Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-56370 | SUSE CVE CVE-2026-56370 | HIGH | 7.8 | N/A | cvelistv5 | 2026-07-16 |
| cve-2026-56368 | Imagemagick: ImageMagick - Memory Leak in Raw Pixel Data Coders | LOW | 3.7 | N/A | cvelistv5 | 2026-08-19 |
| cve-2026-56367 | SUSE CVE CVE-2026-56367 | MEDIUM | 4.8 | N/A | cvelistv5 | 2026-07-24 |
| cve-2026-56366 | ImageMagick: ImageMagick: Denial of Service via memory leak in APP1JPEG image processing | LOW | 3.3 | N/A | cvelistv5 | 2026-07-13 |
| cve-2026-56365 | SUSE CVE CVE-2026-56365 | LOW | 3.7 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-56363 | Imagemagick: ImageMagick - Division by Zero in Binomial Kernel Processing | LOW | 3.3 | N/A | cvelistv5 | 2026-07-06 |
| cve-2026-56361 | SUSE CVE CVE-2026-56361 | LOW | 3.3 | N/A | cvelistv5 | 2026-07-27 |
| cve-2026-56136 | In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an att... | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-09-09 |
| cve-2026-56135 | ntfs-3g: NTFS-3G: Heap memory corruption via malicious NTFS image | HIGH | 8.8 | N/A | cvelistv5 | 2026-08-24 |
| cve-2026-56114 | dhcpcd: dhcpcd: Denial of Service due to stack out-of-bounds write via crafted DHCPv6 message | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-07-14 |
| cve-2026-56109 | SUSE CVE CVE-2026-56109 | MEDIUM | 6.8 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-56003 | SUSE CVE CVE-2026-56003 | HIGH | 7.3 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-56002 | SUSE CVE CVE-2026-56002 | HIGH | 7.3 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-56001 | libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow | HIGH | 7.3 | N/A | cvelistv5 | 2026-08-06 |
| cve-2026-56000 | X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent() | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-10 |
| cve-2026-55999 | xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-11 |
| cve-2026-55967 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse | LOW | 2.0 | N/A | cvelistv5 | 2026-06-25 |
| cve-2026-55962 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify | MEDIUM | 6.0 | N/A | cvelistv5 | 2026-06-26 |
| cve-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer | HIGH | 8.2 | N/A | cvelistv5 | 2026-06-25 |
| cve-2026-55956 | tomcat: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-07-22 |
| cve-2026-55952 | SUSE CVE CVE-2026-55952 | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-02 |
| cve-2026-55645 | SUSE CVE CVE-2026-55645 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-08-21 |
| cve-2026-55639 | xrdp: improper input validation in MCS data processing leads to potential information leak | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-07-21 |
| cve-2026-55628 | SUSE CVE CVE-2026-55628 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-55626 | SUSE CVE CVE-2026-55626 | HIGH | 8.0 | N/A | cvelistv5 | 2026-08-21 |
| cve-2026-55597 | SUSE CVE CVE-2026-55597 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-27 |
| cve-2026-55595 | SUSE CVE CVE-2026-55595 | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-07-27 |
| cve-2026-55594 | SUSE CVE CVE-2026-55594 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-09-09 |
| cve-2026-55577 | ImageMagick: ImageMagick: Heap buffer overflow in MVG decoder allows out-of-bounds write | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-07-01 |
| cve-2026-55380 | python-pillow: Pillow: Denial of Service via crafted GD 2.x image file | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-03 |