Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZECheck if you run itEPSS 0.14%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleCheck if you run itEPSS 0.20%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestCheck if you run itEPSS 0.24%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingCheck if you run itEPSS 0.25%Oct 16, 2026
- Low3.3gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnlCheck if you run itEPSS 0.31%Oct 16, 2026
- Medium4.3gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsingCheck if you run itEPSS 0.15%Oct 16, 2026
- High7.1A flaw was found in WildFly.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium6.5Improper Input ValidationCheck if you run itEPSS 0.30%Oct 15, 2026
- High8.8Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.8Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Check if you run itEPSS 0.18%Oct 15, 2026
- High8.8Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page.Check if you run itEPSS 0.18%Oct 15, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.22%Oct 15, 2026
- High8.8Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Check if you run itEPSS 0.29%Oct 15, 2026
- Medium5.7A flaw was found in evolution-data-server.Check if you run itEPSS 0.39%Oct 14, 2026
- Medium5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.37%Oct 13, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.41%Oct 13, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.42%Sep 29, 2026
- High8.6A flaw was found in libsoup.Check if you run itEPSS 0.40%Sep 29, 2026
- High8.1A flaw was found in FreeIPA.Check if you run itEPSS 0.42%Sep 9, 2026
- High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceCheck if you run itEPSS 0.89%Sep 7, 2026
- Critical9.8A flaw was found in FreeIPA.Check if you run itEPSS 1.21%Sep 7, 2026
- Critical9.6A flaw was found in FreeIPA.Check if you run itEPSS 0.35%Aug 20, 2026