2026

Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ri

Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1

Unchecked return value for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applic

Buffer overflow for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications

Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.

Null pointer dereference for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Appl

Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denia

Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adve

Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Rin

Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: Use

Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring

Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User App

An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may

Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Driver

Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an informat

Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio

Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3

Use after free for some Linux kernel driver for the Intel(R) Ethernet 800 series before version 2.3.14 within Ring 0: Ke

Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Ap

Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomca

Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat:

DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Ap

Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomca

Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat:

Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph containe

The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow comp

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injec

The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing compone

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier

The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the Trainer.load() meth

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoi

PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient val

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370

The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file m

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch

The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (

Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension. This issue affects Pand

Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777

Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page. This i

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affect

An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other use

An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a c

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Fir

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirect