CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- apple swift-nio-ssh, swiftnio ssh +1 moreA single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulne…9.8 Critical
- libvipslibvips: Possible heap-based buffer read overflow when decoding a well-crafted RLE Radiance image4.8 Medium
- libvipslibvips: Possible integer overflow when reading multi-page TIFF images via ImageMagick6.9 Medium
- libvipslibvips: Possible heap-based buffer read overflow when resizing and re-encoding a JPEG with gain map2.0 Low
- libvipslibvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write8.4 High
- torproject tortor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream...3.7 Low
- centrifugal centrifugoCentrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends9.1 Critical
- torproject torTor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate...5.3 Medium
- torproject torTor before 0.4.9.11 is prone to a race condition where in just the right circumstances a...8.9 High
- google chromeImproper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173...8.8 High
- google chromeBuffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...8.8 High
- google chromeUse after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...8.8 High
- google chromeRace condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to...7.5 High
- google chromeIncorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote...8.1 High
- google chromePrivilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...8.8 High
- google chromeUse after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker...8.8 High
- torproject torTor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object...5.9 Medium
- opensearch dashboards, aws amazon opensearch service +1 moreRCE via Prototype Pollution in OpenSearch Dashboards8.7 High
- torproject torTor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already...7.0 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-subscription: multicloud-operators-subscription: cross-namespace secret exfiltration via helmrelease.repo.secretref.namespace7.7 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction9.9 Critical
- louislam dockgeDockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion8.7 High
- nosleepNoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper6.9 Medium
- znunyZnuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.4.8 Medium
- locize gettext-convertergettext-converter: Prototype pollution in js2i18next() via crafted translation keys8.3 High
- aws athena federated query clickhouse connector deployment templateIncorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template7.1 High
wgetUbuntuwget regressionNo score- appwrite templatesAppwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent6.9 Medium
- lin-snow ech0lin-snow Ech0 crypto.go MD5Encrypt risky encryption6.3 Medium
- apple swift-nio, swiftnio +1 moreAn unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active con…5.3 Medium
- freedomofpress securedrop-clientsecuredrop-proxy origin limitation can be bypassed with redirects3.7 Low
- apple containerA malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. Thi…4.3 Medium
- shaarliShaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page8.6 High
- wagtailWagtail: Improper restriction handling on Page translation API endpoint6.5 Medium
- wagtailWagtail: Improper permission handling when copying snippets6.5 Medium
- wagtailWagtail: Improper restriction handling on descendant collections in Documents and Images API5.3 Medium
- wagtailWagtail: Identification of documents by SHA1 hash3.7 Low
- wintercms winterWinter CMS: Reflected XSS through the search query parameter in the backend Table widget4.5 Medium
- wintercms winterWinter CMS: CSRF through AJAX handler names reachable as backend page actions6.1 Medium
- wintercms winterWinter CMS: Stored XSS through cached Brand Settings and Editor Settings custom styles4.5 Medium
- wintercms winterWinter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate8.3 High
- wintercms winterWinter CMS: My Account preview exposes another backend user's profile by record ID4.3 Medium
- wintercms winterWinter CMS: Stored XSS through Backend List widget image columns2.0 Low
- fleetdm fleetFleet before 4.89.0 SQL Injection via ORDER BY Activity Endpoints2.3 Low
- fleetdm fleetFleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs6.9 Medium
- wintercms winterWinter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy9.3 Critical
- wintercms winterWinter CMS before 1.2.13 Local File Inclusion via JavaScript6.9 Medium
io.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding7.5 High- wintercms winterWinter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets4.9 Medium
io.netty.incubator:netty-incubator-codec-bhttpMavennetty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields8.7 High- Show moreLoading…