CVEs.

Matching CVEs

1. 7.8High

   CVE-2026-20957 ↗ (opens in a new tab)

   Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

2. 7.8High

   CVE-2026-20956 ↗ (opens in a new tab)

   Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

3. 7.8High

   CVE-2026-20955 ↗ (opens in a new tab)

   Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

4. 8.4High

   CVE-2026-20953 ↗ (opens in a new tab)

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

5. 8.4High

   CVE-2026-20952 ↗ (opens in a new tab)

   Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

6. 7.8High

   CVE-2026-20951 ↗ (opens in a new tab)

   Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

7. 7.8High

   CVE-2026-20950 ↗ (opens in a new tab)

   Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

8. 7.8High

   CVE-2026-20949 ↗ (opens in a new tab)

   Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

   M3Microsoft 365· Jan 13, 2026

9. 7.8High

   CVE-2026-20948 ↗ (opens in a new tab)

   Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jan 13, 2026

10. 8.8High

    CVE-2026-20947 ↗ (opens in a new tab)

    Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Jan 13, 2026

11. 7.8High

    CVE-2026-20946 ↗ (opens in a new tab)

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jan 13, 2026

12. 8.4High

    CVE-2026-20944 ↗ (opens in a new tab)

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jan 13, 2026

13. 7.0High

    CVE-2026-20943 ↗ (opens in a new tab)

    Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jan 13, 2026

14. 8.7High

    CVE-2024-58340 ↗ (opens in a new tab)

    LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_parser.py). The parser applies a backtracking-prone regular expression when extracting tool actions from model output. An attacker who can supply or influence the parsed text (for example via prompt injection in downstream applications that pass LLM output directly into MRKLOutputParser.parse()) can trigger excessive CPU consumption by providing a crafted payload, causing significant parsing delays

    L/LangChain / LangSmith· Jan 12, 2026

15. 7.2High

    CVE-2026-22596 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. This issue has been patched in versions 5.130.6 and 6.11.0.

    GHGhost(Pro)· Jan 10, 2026

16. 8.1High

    CVE-2026-22595 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. In versions 5.121.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's handling of Staff Token authentication allowed certain endpoints to be accessed that were only intended to be accessible via Staff Session authentication. External systems that have been authenticated via Staff Tokens for Admin/Owner-role users would have had access to these endpoints. This issue has been patched in versions 5.130.6 and 6.11.0.

    GHGhost(Pro)· Jan 10, 2026

17. 8.1High

    CVE-2026-22594 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's 2FA mechanism allows staff users to skip email 2FA. This issue has been patched in versions 5.130.6 and 6.11.0.

    GHGhost(Pro)· Jan 10, 2026

18. 8.2High

    CVE-2026-21884 ↗ (opens in a new tab)

    React Router is a router for React. In @remix-run/react version prior to 2.17.3. and react-router 7.0.0 through 7.11.0, a XSS vulnerability exists in in React Router's <ScrollRestoration> API in Framework Mode when using the getKey/storageKey props during Server-Side Rendering which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the keys. There is no impact if server-side rendering in Framework Mode is disabled, or if Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>) is being used. This issue has been patched

    SHShopify· Jan 10, 2026

19. 7.6High

    CVE-2025-59057 ↗ (opens in a new tab)

    React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. There is no impact if the application is being used in Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been patched in @remix-run/react version 2.17.1 and react-router version 7.9

    SHShopify· Jan 10, 2026

20. 8.4High

    CVE-2026-0830 ↗ (opens in a new tab)

    Processing specially crafted workspace folder names could allow for arbitrary command injection in the Kiro GitLab Merge-Request helper in Kiro IDE before version 0.6.18 when opening maliciously crafted workspaces. To mitigate, users should update to the latest version.

    AWAmazon Web Services· Jan 9, 2026

21. 7.5High

    CVE-2025-69260 ↗ (opens in a new tab)

    A message out-of-bounds read vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability.

    TMTrend Micro· Jan 8, 2026

22. 7.5High

    CVE-2025-69259 ↗ (opens in a new tab)

    A message unchecked NULL return value vulnerability in Trend Micro Apex Central could allow a remote attacker to create a denial-of-service condition on affected installations. Please note: authentication is not required in order to exploit this vulnerability..

    TMTrend Micro· Jan 8, 2026

23. 8.4High

    CVE-2025-13744 ↗ (opens in a new tab)

    An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component (search) across GitHub that could be used to exfiltrate sensitive information. An attacker would require permissions to create or modify the names of milestones, issues, pull requests, or similar entities that are rendered in the vulnerable filter/search components. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.20 and was fixed in versions 3.19.1, and 3.18.2, 3.17.8,

    GIGitHub· Jan 6, 2026

24. 8.2High

    CVE-2025-68664 ↗ (opens in a new tab)

    LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.

