Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison length | MEDIUM | 6.0 | 0.21% | cvelistv5 | 2026-06-26 |
| cve-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list | LOW | 2.0 | 0.29% | cvelistv5 | 2026-06-26 |
| cve-2026-62644 | SUSE CVE CVE-2026-62644 | UNKNOWN | N/A | 0.50% | cvelistv5 | 2026-07-21 |
| cve-2026-62643 | roundcubemail: Roundcube Webmail: Server-Side Request Forgery via insufficient CSS sanitization | HIGH | 7.2 | 0.44% | cvelistv5 | 2026-07-14 |
| cve-2026-62642 | roundcubemail: Roundcube Webmail: Denial of Service via infinite loop in TNEF decoder | MEDIUM | 4.3 | 0.52% | cvelistv5 | 2026-07-14 |
| cve-2026-62641 | roundcubemail: Roundcube Webmail: Denial of Service via crafted TNEF compressed-RTF size | MEDIUM | 4.3 | 0.47% | cvelistv5 | 2026-07-14 |
| cve-2026-6104 | php: global buffer over-read in mb_convert_encoding() with attacker-supplied encoding | HIGH | 8.2 | 0.60% | cvelistv5 | 2026-06-30 |
| cve-2026-6094 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData | MEDIUM | 6.3 | 0.52% | cvelistv5 | 2026-06-25 |
| cve-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured | LOW | 2.1 | 0.38% | cvelistv5 | 2026-06-26 |
| cve-2026-58384 | SUSE CVE CVE-2026-58384 | UNKNOWN | N/A | 0.32% | cvelistv5 | 2026-07-07 |
| cve-2026-58380 | gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() | HIGH | 7.3 | 0.32% | cvelistv5 | 2026-09-02 |
| cve-2026-58379 | SUSE CVE CVE-2026-58379 | HIGH | 7.8 | 0.33% | cvelistv5 | 2026-07-30 |
| cve-2026-58016 | SUSE CVE CVE-2026-58016 | HIGH | 7.5 | 0.99% | cvelistv5 | 2026-09-10 |
| cve-2026-58015 | A flaw was found in GLib | MEDIUM | 5.9 | 0.91% | cvelistv5 | 2026-09-15 |
| cve-2026-58014 | glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" | HIGH | 7.3 | 0.72% | cvelistv5 | 2026-09-01 |
| cve-2026-58013 | A flaw was found in GLib | MEDIUM | 6.5 | 0.85% | cvelistv5 | 2026-09-10 |
| cve-2026-58012 | A flaw was found in GLib | MEDIUM | 6.5 | 0.85% | cvelistv5 | 2026-09-10 |
| cve-2026-58011 | A flaw was found in GLib | MEDIUM | 6.5 | 0.82% | cvelistv5 | 2026-09-10 |
| cve-2026-58010 | A flaw was found in GLib | MEDIUM | 6.5 | 0.85% | cvelistv5 | 2026-09-10 |
| cve-2026-57825 | In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mis... | MEDIUM | 5.7 | 0.47% | cvelistv5 | 2026-09-14 |
| cve-2026-57231 | SUSE CVE CVE-2026-57231 | HIGH | 7.5 | 0.44% | cvelistv5 | 2026-09-15 |
| cve-2026-57158 | SUSE CVE CVE-2026-57158 | MEDIUM | 5.4 | 0.69% | cvelistv5 | 2026-09-18 |
| cve-2026-57157 | FreeRDP: FreeRDP: Out-of-bounds read leads to information disclosure and denial of service | MEDIUM | 6.5 | 0.54% | cvelistv5 | 2026-07-13 |
| cve-2026-57156 | SUSE CVE CVE-2026-57156 | HIGH | 8.8 | 0.70% | cvelistv5 | 2026-08-12 |
| cve-2026-5656 | wireshark: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark | HIGH | 7.8 | 0.18% | cvelistv5 | 2026-06-30 |
| cve-2026-56378 | Magick.NET: ImageMagick: Denial of Service and Information Disclosure via crafted PCD file | MEDIUM | 4.8 | 0.39% | cvelistv5 | 2026-08-17 |
| cve-2026-56377 | SUSE CVE CVE-2026-56377 | LOW | 3.3 | 0.22% | cvelistv5 | 2026-09-10 |
| cve-2026-56376 | SUSE CVE CVE-2026-56376 | MEDIUM | 6.5 | 0.32% | cvelistv5 | 2026-07-16 |
| cve-2026-56373 | ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption. | MEDIUM | 5.9 | 0.40% | cvelistv5 | 2026-07-13 |
| cve-2026-56371 | SUSE CVE CVE-2026-56371 | MEDIUM | 5.3 | 0.44% | cvelistv5 | 2026-07-16 |