacker who lures an authenticated user to a | 0.4% | — |
| CVE-2026-43296 | HIGH 7.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky NIX SQ manager sticky mode is known to cause stalls when multiple SQs share an SMQ and transmit concurrently. Additionally, PSE ma | 0.4% | — |
| CVE-2026-43232 | HIGH 8.8 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets When the FarSync T-series card is being detached, the fst_card_info is deallocated in fst_remove_one(). However, the | 0.4% | — |
| CVE-2026-41851 | MED 5.3 | vmware spring_framework Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded cache growth. Affected versions: Spring Framework 7.0.0 throu | 0.4% | — |
| CVE-2026-41850 | HIGH 7.5 | vmware spring_framework Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS). By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluati | 0.4% | — |