Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.5 HIGH
CVE-2026-25275 — Buffer Over-read in WLAN Firmware

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.8 HIGH
CVE-2026-25261 — Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.4 HIGH
CVE-2026-24081 — Buffer Over-read in BT Controller

Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.8 HIGH
CVE-2026-24075 — Buffer Over-read in Qualcomm IPC

Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.8 HIGH
CVE-2026-24074 — Out-of-bounds Write in Video

Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.8 HIGH
CVE-2026-24073 — Out-of-bounds Write in Video

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

Sep 17, 2026 Sep 22, 2026
Sep 17, 2026
Sep 22, 2026
7.8 HIGH
CVE-2025-59607 — Untrusted Pointer Dereference in Windows Compute

Memory Corruption when copying large input data exceeds normal allocation limits.

Sep 17, 2026 Oct 14, 2026
Sep 17, 2026
Oct 14, 2026
4.3 MEDIUM
CVE-2026-92839 — Canva Desktop Improper Input Validation Vulnerability

Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session.

canva | Remote | Cross-Site Scripting
Sep 17, 2026 Sep 18, 2026
Sep 17, 2026
Sep 18, 2026
6.4 MEDIUM
CVE-2026-86311 — Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.44 - Authenticated (Contrib…

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and including, 1.8.44 …

photo_gallery | Remote | Cross-Site Scripting
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
4.9 MEDIUM
CVE-2026-50603 — Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and Predator…

A vulnerability has been identified in the Acer Agent Service component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within th…

| Cryptography
Sep 17, 2026 Sep 18, 2026
Sep 17, 2026
Sep 18, 2026
5.3 MEDIUM
CVE-2026-89064 — All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Pro…

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the `Ai1wm_Main_Controller::ini…

all-in-one_wp_migration | Remote | Authentication
Sep 17, 2026 Sep 18, 2026
Sep 17, 2026
Sep 18, 2026
7.8 HIGH
CVE-2026-92838 — GeoVision GV-Remote E-Map dll hijacking vulnerability

A DLL hijacking vulnerability exists in the GeoVision GV-Remote E-Map desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local…

| Misconfiguration
Sep 17, 2026 Sep 18, 2026
Sep 17, 2026
Sep 18, 2026
7.7 HIGH
CVE-2026-81546 — Affinity Stack-Based Buffer Overflow

The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threa…

affinity | Memory Corruption
Sep 17, 2026 Sep 18, 2026
Sep 17, 2026
Sep 18, 2026
Showing 20 of 15153 Results