CVEs.

Vulnerabilities published in the last two years in software made by the companies on the wall: clients, SDKs, agents and self-hosted editions. A CVE here does not mean the hosted service was affected or breached.

NVD data refreshed 9 min ago

Severity mix

CVSS base severity, as scored in NVD

Critical
4018%
High
2,47348%
Medium
1,99639%
Low or not scored
2365%
CVEs
5,106
Last two years
Critical
401
CVSS 9.0 and above
High
2,473
CVSS 7.0 to 8.9
Known exploited
55
On CISA's KEV list

CVEs published

By month, last two years

Peak 834 · October 2026

  • Total: 5042
  • December 2024: 87
  • January 2025: 102
  • February 2025: 92
  • March 2025: 81
  • April 2025: 132
  • May 2025: 106
  • June 2025: 119
  • July 2025: 112
  • August 2025: 166
  • September 2025: 133
  • October 2025: 126
  • November 2025: 134
  • December 2025: 159
  • January 2026: 116
  • February 2026: 139
  • March 2026: 204
  • April 2026: 140
  • May 2026: 306
  • June 2026: 221
  • July 2026: 390
  • August 2026: 476
  • September 2026: 578
  • October 2026: 834
  • November 2026: 89

Most CVEs

In each company's software, last two years

  1. Microsoft 365990
  2. NVIDIA590
  3. GitLab436
  4. Apple (iCloud, App Store and services)348
  5. MongoDB Atlas320
  6. Mattermost Cloud310

Latest CVEs

All servicesMicrosoft 365 990NVIDIA 590GitLab 436Apple (iCloud, App Store and services) 348MongoDB Atlas 320Mattermost Cloud 310Elastic Cloud 246Microsoft Azure 186Palo Alto Networks 184Autodesk 136JFrog 99Grafana Cloud 91Zoom 89HashiCorp (HCP / Terraform Cloud) 85Trend Micro 70Docker 65WatchGuard 61Vercel 59GitHub 56TeamViewer 47Amazon Web Services 38Hugging Face 35Anthropic (Claude) 34Salesforce 34Tenable 34Cloudflare 28Adobe 28Snowflake 23Cursor 22Temporal Cloud 21Shopify 19Canva 19LangChain / LangSmith 19Google Cloud 16Jira 14Ping Identity 13WordPress.com (Automattic) 13Webex 11Optimizely 11Metabase Cloud 10
  1. 6.7Med

    CVE-2026-47527 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  2. 4.4Med

    CVE-2026-47526 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful exploit of this vulnerability might lead to denial of service.

    NVIDIA· Sep 30, 2026

  3. 6.7Med

    CVE-2026-47525 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an improper validation of an array index. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  4. 6.7Med

    CVE-2026-47524 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  5. 7.8High

    CVE-2026-47523 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  6. 6.7Med

    CVE-2026-47522 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  7. 7.8High

    CVE-2026-47521 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  8. 7.8High

    CVE-2026-47520 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  9. 7.8High

    CVE-2026-47519 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  10. 6.0Med

    CVE-2026-47518 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a secure microcontroller component, where incorrect permission assignment for a critical resource allows an attacker with privileged local access to modify protected memory that should be restricted. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.

    NVIDIA· Sep 30, 2026

  11. 5.5Med

    CVE-2026-47517 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service.

    NVIDIA· Sep 30, 2026

  12. 7.8High

    CVE-2026-47516 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  13. 6.7Med

    CVE-2026-47515 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read via an unbounded string operation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  14. 7.8High

    CVE-2026-47514 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kernel stack contents including return addresses and pointers. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  15. 7.8High

    CVE-2026-47513 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read from kernel heap memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  16. 7.8High

    CVE-2026-47512 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read leading to kernel information disclosure. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  17. 7.8High

    CVE-2026-47511 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  18. 7.8High

    CVE-2026-47510 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an integer overflow leading to an out-of-bounds write to GPU memory. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  19. 6.7Med

    CVE-2026-47509 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  20. 7.8High

    CVE-2026-47508 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between numeric types. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  21. 7.8High

    CVE-2026-47507 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds array access. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  22. 5.5Med

    CVE-2026-47506 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service.

    NVIDIA· Sep 30, 2026

  23. 7.8High

    CVE-2026-47505 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, denial of service, or escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  24. 7.8High

    CVE-2026-47504 (opens in a new tab)

    NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering.

