Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.1FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider.EPSS 0.1%Oct 13, 2026
- UnknownCVE-2026-109939EPSS 0.3%Oct 13, 2026
- Medium6.5CVE-2026-109938EPSS 0.3%Oct 13, 2026
- UnknownFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped.EPSS 0.3%Oct 13, 2026
- High8.8FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invaliEPSS 0.3%Oct 13, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 13, 2026
- UnknownMitigation bypass in the File Handling component.Oct 13, 2026
- Medium6.5Denial-of-service in the Printing: Output component.Oct 13, 2026
- UnknownRace condition in the XPCOM component.Oct 13, 2026
- Medium6.5Denial-of-service in the WebRTC component.Oct 13, 2026
- Medium4.3Information disclosure in the Networking component.Oct 13, 2026
- Medium5.4Use-after-free in the XML component.Oct 13, 2026
- UnknownIncorrect boundary conditions in the JavaScript Engine component.Oct 13, 2026
- Low2.5A flaw was found in m17n-lib.EPSS 0.1%Oct 13, 2026
- Medium5.9Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memorOct 12, 2026
- High7.8A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path.Oct 12, 2026
- UnknownA vulnerability was determined in Blosc C-Blosc2 up to 3.3.2.Sep 30, 2026
- High7.0util-linux is a random collection of Linux utilities.Jun 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about th…May 15, 2026
- Critical9.1An issue was discovered in GStreamer gst-plugins-good before 1.28.2.May 14, 2026
- Medium6.9Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Mar 12, 2026
- Critical9.8GNU InetUtils Argument Injection VulnerabilityKEVEPSS 99.0%Jan 21, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage adreno_show_object() is a trap! It will re-allocate the pointeDec 30, 2025
- High7.8Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions VulnerabilityKEVEPSS 8.4%Sep 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __m…Sep 19, 2025