Security Warnings — Source: cve

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

2026-04-08 CVE-2026-1340

highIvanti CVE 2026-W15

arm64: io: Extract user memory type in ioremap_prot()

2026-04-06 CVE-2026-23346

mediumMicrosoft CVE 2026-W15

cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

2026-04-06 CVE-2026-23327

highMicrosoft CVE 2026-W15

drm/amdgpu: Limit BO list entry count to prevent resource exhaustion

2026-04-06 CVE-2026-23468

mediumMicrosoft CVE 2026-W15

Fortinet FortiClient EMS Improper Access Control Vulnerability

2026-04-06 CVE-2026-35616

highFortinet CVE 2026-W15

mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations

2026-04-06 CVE-2026-31394

mediumMicrosoft CVE 2026-W15

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-04-06 CVE-2026-23302

highMicrosoft CVE 2026-W15

nfc: nci: complete pending data exchange on device close

2026-04-06 CVE-2026-23330

highMicrosoft CVE 2026-W15

nfc: nci: free skb on nci_transceive early error paths

2026-04-06 CVE-2026-23339

highMicrosoft CVE 2026-W15

PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

2026-04-06 CVE-2026-23361

highMicrosoft CVE 2026-W15

pinctrl: equilibrium: fix warning trace on load

2026-04-06 CVE-2026-23308

highMicrosoft CVE 2026-W15

RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()

2026-04-06 CVE-2026-23335

highMicrosoft CVE 2026-W15

io_uring/poll: fix multishot recv missing EOF on wakeup race

2026-04-03 CVE-2026-23473

mediumMicrosoft CVE 2026-W14

Mariner

2026-04-03 CVE-2026-35386

lowMicrosoft CVE 2026-W14

netfilter: nft_set_rbtree: validate open interval overlap

2026-04-03 CVE-2026-23333

mediumMicrosoft CVE 2026-W14

OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup

2026-04-03 CVE-2026-27447

mediumMicrosoft CVE 2026-W14

OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)

2026-04-03 CVE-2026-34978

mediumMicrosoft CVE 2026-W14

usb: gadget: f_ncm: align net_device lifecycle with bind/unbind

2026-04-03 CVE-2026-23320

mediumMicrosoft CVE 2026-W14

Mariner

2026-04-02 CVE-2026-35414

mediumMicrosoft CVE 2026-W14

TrueConf Client Download of Code Without Integrity Check Vulnerability

2026-04-02 CVE-2026-3502

highTrueConf CVE 2026-W14

Google Dawn Use-After-Free Vulnerability

2026-04-01 CVE-2026-5281

highGoogle CVE 2026-W14

Citrix NetScaler Out-of-Bounds Read Vulnerability

2026-03-30 CVE-2026-3055

highCitrix CVE 2026-W14

F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

2026-03-27 CVE-2025-53521

highF5 CVE 2026-W13

Aquasecurity Trivy Embedded Malicious Code Vulnerability

2026-03-26 CVE-2026-33634

highAquasecurity CVE 2026-W13

libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service

2026-03-26 CVE-2023-52355

mediumCVE 2026-W13

Langflow Code Injection Vulnerability

2026-03-25 CVE-2026-33017

highLangflow CVE 2026-W13

PostgreSQL JDBC Driver: Schwachstelle ermöglicht SQL-Injection

2026-03-23 CVE-2024-1597

highCVE 2026-W13

Apple Multiple Products Buffer Overflow Vulnerability

2026-03-20 CVE-2025-31277

highApple CVE 2026-W12

Apple Multiple Products Classic Buffer Overflow Vulnerability

2026-03-20 CVE-2025-43520

highApple CVE 2026-W12

Apple Multiple Products Improper Locking Vulnerability

2026-03-20 CVE-2025-43510

highApple CVE 2026-W12

Craft CMS Code Injection Vulnerability

2026-03-20 CVE-2025-32432

highCraft CMS CVE 2026-W12

Laravel Livewire Code Injection Vulnerability

2026-03-20 CVE-2025-54068

highLaravel CVE 2026-W12

Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

2026-03-19 CVE-2026-20131

criticalCisco CVE 2026-W12

Microsoft SharePoint Remote Code Execution Vulnerability

2026-03-19 CVE-2026-20963

criticalMicrosoft CVE 2026-W12

Wireshark: Mehrere Schwachstellen ermöglichen Denial of Service

2026-03-19 CVE-2024-4853

mediumCVE 2026-W12

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

2026-03-18 CVE-2026-20963

highMicrosoft CVE 2026-W12

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

2026-03-18 CVE-2025-66376

highSynacor CVE 2026-W12

Wing FTP Server Information Disclosure Vulnerability

2026-03-16 CVE-2025-47813

highWing FTP Server CVE 2026-W12

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

2026-03-13 CVE-2026-3910

highGoogle CVE 2026-W11

Google Skia Out-of-Bounds Write Vulnerability

2026-03-13 CVE-2026-3909

highGoogle CVE 2026-W11

n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

2026-03-11 CVE-2025-68613

highn8n CVE 2026-W11

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

2026-03-09 CVE-2026-1603

highIvanti CVE 2026-W11

Omnissa Workspace ONE Server-Side Request Forgery

2026-03-09 CVE-2021-22054

highOmnissa CVE 2026-W11

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

2026-03-09 CVE-2025-26399

highSolarWinds CVE 2026-W11

Apple iOS and iPadOS Use-After-Free Vulnerability

2026-03-05 CVE-2023-41974

highApple CVE 2026-W10

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

2026-03-05 CVE-2021-30952

highApple CVE 2026-W10

Apple Multiple products Use-After-Free Vulnerability

2026-03-05 CVE-2023-43000

highApple CVE 2026-W10

Hikvision Multiple Products Improper Authentication Vulnerability

2026-03-05 CVE-2017-7921

highHikvision CVE 2026-W10

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

2026-03-05 CVE-2021-22681

highRockwell CVE 2026-W10

zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

2026-03-05 CVE-2026-22184

criticalMicrosoft CVE 2026-W10

Broadcom VMware Aria Operations Command Injection Vulnerability

2026-03-03 CVE-2026-22719

highBroadcom CVE 2026-W10

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

2026-03-03 CVE-2026-21385

highQualcomm CVE 2026-W10

Azure Bastion Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-49752

criticalMicrosoft CVE 2026-W09

Azure Databricks Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-53763

criticalMicrosoft CVE 2026-W09

Azure DevOps Server Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-47158

criticalMicrosoft CVE 2026-W09

Azure Entra ID Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24305

criticalMicrosoft CVE 2026-W09

Azure Front Door Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24306

criticalMicrosoft CVE 2026-W09

Azure OpenAI Elevation of Privilege Vulnerability

2026-02-26 CVE-2025-53767

criticalMicrosoft CVE 2026-W09

Azure Resource Manager Elevation of Privilege Vulnerability

2026-02-26 CVE-2026-24304

criticalMicrosoft CVE 2026-W09

M365 Copilot Information Disclosure Vulnerability

2026-02-26 CVE-2026-24307

criticalMicrosoft CVE 2026-W09