    NVIDIA· Sep 30, 2026

  25. 7.8High

    CVE-2026-47503 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  26. 7.8High

    CVE-2026-47502 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  27. 7.8High

    CVE-2026-47501 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  28. 7.8High

    CVE-2026-47500 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  29. 7.8High

    CVE-2026-47499 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  30. 7.8High

    CVE-2026-47498 (opens in a new tab)

    NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC message. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  31. 7.8High

    CVE-2026-47497 (opens in a new tab)

    NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  32. 7.3High

    CVE-2026-47496 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a specially crafted RPC call to the host. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and denial of service.

    NVIDIA· Sep 30, 2026

  33. 7.8High

    CVE-2026-47495 (opens in a new tab)

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  34. 7.8High

    CVE-2026-47494 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  35. 7.8High

    CVE-2026-47493 (opens in a new tab)

    NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not authorized. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

    NVIDIA· Sep 30, 2026

  36. 5.5Med

    CVE-2026-47492 (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.

    NVIDIA· Sep 30, 2026

  37. 7.8High

    CVE-2026-47491 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  38. 7.8High

    CVE-2026-47489 (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVIDIA· Sep 30, 2026

  39. 5.4Med

    CVE-2026-13720 (opens in a new tab)

    An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboard through the dashboard API, because these fields were stored without an authorization check. The dashboard then appears file-provisioned, and administrators can no longer update or delete it through Grafana. The impact is limited to the same organization and no data is exposed.

    Grafana Cloud· Sep 30, 2026

  40. 4.3Med

    CVE-2026-13719 (opens in a new tab)

    An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert rule in the organization was returned. From Grafana 13.1.0, any user can trigger this with a folder filter. The exposed data is rule configuration; data source credentials are not exposed.

    Grafana Cloud· Sep 30, 2026

  41. 8.7High

    CVE-2026-86134 (opens in a new tab)

    A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service.

    WatchGuard· Sep 30, 2026

  42. 7.1High

    CVE-2026-90441 (opens in a new tab)

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

    WatchGuard· Sep 30, 2026

  43. 7.1High

    CVE-2026-86136 (opens in a new tab)

    A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (including a read-only or guest administrator account) to crash the wgagent process and read arbitrary files accessible to the daemon by submitting a specially crafted management API request.

    WatchGuard· Sep 30, 2026

  44. 8.2High

    CVE-2026-86133 (opens in a new tab)

    An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has completed the initial IKEv2 handshake to crash the iked process by sending a specially crafted encrypted IKEv2 message, resulting in a denial of service.

    WatchGuard· Sep 30, 2026

  45. 8.2High

    CVE-2026-86132 (opens in a new tab)

    An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated attacker to crash the process by sending a specially crafted encrypted IKEv2 message negotiated with an AES-GCM cipher suite.

    WatchGuard· Sep 30, 2026

  46. 9.2Crit

    CVE-2026-86131 (opens in a new tab)

    A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.

    WatchGuard· Sep 30, 2026

  47. 8.2High

    CVE-2026-86128 (opens in a new tab)

    A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted IPv6 packet.

    WatchGuard· Sep 30, 2026

  48. 6.0Med

    CVE-2026-86105 (opens in a new tab)

    An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to access.

    WatchGuard· Sep 30, 2026

  49. 8.7High

    CVE-2026-86104 (opens in a new tab)

    An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthenticated attacker to cause a denial of service by sending a specially crafted request.

    WatchGuard· Sep 30, 2026

  50. 7.2High

    CVE-2026-86101 (opens in a new tab)

    An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request.

    WatchGuard· Sep 30, 2026

Public information only

Everything on this page was already published by the companies themselves or by public bodies. statuswall gathers it in one place, links every item to its original, and adds nothing from private or leaked sources.

Sources

How fresh it is

  • New and changed CVEs: pulled from NVD every two hours; last run 9 min ago
  • Known-exploited flags: updated from CISA in the same run
  • Window: the last two years; older entries drop off automatically

Source: the U.S. National Vulnerability Database, refreshed daily, with the known-exploited flag from CISA's KEV catalog. Descriptions are NVD's. A CVE is listed under a company when NVD names that company's product as affected, or when the company's own CVE authority assigned it; companies whose names are common words are matched only by explicit rules, so some CVEs will be missing. This product uses NVD data but is not endorsed or certified by the NVD. CVE is a registered trademark of The MITRE Corporation.

statuswall is independent and is not affiliated with, sponsored by or endorsed by any company named here. Company and product names are used only to identify whose public information is being referred to. The information is provided as is, for general reference, with no guarantee that it is complete, current or free of error; it is not security, legal or purchasing advice. Where this page and an official source differ, the official source is right.