CVEs published in July 2026
10,022 vulnerabilities, 1,307 critical, 23 exploited.
- yawkat lz4-javayawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)6.5 Medium
- nuxsmin syspasssysPass 3.2.11 Authenticated OS Command Injection via Backup Path8.6 High
- libeventLibevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept8.4 High
- libeventLibevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response7.0 High
- libeventLibevent: HTTP header handling bugs create risk of access control bypass.9.2 Critical
- libeventLibevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.8.7 High
- libeventLibevent: decode_tag_internal() can lead to out-of-bounds read8.7 High
- libeventlibevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling9.2 Critical
- libeventLibevent: Dangling Pointer in `evbuffer_add_buffer_reference`5.8 Medium
- libeventLibevent: HTTP Header smuggling6.3 Medium
- nuxsmin syspasssysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption7.1 High
- nuxsmin syspasssysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API8.7 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.69.1 Prototype Pollution via File Input5.3 Medium
- nuxsmin syspasssysPass 3.2.11 Insecure Direct Object Reference via AccountFileController8.6 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.69.1 Denial of Service via Remote Form6.9 Medium
- onnxONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape3.3 Low
- better-authbetter-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP8.7 High
- likeadmin-likeshop likeshopLikeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint8.5 High
- better-auth stripe@better-auth/stripe before 1.6.21 Authorization Bypass via Organization Subscription7.1 High
- better-auth scimbetter-auth SCIM 1.4.0-beta.27 through 1.6.21 Account Takeover via Provider-ID Collision9.4 Critical
- microweberMicroweber CMS 2.0.20 Server-Side Template Injection via Mail Templates8.6 High
- linux, linux kernel +1 morewifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers8.8 High
- linux, linux kernel +1 moreNTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR5.5 Medium
- linux, linux kernel +1 morekernel/fork: clear PF_BLOCK_TS in copy_process()5.5 Medium
- linux, linux kernel +1 moreMIPS: DEC: Prevent initial console buffer from landing in XKPHYS5.5 Medium
- linux, linux kernel +1 morepwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next()7.8 High
- linux, linux kernel +1 moreLoongArch: Report dying CPU to RCU in stop_this_cpu()5.5 Medium
- linux, linux kernel +1 morefpga: region: fix use-after-free in child_regions_with_firmware()7.8 High
- linux, linux kernel +1 moreMIPS: smp: report dying CPU to RCU in stop_this_cpu()5.5 Medium
- linux, linux kernel +1 moreKVM: x86: hyper-v: Bound the bank index when querying sparse banks8.4 High
- linux, linux kernel +1 morepower: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()7.8 High
- linux, linux kernel +1 morefbdev: modedb: fix a possible UAF in fb_find_mode()7.8 High
- linux, linux kernel +1 moredrivers/base/memory: set mem->altmap after successful device registration5.5 Medium
- linux, linux kernel +1 moreASoC: codecs: simple-mux: Fix enum control bounds check7.1 High
- linux, linux kernel +1 moreusb: gadget: net2280: Fix double free in probe error path7.8 High
- linux, linux kernel +1 moregpio: rockchip: teardown bugs and resource leaks5.5 Medium
- linux, linux kernel +1 moremedia: rc: igorplugusb: fix control request setup packet5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs-schemes: delete tried region in regions_rmdirs()7.8 High
- linux, linux kernel +1 moregpio: shared: fix deadlock on shared proxy's parent removal5.5 Medium
- linux, linux kernel +1 moreInput: elan_i2c - validate firmware size before use7.1 High
- linux, linux kernel +1 morei2c: davinci: fix division by zero on missing clock-frequency5.5 Medium
- linux, linux kernel +1 morex86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines8.1 High
- linux, linux kernel +1 moretty: serial: pch_uart: add check for dma_alloc_coherent()5.5 Medium
- linux, linux kernel +1 moreusb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind5.5 Medium
- kortix-ai sunaSuna < 0.9.102 Broken Access Control via Message Queue API8.7 High
- linux, linux kernel +1 moreblock: recompute nr_integrity_segments in blk_insert_cloned_request9.8 Critical
- linux, linux kernel +1 moredrm/msm/dsi: don't dump registers past the mapped region5.5 Medium
- linux, linux kernel +1 moreregulator: tps65219: fix irq_data.rdev not being assigned5.5 Medium
- linux, linux kernel +1 morex86/mm: Disable broadcast TLB flush when PCID is disabled5.5 Medium
- linux, linux kernel +1 morenet: ethtool: phy: avoid NULL deref when PHY driver is unbound5.5 Medium
- Show moreLoading…