2026

Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applic

Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device

Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applicati

Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an esc

Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R

Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Application

Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of s

Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User App

Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow

Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adve

Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escala

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escala

Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System softw

Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an esca

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Appli

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applicatio

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local acce

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mc

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX_CODE_ONLY mode, the engine l

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal

Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrar

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kern

Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disc

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Proce

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resum

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, good_peer_addr() in src/server/ns_

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addr_less_eq() in src/client/ns_tu

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and cr

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnports_allocate_even() in src/a

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in A

Cursor is a code editor built for programming with AI. Prior to 3.0.0, Cursor IDE for macOS allows an agent running in A

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user

CVAT is an open source interactive video and image annotation tool for computer vision. From 2.17.0 until 2.72.0, a user

Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have a

When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to

Ente provides end-to-end encrypted cloud services and security tools. Prior to 2026.07.28, Ente 2of3 card format version

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint t

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreer

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos

calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer