Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.Check if you run itEPSS 4.00%Jun 9, 2026
- Medium4.8Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty c…Check if you run itEPSS 0.44%Jun 9, 2026
- High7.5Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is…Check if you run itEPSS 0.70%Jun 9, 2026
- High7.8CVE-2026-44824 is listed by Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.46%Jun 9, 2026
- Medium5.5CVE-2026-44821 is listed by Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally..Check if you run itEPSS 0.46%Jun 9, 2026
- High7.8CVE-2026-44819 is listed by Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally..Check if you run itEPSS 0.46%Jun 9, 2026
- Medium6.2Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out…Check if you run itEPSS 0.22%Jun 9, 2026
- Low3.7Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership.Check if you run itEPSS 0.50%Jun 9, 2026
- Medium5.3Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered…Check if you run itEPSS 0.54%Jun 9, 2026
- Low3.7Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages…Check if you run itEPSS 0.80%Jun 9, 2026
- Medium5.9Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application.Check if you run itEPSS 0.56%Jun 9, 2026
- Medium5.9Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption.Check if you run itEPSS 1.06%Jun 9, 2026
- High7.5Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the…Check if you run itEPSS 0.51%Jun 9, 2026
- High7.5Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled.Check if you run itEPSS 1.17%Jun 9, 2026
- Medium5.0Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the…Check if you run itEPSS 0.30%Jun 9, 2026
- High7.5Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames.Check if you run itEPSS 1.05%Jun 9, 2026
- Critical9.1ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value VulnerabilityCheck if you run itEPSS 1.06%Jun 9, 2026
- High7.4Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integr…Check if you run itEPSS 0.38%Jun 9, 2026
- High7.5Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on…Check if you run itEPSS 1.03%Jun 9, 2026
- Medium6.1CVE-2026-33113 is listed by inventory_critical.Check if you run itEPSS 0.48%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.Check if you run itEPSS 0.15%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and…Check if you run itEPSS 0.14%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the f…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame s…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than…Check if you run itEPSS 0.25%Jun 9, 2026
Sort