Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-55379 | python-pillow: Pillow: Denial of Service via crafted BDF font file | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-55238 | SUSE CVE CVE-2026-55238 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-08-21 |
| cve-2026-54891 | SUSE CVE CVE-2026-54891 | LOW | 3.7 | N/A | cvelistv5 | 2026-09-09 |
| cve-2026-54886 | SUSE CVE CVE-2026-54886 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-10 |
| cve-2026-54538 | xrdp: infinite loop denial-of-service vulnerability during RDP packet processing | HIGH | 7.5 | N/A | cvelistv5 | 2026-07-21 |
| cve-2026-54513 | jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution | HIGH | 8.1 | N/A | cvelistv5 | 2026-09-01 |
| cve-2026-54512 | SUSE CVE CVE-2026-54512 | HIGH | 8.1 | N/A | cvelistv5 | 2026-07-11 |
| cve-2026-5450 | SUSE CVE CVE-2026-5450 | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-54433 | SUSE CVE CVE-2026-54433 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-19 |
| cve-2026-54432 | SUSE CVE CVE-2026-54432 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-15 |
| cve-2026-54371 | attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allo... | HIGH | 8.4 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-54370 | SUSE CVE CVE-2026-54370 | HIGH | 7.4 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-54369 | acl: Symlink traversal privilege escalation via libacl functions | HIGH | 7.1 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-54060 | SUSE CVE CVE-2026-54060 | HIGH | 7.5 | N/A | cvelistv5 | 2026-07-15 |
| cve-2026-54059 | SUSE CVE CVE-2026-54059 | HIGH | 7.5 | N/A | cvelistv5 | 2026-07-15 |
| cve-2026-5405 | wireshark: Heap-based Buffer Overflow in Wireshark | HIGH | 7.8 | N/A | cvelistv5 | 2026-06-30 |
| cve-2026-53878 | django: Django: HTTP header injection via DomainNameValidator accepting newlines | LOW | 3.7 | N/A | cvelistv5 | 2026-07-10 |
| cve-2026-53877 | SUSE CVE CVE-2026-53877 | MEDIUM | 4.8 | N/A | cvelistv5 | 2026-08-21 |
| cve-2026-53705 | gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow | HIGH | 7.6 | N/A | cvelistv5 | 2026-08-03 |
| cve-2026-53704 | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer FILEINFO metadata parser | HIGH | 7.1 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-53703 | gstreamer1-plugins-ugly-free: GStreamer: Out-of-bounds read in RealMedia demuxer audio stream header parser | HIGH | 7.1 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-53511 | SUSE CVE CVE-2026-53511 | UNKNOWN | N/A | N/A | cvelistv5 | 2026-07-11 |
| cve-2026-53467 | SUSE CVE CVE-2026-53467 | MEDIUM | 5.3 | N/A | cvelistv5 | 2026-07-27 |
| cve-2026-53466 | SUSE CVE CVE-2026-53466 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-53266 | kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite | HIGH | 7.5 | N/A | cvelistv5 | 2026-08-05 |
| cve-2026-53166 | SUSE CVE CVE-2026-53166 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-13 |
| cve-2026-53016 | SUSE CVE CVE-2026-53016 | HIGH | 7.3 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-52943 | kernel: net: skbuff: fix missing zerocopy reference in pskb_carve helpers | HIGH | 7.8 | N/A | cvelistv5 | 2026-07-06 |
| cve-2026-52909 | kernel: ip6_vti: set netns_immutable on the fallback device | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-04 |
| cve-2026-52858 | vim: Vim: Arbitrary code execution via Python omni-completion | HIGH | 7.3 | N/A | cvelistv5 | 2026-09-03 |