Total CVEs

137,241

Critical Severity

3,307

High Severity

12,254

Last 7 Days

1,443
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 821 - 840 of 33,646 CVEs
CVE-2026-41155 MEDIUM - 5.5

An attacker could cooperatively pass data from one secure GPU process to another secure GPU process through shared secure memory allocations in the kernel module. Additionally, an attacker could disrupt the operation of another secure GPU process leading to image corruption / GPU hardware recovery. ...

Vendor: Imagination Technologies
Product: Graphics DDK
Published: Jun 12, 2026
Source: NVD
CVE-2026-34195 HIGH - 8.8

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping.

Vendor: Imagination Technologies
Product: Graphics DDK
Published: Jun 12, 2026
Source: NVD
CVE-2026-12131 MEDIUM - 6.3

A weakness has been identified in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function Invoice of the file \application\controllers\Payroll.php of the component Payroll Invoice Module. This manipulation of the argument ID causes sql injection. Remote exploitation o...

Vendor: CodeAstro
Product: Human Resource Management System
Published: Jun 12, 2026
Source: NVD
CVE-2025-7019 MEDIUM - 5.5

Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus de...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7018 MEDIUM - 5.5

Null pointer dereference vulnerability in Avira Antivirus engine when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.64.

Published: Jun 12, 2026
Source: NVD
CVE-2025-7017 HIGH - 7.8

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed Windows MSI file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.5...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7011 HIGH - 7.8

Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7010 MEDIUM - 5.5

Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and ...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7009 HIGH - 7.8

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on ...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7008 HIGH - 7.8

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Bus...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7006 MEDIUM - 5.5

Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux f...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7005 MEDIUM - 5.5

Uncontrolled recursion vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7004 HIGH - 7.8

Heap buffer out-of-bounds write vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on...

Published: Jun 12, 2026
Source: NVD
CVE-2025-7003 HIGH - 7.8

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.56.

Published: Jun 12, 2026
Source: NVD
CVE-2025-7002 HIGH - 7.8

Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed PDF file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Windows, macOS, and Linux for engine builds before 8.3.70.68.

Published: Jun 12, 2026
Source: NVD

Rejected reason: This candidate was issued in error.

Published: Jun 12, 2026
Source: NVD
CVE-2026-54091 HIGH - 7.5

File Browser has incorrect access control for public directory shares via rule path rebasing

Vendor: go
Product: github.com/filebrowser/filebrowser/v2
Published: Jun 12, 2026
Source: GitHub

File Browser: FilePath traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames

Vendor: go
Product: github.com/filebrowser/filebrowser/v2
Published: Jun 12, 2026
Source: GitHub
CVE-2026-54094 MEDIUM - 6.8

File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope

Vendor: go
Product: github.com/filebrowser/filebrowser/v2
Published: Jun 12, 2026
Source: GitHub
CVE-2026-54092 HIGH - 6.5

File Browser has a DoS Vulnerability via Public Login API

Vendor: go
Product: github.com/filebrowser/filebrowser/v2
Published: Jun 12, 2026
Source: GitHub