Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2026-120241 | High CVSS 7.7 |
- Hardware & firmware |
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P… | 1 Nov 2026 |
| CVE-2026-117677 | Not yet scored | - Hardware & firmware |
When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for… | 1 Nov 2026 |
| CVE-2026-120251 | Medium CVSS 6.8 |
- Hardware & firmware |
imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() that… | 1 Nov 2026 |
| CVE-2026-102212 | High CVSS 8.4 |
- Hardware & firmware |
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console… | 31 Oct 2026 |
| CVE-2026-62300 | Medium CVSS 6.5 |
- Hardware & firmware |
Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments… | 30 Oct 2026 |
| CVE-2026-62250 | Medium CVSS 5.5 |
- Hardware & firmware |
LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make… | 30 Oct 2026 |
| CVE-2026-53266 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Out-of-Bounds Write Vulnerability | 18 Sep 2026 |
| CVE-2026-21385 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Memory Corruption Vulnerability | 3 Mar 2026 |
| CVE-2025-27038 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 3 Jun 2025 |
| CVE-2025-21479 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 3 Jun 2025 |
| CVE-2025-21480 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability | 3 Jun 2025 |
| CVE-2024-53150 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Out-of-Bounds Read Vulnerability | 9 Apr 2025 |
| CVE-2024-53197 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Out-of-Bounds Access Vulnerability | 9 Apr 2025 |
| CVE-2025-24200 Exploited |
Not yet scored | Apple iOS and iPadOS Hardware & firmware |
Apple iOS and iPadOS Incorrect Authorization Vulnerability | 12 Feb 2025 |
| CVE-2024-53104 Exploited |
Not yet scored | Linux Kernel Hardware & firmware |
Linux Kernel Out-of-Bounds Write Vulnerability | 5 Feb 2025 |
| CVE-2024-43047 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 8 Oct 2024 |
| CVE-2021-33044 Exploited |
Not yet scored | Dahua IP Camera Firmware Hardware & firmware |
Dahua IP Camera Authentication Bypass Vulnerability | 21 Aug 2024 |
| CVE-2021-33045 Exploited |
Not yet scored | Dahua IP Camera Firmware Hardware & firmware |
Dahua IP Camera Authentication Bypass Vulnerability | 21 Aug 2024 |
| CVE-2024-32896 Exploited |
Not yet scored | Android Pixel Hardware & firmware |
Android Pixel Privilege Escalation Vulnerability | 13 Jun 2024 |
| CVE-2024-4610 Exploited |
Not yet scored | Arm Mali GPU Kernel Driver Hardware & firmware |
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 12 Jun 2024 |
| CVE-2024-29745 Exploited |
Not yet scored | Android Pixel Hardware & firmware |
Android Pixel Information Disclosure Vulnerability | 4 Apr 2024 |
| CVE-2023-33106 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 5 Dec 2023 |
| CVE-2022-22071 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2023-33063 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 5 Dec 2023 |
| CVE-2023-33107 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 5 Dec 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.