Export limit exceeded: 110886 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (110886 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-68994 | 1 Samsung Semiconductor | 4 Exynos 1480, Exynos 1580, Exynos 2400 and 1 more | 2026-11-10 | 7.3 High |
| A double free vulnerability in NPU driver due to improper pointer management (941) | ||||
| CVE-2026-68990 | 1 Samsung Semiconductor | 6 Exynos 1480, Exynos 1580, Exynos 1680 and 3 more | 2026-11-10 | 7.8 High |
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. | ||||
| CVE-2026-68985 | 1 Samsung Semiconductor | 3 Exynos 1280, Exynos 1380, Exynos 2200 | 2026-11-10 | 7.5 High |
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. | ||||
| CVE-2026-68984 | 1 Samsung Semiconductor | 10 Exynos 1280, Exynos 1380, Exynos 1480 and 7 more | 2026-11-10 | 8.1 High |
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | ||||
| CVE-2026-48179 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 7.5 High |
| In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | ||||
| CVE-2026-48178 | 1 Samsung Semiconductor | 4 Exynos 2200, Exynos 2400, Exynos 2500 and 1 more | 2026-11-10 | 8.8 High |
| Out of bound access in PPC due to race condition in global variable access | ||||
| CVE-2026-48176 | 1 Samsung Semiconductor | 5 Exynos 1080, Exynos 9110, Exynos Modem 5123 and 2 more | 2026-11-10 | 7.5 High |
| A memory corruption vulnerability caused by improper validation of messages | ||||
| CVE-2026-35494 | 1 Samsung Semiconductor | 9 Exynos 1280, Exynos 1330, Exynos 1380 and 6 more | 2026-11-10 | 7.5 High |
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. | ||||
| CVE-2026-33969 | 1 Samsung Semiconductor | 19 Exynos 1280, Exynos 1330, Exynos 1380 and 16 more | 2026-11-10 | 7.5 High |
| In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | ||||
| CVE-2026-33958 | 1 Samsung Semiconductor | 15 Exynos 1080, Exynos 1280, Exynos 1330 and 12 more | 2026-11-10 | 7.5 High |
| Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | ||||
| CVE-2026-123029 | 1 Wowza | 1 Streaming Engine | 2026-11-10 | 7.5 High |
| Wowza Streaming Engine before 4.12.2 processes XML external entities, which allows remote attackers to read local files with the privileges of the Wowza Streaming Engine process. | ||||
| CVE-2026-120399 | 1 Redhat | 1 Edge Manager | 2026-11-10 | 7.5 High |
| A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections. | ||||
| CVE-2026-119433 | 1 Foxitsoftware | 1 Foxit Workspace | 2026-11-10 | 7.7 High |
| A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external resources, potentially enabling unauthorized access to internal services, network reconnaissance, and sensitive information disclosure. | ||||
| CVE-2026-119432 | 1 Foxitsoftware | 1 Foxit Workspace | 2026-11-10 | 8.7 High |
| A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft. | ||||
| CVE-2026-119431 | 1 Foxitsoftware | 1 Foxit Workspace | 2026-11-10 | 7.7 High |
| A server-side request forgery (SSRF) vulnerability exists in Foxit Workspace's file-upload functionality. Insufficient validation of user-supplied links may allow a remote attacker to induce the server to access internal resources and return their contents, potentially resulting in sensitive information disclosure and unauthorized access to internal services. | ||||
| CVE-2026-106714 | 2026-11-10 | 8.1 High | ||
| Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it in a Hybrid WebView. An attacker-controlled page with a /dp/<number> path can access the injected nma_petmd_bridge JavaScript interface and invoke getPetProfiles, disclosing a signed-in user's pet profile information after the user opens the crafted link. | ||||
| CVE-2026-106713 | 2026-11-10 | 7.5 High | ||
| An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity component | ||||
| CVE-2026-91342 | 1 Oracle | 1 Outside In Technology | 2026-11-10 | 8.2 High |
| Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N). | ||||
| CVE-2026-91343 | 1 Oracle | 1 Outside In Technology | 2026-11-10 | 8.6 High |
| Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. While the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.6 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N). | ||||
| CVE-2026-91346 | 1 Oracle | 1 Outside In Technology | 2026-11-10 | 8.2 High |
| Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Outside In Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Outside In Technology accessible data as well as unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N). | ||||