CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 15:37 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2787 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the DOM: Window and Location component |
| CVE-2026-2786 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2785 | FI Firefox Mozilla | 9.8 | Feb 24 | Invalid pointer in the JavaScript Engine component |
| CVE-2026-2784 | FI Firefox Mozilla | 9.8 | Feb 24 | Mitigation bypass in the DOM: Security component |
| CVE-2026-2782 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Netmonitor component |
| CVE-2026-2781 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the Libraries component in NSS |
| CVE-2026-2780 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Netmonitor component |
| CVE-2026-2779 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Networking: JAR component |
| CVE-2026-2778 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component |
| CVE-2026-2777 | FI Firefox Mozilla | 9.8 | Feb 24 | Privilege escalation in the Messaging System component |
| CVE-2026-2776 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software |
| CVE-2026-2775 | FI Firefox Mozilla | 9.8 | Feb 24 | Mitigation bypass in the DOM: HTML Parser component |
| CVE-2026-2774 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the Audio/Video component |
| CVE-2026-2773 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Web Audio component |
| CVE-2026-2772 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the Audio/Video: Playback component |
| CVE-2026-2771 | FI Firefox Mozilla | 9.8 | Feb 24 | Undefined behavior in the DOM: Core & HTML component |
| CVE-2026-2770 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the DOM: Bindings (WebIDL) component |
| CVE-2026-2768 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape in the Storage: IndexedDB component |
| CVE-2026-2767 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: WebAssembly component |
| CVE-2026-2766 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine: JIT component |
| CVE-2026-2765 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2764 | FI Firefox Mozilla | 9.8 | Feb 24 | JIT miscompilation, use-after-free in the JavaScript Engine: JIT component |
| CVE-2026-2763 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript Engine component |
| CVE-2026-2762 | FI Firefox Mozilla | 9.8 | Feb 24 | Integer overflow in the JavaScript: Standard Library component |
| CVE-2026-2761 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape in the Graphics: WebRender component |
| CVE-2026-2760 | FI Firefox Mozilla | 10.0 | Feb 24 | Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component |
| CVE-2026-2759 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the Graphics: ImageLib component |
| CVE-2026-2758 | FI Firefox Mozilla | 9.8 | Feb 24 | Use-after-free in the JavaScript: GC component |
| CVE-2026-2757 | FI Firefox Mozilla | 9.8 | Feb 24 | Incorrect boundary conditions in the WebRTC: Audio/Video component |
| CVE-2025-14577 | IP IPL Slican | 9.8 | Feb 24 | PHP Function Injection in Slican NPC/IPL/IPM/IPU |
| CVE-2025-11165 | DO dotCMS dotCMS | 9.9 | Feb 24 | A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and package… |
| CVE-2026-1229 | CI CIRCL Cloudflare | 9.8 | Feb 24 | Incorrect calculation in CIRCL secp384r1 CombinedMult |
| CVE-2026-3069 | DM Document Management System itsourcecode | 9.8 | Feb 24 | itsourcecode Document Management System edtlbls.php sql injection |
| CVE-2026-3068 | DM Document Management System itsourcecode | 9.8 | Feb 24 | itsourcecode Document Management System deluser.php sql injection |
| CVE-2025-13942 | EF EX3510-B0 firmware Zyxel | 9.8 | Feb 24 | A command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions through 5.17(ABUP.15.1)C0 could allow a remote attacker to execute operating system… |
| CVE-2026-3057 | PE pearProjectApi a54552239 | 9.8 | Feb 24 | a54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection |
| CVE-2026-26284 | IM ImageMagick ImageMagick | 9.1 | Feb 24 | ImageMagick has heap overflow in pcd decoder that leads to out of bounds read. |
| CVE-2026-25987 | IM ImageMagick ImageMagick | 9.1 | Feb 24 | ImageMagick has heap buffer over-read in MAP image decoder |
| CVE-2026-25986 | IM ImageMagick ImageMagick | 9.8 | Feb 24 | ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder |
| CVE-2026-25983 | IM ImageMagick ImageMagick | 9.8 | Feb 24 | ImageMagick has Use After Free in MSLStartElement in "coders/msl.c" |
| CVE-2026-25971 | IM ImageMagick ImageMagick | 9.8 | Feb 24 | ImageMagick's MSL: Stack overflow in ProcessMSLScript |
| CVE-2026-3053 | DI dinky DataLinkDC | 9.8 | Feb 24 | DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication |
| CVE-2026-25968 | IM ImageMagick ImageMagick | 9.8 | Feb 24 | ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write. |
| CVE-2026-25898 | IM ImageMagick ImageMagick | 9.1 | Feb 24 | Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer |
| CVE-2026-25897 | IM ImageMagick ImageMagick | 9.8 | Feb 24 | ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write |
| CVE-2026-3046 | EW E-Logbook with Health Monitoring System for COVID-19 itsourcecode | 9.8 | Feb 24 | itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injection |
| CVE-2025-69985 | FU Fuxa Frangoteam | 9.8 | Feb 24 | FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE) |
| CVE-2024-58041 | SM Smolder WONKO | 9.1 | Feb 23 | Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions |
| CVE-2026-3042 | EM Event Management System itsourcecode | 9.8 | Feb 23 | itsourcecode Event Management System index.php sql injection |
| CVE-2026-3062 | CH Chrome Google | 9.8 | Feb 23 | Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page |