Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.2In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice produc…Jun 1, 2026
- Medium5.4Firefox for iOS Reader View did not properly escape HTML tags in JSON-LD metadata.Jun 1, 2026
- Medium5.4Firefox for iOS Reader View replaced page content in its HTML template before replacing other internal placeholders.Jun 1, 2026
- High8.3Home Assistant is open source home automation software that puts local control and privacy first.May 29, 2026
- High8.7An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (…May 29, 2026
- Critical10.0Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the admin…May 29, 2026
- Medium5.4Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to…May 28, 2026
- High7.5Uninitialized Use in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute ar…May 28, 2026
- High7.5Use after free in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbit…May 28, 2026
- Medium4.3Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 28, 2026
- Low3.1Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to…May 28, 2026
- High8.1Billy is an interface filesystem abstraction for Go.EPSS 0.5%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix controller deregistration Make sure to deregister the controller before disabling…EPSS 0.2%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip…EPSS 0.2%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSAN reports an uninitialized value in longest_match_st…EPSS 0.3%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/display/dp_mst: Add protection against 0 vcpi When releasing a timeslot there is a slight chanc…EPSS 0.2%May 27, 2026
- Medium5.5FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp.EPSS 0.2%May 26, 2026
- Medium5.4Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces.May 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked When red qdisc h…EPSS 0.2%May 21, 2026
- Medium6.5In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected.EPSS 0.3%May 21, 2026
- Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…May 19, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.EPSS 0.1%May 18, 2026
- High8.7Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.EPSS 0.3%May 16, 2026
- High7.5Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an…May 14, 2026
- Medium4.2Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI…May 14, 2026