Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-57555 — Use After Free in DSP Service

Memory Corruption when executing system service routines due to improper handling of user input buffers.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.8 HIGH
CVE-2026-57554 — Use After Free in DSP Service

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.5 HIGH
CVE-2026-57546 — Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.8 HIGH
CVE-2026-57545 — Untrusted Pointer Dereference in Graphics

Memory corruption when processing draw objects of incorrect type during graphics command list execution.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.8 HIGH
CVE-2026-57537 — Use After Free in DSP Service

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.1 HIGH
CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.8 HIGH
CVE-2026-25291 — Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.7 MEDIUM
CVE-2026-25274 — Use After Free in Windows WLAN Host

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.7 MEDIUM
CVE-2026-25273 — Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.7 MEDIUM
CVE-2026-25272 — Out-of-bounds Write in Camera Driver

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.7 MEDIUM
CVE-2026-25270 — Out-of-bounds Write in Camera Driver

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.7 MEDIUM
CVE-2026-25269 — Out-of-bounds Write in Camera Driver

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.8 HIGH
CVE-2026-25267 — Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
6.6 MEDIUM
CVE-2026-25263 — Out of Bounds write in Linux Camera

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
9.9 CRITICAL
CVE-2026-105778 — Tenda AC5 Wifi setWifi stack-based overflow

A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of th…

ac5_firmware ac5 | Remote | Memory Corruption
Oct 06, 2026 Oct 06, 2026
Oct 06, 2026
Oct 06, 2026
7.5 HIGH
CVE-2026-105776 — bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL admin_transaction.p…

A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionali…

Oct 06, 2026 Oct 06, 2026
Oct 06, 2026
Oct 06, 2026
8.8 HIGH
CVE-2026-105701 — ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API…

The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the RES…

Remote | Authentication
Oct 06, 2026 Oct 06, 2026
Oct 06, 2026
Oct 06, 2026
6.5 MEDIUM
CVE-2026-97300 — WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.

Remote | Authorization
Oct 06, 2026 Oct 06, 2026
Oct 06, 2026
Oct 06, 2026
7.2 HIGH
CVE-2026-75962 — Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_emai…

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email…

Remote | Cross-Site Scripting
Oct 06, 2026 Oct 09, 2026
Oct 06, 2026
Oct 09, 2026
7.5 HIGH
CVE-2026-41563 — WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.

Remote | Information Disclosure
Oct 06, 2026 Oct 06, 2026
Oct 06, 2026
Oct 06, 2026
Showing 20 of 16658 Results