Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

34,765 of 90,429· Page 252/696
7.8
CVE-2026-75767

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-75766

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-75750

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-75749

Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-71564

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.5
CVE-2026-71443

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application de

7.5
CVE-2026-71442

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

7.8
CVE-2026-71399

Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of

7.8
CVE-2026-71382

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.5
CVE-2026-71360

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

7.1
CVE-2026-59982

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

7.8
CVE-2026-48433

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.8
CVE-2026-48432

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.8
CVE-2026-48431

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.8
CVE-2026-48430

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.8
CVE-2026-48428

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.8
CVE-2026-48427

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48426

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48425

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-48424

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-48423

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-48422

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec

7.8
CVE-2026-48421

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48420

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48419

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48418

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-48417

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

7.2
CVE-2026-75498

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin

7.2
CVE-2026-75497

Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with admin

7.2
CVE-2026-75496

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a

7.8
CVE-2026-64204

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

7.8
CVE-2026-64203

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

7.8
CVE-2026-64202

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

7.8
CVE-2026-64201

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

7.1
CVE-2026-59189

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

7.1
CVE-2026-59187

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

7.1
CVE-2026-59186

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

7.1
CVE-2026-59184

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture in

8.8
CVE-2026-55585

QWED is open-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, sche

8.2
CVE-2026-55571

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to

7.5
CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prio

8.2
CVE-2026-47626

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

8.2
CVE-2026-24263

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a N

8.2
CVE-2026-24262

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an

8.8
CVE-2026-24170

NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user

8.0
CVE-2026-24169

NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privil

7.5
CVE-2026-19913

The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation

7.8
CVE-2026-16234

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

7.8
CVE-2026-16233

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure o

8.8
CVE-2026-79784

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →