Search vulnerabilities

Expected end of text, found ',' (at char 44), (line:1, col:45)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,740

CVE-2026-126317

Frappe HRMS 16.0.0 before 16.20.1 Missing Authorization in Company Details Endpoint

Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users to read company details outside their permissions due to a missing permission check. Any logged-in user, including Employee role users, can query the affected endpoint to list every company on the site along with its default currency.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Frappe
Products
Hrms
CVE-2026-121680

Windows NTLM Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Windows 10 1607 Windows 10 1809 and 21 more
CVE-2026-119856

Win32k Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Office 365 Office Macos 2021 and 14 more
CVE-2026-113549

Audition | NULL Pointer Dereference (CWE-476)

Audition is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Audition Macos Windows
CVE-2026-113749

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Windows 10 1607 Windows 10 1809 and 21 more
CVE-2026-95932

Windows Graphics Kernel Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Office 365 Office Macos 2021 and 13 more
CVE-2026-96144

Windows Graphics Kernel Information Disclosure Vulnerability

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Windows 10 1607 Windows 10 1809 and 11 more
CVE-2026-96126

Windows Graphics Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Windows 10 1607 Windows 10 1809 and 11 more
CVE-2026-95942

Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Office 365 Office Macos 2021 and 14 more
CVE-2026-95922

Windows Graphics Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Office Office 365 Office Macos 2021 and 14 more
CVE-2026-126884

chromium-browser: chromium-browser: Out of bounds read in Skia

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2026-126398

vLLM 0.28.0 before 0.30.0 Denial of Service via Prompt Embeds on XD-RoPE Models

vLLM from 0.28.0 before 0.30.0 contains a reachable assertion vulnerability in GPUModelRunner._init_xdrope_positions that allows remote attackers to crash the engine by submitting embeddings-only requests. Attackers can send a /v1/completions request containing only prompt_embeds to XD-RoPE models with --enable-prompt-embeds, terminating the EngineCore and API server for all clients.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Vllm Vllm-project
Products
Vllm Vllm
CVE-2026-126397

vLLM 0.10.1 before 0.31.0 Cohere2 Vision DoS via max_patches

vLLM from 0.10.1 before 0.31.0 forwards a request-controlled mm_processor_kwargs.max_patches value to the Hugging Face processor for Cohere2 Vision models without a server-side upper bound, causing quadratic CPU work during multimodal preprocessing. Remote clients can send small image chat-completion requests with large, varying max_patches values to bypass the LRU cache, exhaust preprocessing workers, and deny service to other clients.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Vllm Vllm-project
Products
Vllm Vllm
CVE-2026-112830

WordPress Brizy plugin <= 2.8.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through 2.8.25.

CVSS 3.1 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Brizy Wordpress-extensions
Products
Brizy Brizy
CVE-2026-127122

Out-of-bounds write with too many MCR blocks in a Connect request

P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast communication relations that an Application Relationship has room for (PNET_MAX_MC_CR, 1 by default). Each further block is written past the end of the array, into the rest of the Application Relationship and, with more blocks, into the following one. The written data comes from the request. No established Application Relationship is needed, and the attacker requires ADJACENT network access. Builds with PNET_OPTION_MC_CR disabled are not affected.

CVSS 4.0 · 7.2 High EPSS n/a KEV · Not listed
Vendors
Rt-labs
Products
P-net