    L/LangChain / LangSmith· Dec 23, 2025

25. 7.8High

    CVE-2025-14930 ↗ (opens in a new tab)

    Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of weights. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute

    HFHugging Face· Dec 23, 2025

26. 7.8High

    CVE-2025-14929 ↗ (opens in a new tab)

    Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage t

    HFHugging Face· Dec 23, 2025

27. 7.8High

    CVE-2025-14928 ↗ (opens in a new tab)

    Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of th

    HFHugging Face· Dec 23, 2025

28. 7.8High

    CVE-2025-14927 ↗ (opens in a new tab)

    Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the

    HFHugging Face· Dec 23, 2025

29. 7.8High

    CVE-2025-14926 ↗ (opens in a new tab)

    Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the c

    HFHugging Face· Dec 23, 2025

30. 7.8High

    CVE-2025-14924 ↗ (opens in a new tab)

    Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerabili

    HFHugging Face· Dec 23, 2025

31. 7.8High

    CVE-2025-14921 ↗ (opens in a new tab)

    Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vuln

    HFHugging Face· Dec 23, 2025

32. 7.8High

    CVE-2025-14920 ↗ (opens in a new tab)

    Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of model files. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerabi

    HFHugging Face· Dec 23, 2025

33. 8.3High

    CVE-2025-14273 ↗ (opens in a new tab)

    Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0 fail to enforce authentication and issue-key path restrictions in the Jira plugin, which allows an unauthenticated attacker who knows a valid user ID to issue authenticated GET and POST requests to the Jira server via crafted plugin payloads that spoof the user ID and inject arbitrary issue key paths. Mattermost Advisory ID: MMSA-2025-00555

    MCMattermost Cloud· Dec 22, 2025

34. 8.7High

    CVE-2025-14847 ↗ (opens in a new tab)Known exploited

    Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater th

    MAMongoDB Atlas· Dec 19, 2025

35. 8.2High

    CVE-2025-64677 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Dec 18, 2025

36. 8.8High

    CVE-2025-64663 ↗ (opens in a new tab)

    Custom Question Answering Elevation of Privilege Vulnerability

    MAMicrosoft Azure· Dec 18, 2025

37. 7.5High

    CVE-2025-67745 ↗ (opens in a new tab)

    MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the whole backup info, including the encryption key. Version 1.3.0 fixes the issue. As a workaround, direct logs into /dev/null.

    AIAiven· Dec 18, 2025

38. 7.5High

    CVE-2025-68129 ↗ (opens in a new tab)

    Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. Projects are affected if they use Auth0-PHP SDK versions between v8.0.0 and v8.17.0, or applications using the following SDKs that rely on the Auth0-PHP SDK versions between v8.0.0 and v8.17.0: Auth0/symfony versions between 5.0.0 and 5.5.0, Auth0/laravel-auth0 versions between 7.0.0 and 7.19.0, and/or Auth0/wordpress plugin vers

    AUAuth0· Dec 17, 2025

39. 7.0High

    CVE-2025-33235 ↗ (opens in a new tab)

    NVIDIA Resiliency Extension for Linux contains a vulnerability in the checkpointing core, where an attacker may cause a race condition. A successful exploit of this vulnerability might lead to information disclosure, data tampering, denial of service, or escalation of privileges.

    NVNVIDIA· Dec 16, 2025

40. 7.8High

    CVE-2025-33226 ↗ (opens in a new tab)

    NVIDIA NeMo Framework for all platforms contains a vulnerability where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Dec 16, 2025

41. 8.4High

    CVE-2025-33225 ↗ (opens in a new tab)

    NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.

    NVNVIDIA· Dec 16, 2025

42. 7.8High

    CVE-2025-33212 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability in model loading that could allow an attacker to exploit improper control mechanisms if a user loads a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, and data tampering.

    NVNVIDIA· Dec 16, 2025

43. 7.8High

    CVE-2025-9460 ↗ (opens in a new tab)

    A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

44. 7.8High

    CVE-2025-9459 ↗ (opens in a new tab)

    A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

45. 7.8High

    CVE-2025-9457 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

46. 7.8High

    CVE-2025-9456 ↗ (opens in a new tab)

    A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

47. 7.8High

    CVE-2025-9455 ↗ (opens in a new tab)

    A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

48. 7.8High

    CVE-2025-9454 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

49. 7.8High

    CVE-2025-9453 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025

50. 7.8High

    CVE-2025-9452 ↗ (opens in a new tab)

    A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Dec 16, 2025