Search
CVE Explorer
Search the full tracked CVE corpus across every vendor — by keyword, vendor, severity, CVSS band and publication date. Server-rendered; each filtered view has its own URL.
01
Filters
Submit to refine — state is held in the URL.
02
Results
45,850 matching · page 556/917Each CVE id links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-47979(opens NVD record) | Medium | 5.5 | Media Encoder is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Jul 14, 2026 |
| CVE-2026-47976(opens NVD record) | High | 7.8 | Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Jul 14, 2026 |
| CVE-2026-47971(opens NVD record) | High | 7.8 | Media Encoder is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | Jul 14, 2026 |
| CVE-2026-47475(opens NVD record) | Medium | 6.2 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service. | Jul 14, 2026 |
| CVE-2026-47473(opens NVD record) | High | 7.4 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure. | Jul 14, 2026 |
| CVE-2026-47472(opens NVD record) | High | 7.8 | NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service. | Jul 14, 2026 |
| CVE-2026-47471(opens NVD record) | High | 7.5 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service. | Jul 14, 2026 |
| CVE-2026-47470(opens NVD record) | Medium | 6.2 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service. | Jul 14, 2026 |
| CVE-2026-46644(opens NVD record) | Unscored | — | Symfony Polyfill backports PHP features and provides compatibility layers for extensions and functions. From 1.17.1 until 1.38.1, symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload is empty or decodes to ASCII-only code points because Idn::process() does not enforce the UTS #46 revision 33 requirement that decoded ACE labels contain at least one non-ASCII code point. Originally unequal domain names can be regarded as equal, which can lead to blacklist bypassing, inconsistent URL parsing, and server-side request forgery in applications using the polyfill to canonicalise or compare hostnames. This issue is fixed in version 1.38.1. | Jul 14, 2026 |
| CVE-2026-24272(opens NVD record) | High | 7.8 | NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution. | Jul 14, 2026 |
| CVE-2026-24271(opens NVD record) | Medium | 6.2 | NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service. | Jul 14, 2026 |
| CVE-2026-24268(opens NVD record) | High | 7.8 | NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution. | Jul 14, 2026 |
| CVE-2026-24259(opens NVD record) | Medium | 6.4 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. | Jul 14, 2026 |
| CVE-2026-24238(opens NVD record) | High | 7.8 | NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution. | Jul 14, 2026 |
| CVE-2026-24234(opens NVD record) | Medium | 6.8 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure. | Jul 14, 2026 |
| CVE-2026-24233(opens NVD record) | High | 8.4 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure. | Jul 14, 2026 |
| CVE-2026-24229(opens NVD record) | High | 7.3 | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service. | Jul 14, 2026 |
| CVE-2026-24227(opens NVD record) | Medium | 5.3 | NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution. | Jul 14, 2026 |
| CVE-2026-24226(opens NVD record) | Medium | 6.3 | NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure. | Jul 14, 2026 |
| CVE-2026-24220(opens NVD record) | Medium | 6.4 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization by unauthorized zeroMQ deserialization. A successful exploit of this vulnerability might lead to code execution. | Jul 14, 2026 |
| CVE-2026-15778(opens NVD record) | Medium | 6.5 | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) | Jul 14, 2026 |
| CVE-2026-15777(opens NVD record) | High | 7.5 | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15776(opens NVD record) | High | 8.8 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15775(opens NVD record) | Medium | 6.5 | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15774(opens NVD record) | High | 8.3 | Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15773(opens NVD record) | Critical | 9.6 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15772(opens NVD record) | High | 8.3 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15771(opens NVD record) | Medium | 5.3 | Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15770(opens NVD record) | Medium | 6.5 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15769(opens NVD record) | High | 8.3 | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15768(opens NVD record) | Medium | 6.5 | Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15767(opens NVD record) | High | 8.8 | Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted video file. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15766(opens NVD record) | Medium | 6.5 | Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) | Jul 14, 2026 |
| CVE-2026-15765(opens NVD record) | High | 7.5 | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | Jul 14, 2026 |
| CVE-2026-15764(opens NVD record) | High | 7.5 | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) | Jul 14, 2026 |
| CVE-2026-15749(opens NVD record) | Medium | 5.3 | A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcp__C2d. Performing a manipulation of the argument filePath results in path traversal. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. | Jul 14, 2026 |
| CVE-2026-15738(opens NVD record) | High | 8.5 | Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this issue, users should upgrade to version 3.4.2. | Jul 14, 2026 |
| CVE-2026-15643(opens NVD record) | High | 7.3 | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server. Its recommended to upgrade to version 0.0.14 or later. | Jul 14, 2026 |
| CVE-2026-53633(opens NVD record) | Critical | 9.8 | Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp() API that forwarded raw Chrome DevTools Protocol methods without being gated by allowWrite or allowExec, allowing a remote client with exposed browser API metadata to use CDP Page.setDownloadBehavior and Runtime.evaluate to overwrite vite.config.ts and execute attacker-controlled Node.js code. This issue is fixed in versions 3.2.5, 4.1.8, and 5.0.0-beta. | Jul 14, 2026 |
| CVE-2026-50659(opens NVD record) | Medium | 6.5 | Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | Jul 14, 2026 |
| CVE-2026-50651(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50650(opens NVD record) | High | 7.8 | Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | Jul 14, 2026 |
| CVE-2026-50649(opens NVD record) | High | 7.8 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50648(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50646(opens NVD record) | High | 7.8 | Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | Jul 14, 2026 |
| CVE-2026-50528(opens NVD record) | High | 8.2 | Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | Jul 14, 2026 |
| CVE-2026-50527(opens NVD record) | High | 7.5 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50526(opens NVD record) | High | 7.0 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. | Jul 14, 2026 |
| CVE-2026-50525(opens NVD record) | High | 7.5 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |
| CVE-2026-50524(opens NVD record) | High | 7.5 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | Jul 14, 2026 |