Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
3.5 LOW
CVE-2026-23793 — Samsung Exynos Camera GDC Driver Out-of-Bounds Memory Access Vulnerability

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under…

exynos_1330_firmware exynos_1330_firmware | Remote | Memory Corruption
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.0 MEDIUM
CVE-2026-23792 — Samsung Exynos Modem NR RRC Denial of Service Vulnerability

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect han…

exynos_1080_firmware exynos_1080_firmware | Remote | Denial of Service
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-23791 — Samsung Exynos DPU Driver Out-of-Bounds Write Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missi…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-23790 — Samsung Exynos DPU Driver Double-Free Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improp…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
7.8 HIGH
CVE-2026-23789 — Samsung Exynos MFC Encoder Driver Double-Free Vulnerability

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-f…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-23788 — Samsung Exynos DPU Heap Overflow

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory co…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
3.3 LOW
CVE-2026-90609 — GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manipulation leads to null pointer…

gpac | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
9.9 CRITICAL
CVE-2026-90608 — Totolink A3002MU boa formPortFw buffer overflow

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument ser…

a3002mu | Remote | Memory Corruption
Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
9.9 CRITICAL
CVE-2026-90607 — Totolink A3002MU boa formNewSchedule buffer overflow

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument…

a3002mu | Remote | Memory Corruption
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
4.2 MEDIUM
CVE-2026-23787 — Samsung Exynos DRM HDR Driver Use-After-Free Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver (due to improper cleanup upon…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-23786 — Samsung Exynos DRM HDR Driver Race Condition Heap Overflow

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overfl…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.3 MEDIUM
CVE-2025-68624 — N-able Mail Assure SMTP Tenant Impersonation Vulnerability

N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. Wh…

Remote | Authorization
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.5 LOW
CVE-2025-64031 — Libarchive Gzip Writer Heap-Based Buffer Overflow

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c, aka GHSA-9…

libarchive | Memory Corruption
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
9.9 CRITICAL
CVE-2026-90606 — Totolink A3002MU boa formIpv6Setup buffer overflow

A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the component boa. The manipulatio…

a3002mu | Remote | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
9.9 CRITICAL
CVE-2026-90605 — Totolink A3002MU boa formFilter buffer overflow

A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component boa. Executing a manipulation …

a3002mu | Remote | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
4.0 MEDIUM
CVE-2026-90604 — Totolink A3002MU Anchor Tag cross site scripting

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting.…

a3002mu | Remote | Cross-Site Scripting
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
5.4 MEDIUM
CVE-2025-63842 — Repetico Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context vi…

Remote | Cross-Site Scripting
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
5.7 MEDIUM
CVE-2024-53922 — Samsung Exynos Auto Buffer Queue Driver Denial of Service Vulnerability

An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length check leads to a Denial of Service in the kernel.

| Denial of Service
Sep 14, 2026 Sep 28, 2026
Sep 14, 2026
Sep 28, 2026
6.7 MEDIUM
CVE-2022-42917 — FRRouting Privilege Escalation via TOCTOU Race Condition

In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for…

frrouting | Race Condition
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
Showing 20 of 16399 Results