Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
3.5 LOW
CVE-2026-33970 — Samsung Exynos Baseband NULL Pointer Dereference

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, an…

exynos_850_firmware exynos_850_firmware | Remote | Denial of Service
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33968 — Samsung Exynos Camera Driver Time-of-Check Time-of-Use Out-of-Bounds Access Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition lead…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33967 — Samsung Exynos Camera Driver Out-of-Bounds Memory Corruption

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33966 — Samsung Exynos Camera Driver Information Disclosure

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive …

exynos_1330_firmware exynos_1330_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
5.0 MEDIUM
CVE-2026-90615 — SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject l…

class_and_exam_timetabling_system | Remote | Cross-Site Scripting
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.5 MEDIUM
CVE-2026-90614 — FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deser…

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the …

fedml | Remote | Injection
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90613 — GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4Box. The manipulati…

Sep 14, 2026 Sep 16, 2026
Sep 14, 2026
Sep 16, 2026
3.3 LOW
CVE-2026-90612 — GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component MP4Box. The manipulation leads to reach…

gpac | Denial of Service
Sep 14, 2026 Sep 14, 2026
Sep 14, 2026
Sep 14, 2026
3.3 LOW
CVE-2026-90611 — GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executing a manipulation can lead to…

gpac | Denial of Service
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
3.3 LOW
CVE-2026-90610 — GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read

A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results i…

gpac | Memory Corruption
Sep 14, 2026 Sep 15, 2026
Sep 14, 2026
Sep 15, 2026
6.4 MEDIUM
CVE-2026-33964 — Samsung Exynos Camera Driver Untrusted Pointer Dereference Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited info…

exynos_1580_firmware exynos_1580_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
7.5 HIGH
CVE-2026-33963 — Samsung Exynos Mobile Processor Camera Stack-Based Buffer Overflow

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the c…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33962 — Samsung Exynos Wi-Fi Out-of-Bounds Read Vulnerability

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leadi…

exynos_850_firmware exynos_850_firmware | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33960 — Samsung Exynos Processor Wi-Fi Interface Out-of-Bounds Write Vulnerability

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can le…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-33957 — Samsung Exynos CustOS Driver Out-of-Bounds Memory Access

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leadi…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
2.8 LOW
CVE-2026-33956 — Samsung Exynos Camera Out-of-Bounds Write Vulnerability

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, lea…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
7.7 HIGH
CVE-2026-31278 — Suprema BioStar Active Directory Credential Disclosure Vulnerability

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in c…

biostar_2 | Remote | Information Disclosure
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
3.5 LOW
CVE-2026-23793 — Samsung Exynos Camera GDC Driver Out-of-Bounds Memory Access Vulnerability

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under…

exynos_1330_firmware exynos_1330_firmware | Remote | Memory Corruption
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.0 MEDIUM
CVE-2026-23792 — Samsung Exynos Modem NR RRC Denial of Service Vulnerability

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect han…

exynos_1080_firmware exynos_1080_firmware | Remote | Denial of Service
Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
4.2 MEDIUM
CVE-2026-23791 — Samsung Exynos DPU Driver Out-of-Bounds Write Vulnerability

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missi…

Sep 14, 2026 Sep 22, 2026
Sep 14, 2026
Sep 22, 2026
Showing 20 of 16402 Results