Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.0

HIGH

CVE-2024-36320

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...

Affected Products :
Published: Feb. 11, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2025-59105

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, ...

Affected Products :
Published: Jan. 26, 2026

Modified: Jan. 26, 2026

Vuln Type: Cryptography
7.0

HIGH

CVE-2025-59104

With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-connect cable). Thus, the attacker gains access to the bootloader, where the kernel command line can be changed. An at...

Affected Products :
Published: Jan. 26, 2026

Modified: Jan. 26, 2026

Vuln Type: Authentication
7.0

HIGH

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical acces...

Affected Products : uc-8210-t-lx-s_firmware uc-8220-t-lx_firmware uc-8220-t-lx-ap-s_firmware uc-8220-t-lx-eu-s_firmware uc-8220-t-lx-us-s_firmware uc-8220-t-lx uc-8220-t-lx-us-s uc-8220-t-lx-eu-s uc-8220-t-lx-ap-s uc-8210-t-lx-s +60 more products
Published: Feb. 05, 2026

Modified: Feb. 18, 2026

Vuln Type: Cryptography
7.0

HIGH

CVE-2026-21241

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2026-21508

Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +6 more products
Published: Feb. 10, 2026

Modified: Feb. 12, 2026

Vuln Type: Authentication
7.0

HIGH

CVE-2026-0775

npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged co...

Affected Products : npm
Published: Jan. 23, 2026

Modified: Jan. 26, 2026
7.0

HIGH

CVE-2026-21253

Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 +6 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2026-1498

An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnera...

Affected Products : fireware_os
Published: Jan. 30, 2026

Modified: Feb. 04, 2026

Vuln Type: Injection
7.0

HIGH

CVE-2026-21242

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2026-21234

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally....

Affected Products : windows_server_2019 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 +2 more products
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
7.0

HIGH

CVE-2025-10279

In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race cond...

Affected Products : mlflow
Published: Feb. 02, 2026

Modified: Feb. 03, 2026

Vuln Type: Race Condition
7.0

HIGH

CVE-2026-21237

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally....

Affected Products : windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_23h2 windows_server_2022_23h2 windows_server_23h2 windows_11_24h2 windows_server_2025 windows_11_25h2 windows_11_26h1
Published: Feb. 10, 2026

Modified: Feb. 11, 2026

Vuln Type: Race Condition
7.0

HIGH

CVE-2026-21939

Vulnerability in the SQLcl component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where SQLcl executes to compromis...

Affected Products : database_server database_-_sqlcl
Published: Jan. 20, 2026

Modified: Jan. 29, 2026
7.0

HIGH

CVE-2026-25087

Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) with pre-buffering enabled, if the IPC file contains data with va...

Affected Products : arrow
Published: Feb. 17, 2026

Modified: Feb. 18, 2026

Vuln Type: Memory Corruption
7.0

HIGH

CVE-2026-0715

Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial i...

Affected Products : uc-8210-t-lx-s_firmware uc-8220-t-lx_firmware uc-8220-t-lx-ap-s_firmware uc-8220-t-lx-eu-s_firmware uc-8220-t-lx-us-s_firmware uc-8220-t-lx uc-8220-t-lx-us-s uc-8220-t-lx-eu-s uc-8220-t-lx-ap-s uc-8210-t-lx-s +60 more products
Published: Feb. 05, 2026

Modified: Feb. 18, 2026

Vuln Type: Authentication
6.9

MEDIUM

CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of co...

Affected Products :
Published: Feb. 12, 2026

Modified: Feb. 13, 2026

Vuln Type: Information Disclosure
6.9

MEDIUM

CVE-2025-55704

Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to obtain the logs of the affected product and obtain sensitive information within the logs....

Affected Products :
Published: Jan. 29, 2026

Modified: Jan. 29, 2026

Vuln Type: Information Disclosure
6.9

MEDIUM

CVE-2026-22549

A vulnerability exists in F5 BIG-IP Container Ingress Services that may allow excessive permissions to read cluster secrets. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated....

Affected Products : openshift kubernetes big-ip_container_ingress_services
Published: Feb. 04, 2026

Modified: Feb. 13, 2026

Vuln Type: Authorization
6.9

MEDIUM

CVE-2026-1332

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information....

Affected Products : meetinghub_paperless_meetings
Published: Jan. 22, 2026

Modified: Feb. 17, 2026

Vuln Type: Authentication

Showing 20 of 4926 Results

Browse by Apps

Latest CVE Feed

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

7.0

6.9

6.9

6.9

6.9

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable