Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Multiple heap out-of-bounds reads in the Spotlight RPC unmarshalling code in Netatalk 3.1.0 through 4.4.2 allow a remote authenticated attacker to obtain sensitive inf…EPSS 0.5%May 21, 2026
- High7.1An out-of-bounds read in ASP session ID handling in Netatalk 1.3 through 4.4.2 allows an adjacent network attacker to obtain limited information or cause a denial of s…EPSS 0.3%May 21, 2026
- Medium6.5Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentially sensitive information from process memory via…EPSS 0.3%May 20, 2026
- High8.8Out of bounds read in GPU in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.EPSS 0.3%May 20, 2026
- Medium4.3Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.EPSS 0.2%May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…EPSS 1.7%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt').EPSS 0.4%May 20, 2026
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read.EPSS 0.7%May 20, 2026
- Medium6.9Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to cras…EPSS 0.5%May 20, 2026
- Medium6.1Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allo…EPSS 0.8%May 20, 2026
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.EPSS 0.7%May 19, 2026
- Critical9.8Kitty is a cross-platform GPU based terminal.EPSS 0.4%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.EPSS 0.4%May 19, 2026
- Medium6.2OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in…EPSS 0.2%May 18, 2026
- High8.7Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet.EPSS 0.7%May 15, 2026
- Low1.8An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially re…EPSS 0.1%May 15, 2026
- Medium4.6Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV comm…EPSS 0.1%May 15, 2026
- Medium5.8An out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker to trigger a read of an arbitrary memory location potentially resultin…EPSS 0.1%May 15, 2026
- Medium4.8An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of confidentiality and availability.EPSS 0.1%May 15, 2026
- Medium6.9An improper input validation vulnerability within the AMD Platform Management Framework (PMF) driver can allow a local attacker to read Out-of-Bounds potentially resul…EPSS 0.1%May 15, 2026
- Low3.1Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin dat…EPSS 0.2%May 14, 2026
- Medium5.3Out of bounds read in GPU in Google Chrome on Mac and Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain pote…EPSS 0.3%May 14, 2026
- Medium5.3Out of bounds read in FileSystem in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to ob…EPSS 0.3%May 14, 2026
- Medium5.3Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive in…EPSS 0.3%May 14, 2026
- Medium5.3Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain…EPSS 0.2%May 14, 2026