Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 16, 2026
- Medium6.1ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- Medium5.5ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- Medium5.5ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure VulnerabilityOpen the advisoryOct 15, 2026
- High7.8ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation VulnerabilityOpen the advisoryOct 15, 2026
- High7.5Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted.Check if you run itEPSS 0.40%Sep 19, 2026
- High7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.Check if you run itEPSS 0.11%Aug 20, 2026
- High8.7Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atCheck if you run itEPSS 0.74%Aug 18, 2026
- Medium4.6NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR re…Check if you run itEPSS 0.28%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.Check if you run itEPSS 0.74%May 20, 2026
- Medium5.7NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.Check if you run itEPSS 0.28%May 20, 2026
- High8.7NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.Check if you run itEPSS 0.74%May 20, 2026
- High8.7NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/o…Check if you run itEPSS 0.78%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance.Check if you run itEPSS 0.74%May 20, 2026
- Medium6.6NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.Check if you run itEPSS 0.86%May 20, 2026
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…Check if you run itEPSS 0.14%May 20, 2026
- Critical9.1NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execut…Check if you run itEPSS 1.13%May 20, 2026
Sort