Search vulnerabilities

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,868

CVE-2026-90829

GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-90830

GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
Binutils
CVE-2026-87088

Tanium addressed an unauthorized code execution vulnerability in Enforce.

Tanium addressed an unauthorized code execution vulnerability in Enforce.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Enforce
CVE-2026-87084

Tanium addressed a server-side request forgery vulnerability in Enforce.

Tanium addressed a server-side request forgery vulnerability in Enforce.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Enforce
CVE-2026-87075

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87073

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87072

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87048

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87033

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87030

Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87025

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87817

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks directory that executes when a victim calls index.commit() on a cloned or opened repository.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Gitpython-developers Gitpython Project
Products
Gitpython Gitpython
CVE-2026-87023

Tanium addressed a path traversal vulnerability in Comply.

Tanium addressed a path traversal vulnerability in Comply.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87021

Tanium addressed an unauthorized code execution vulnerability in Comply.

Tanium addressed an unauthorized code execution vulnerability in Comply.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-61908

cyrus-imapd: cyrus-imapd: JMAP email-header blob ID out-of-bounds index

An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H<emailid>-<index>, which could read past the end of the internal blob_headers array during download, exposing adjacent heap memory.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Cyrus Cyrusimap
Products
Imap Cyrus Imap
CVE-2026-87019

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-87047

Tanium addressed an improper access controls vulnerability in Comply.

Tanium addressed an improper access controls vulnerability in Comply.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Tanium
Products
Comply
CVE-2026-61909

cyrus-imapd: cyrus-imapd: CalDAV/CardDAV multiget bypasses per-href ACL

An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the target hrefs in a calendar-multiget or addressbook-multiget REPORT.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Cyrus Cyrusimap
Products
Imap Cyrus Imap