Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (381531 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-21059 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.1 High
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21060 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 4.6 Medium
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21061 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.5 Medium
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21062 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 3.3 Low
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21063 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 6.1 Medium
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21064 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 5.5 Medium
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21065 1 Samsung 2 Android, Mobile Devices 2026-08-19 7.8 High
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-08-19 7.8 High
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-20498 2 Mediatek, Mediatek, Inc. 21 Mt6991, Mt6991 Firmware, Mt8768 and 18 more 2026-08-19 6 Medium
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.
CVE-2026-20473 2 Mediatek, Mediatek, Inc. 35 Mt6991, Mt6991 Firmware, Mt6993 and 32 more 2026-08-19 6 Medium
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.
CVE-2026-74965 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74963 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 5.4 Medium
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVE-2026-74958 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 7.5 High
Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74956 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 9.1 Critical
Same-origin policy bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74955 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Request Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74954 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 7.5 High
Information disclosure due to side-channel in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74950 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation in the Downloads API component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74947 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 8.8 High
Privilege escalation due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
CVE-2026-74938 1 Mozilla 2 Firefox, Thunderbird 2026-08-19 9.1 Critical
Mitigation bypass in the JavaScript: GC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.