Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2026-33815 | SUSE CVE CVE-2026-33815 | HIGH | 8.3 | N/A | cvelistv5 | 2026-07-16 |
| cve-2026-33811 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory an... | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-33810 | When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied t... | HIGH | 8.2 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-33551 | openstack-keystone: OpenStack Keystone: Privilege escalation through EC2 credential creation | LOW | 3.5 | N/A | cvelistv5 | 2026-08-14 |
| cve-2026-33186 | gRPC-Go is the Go language implementation of gRPC | CRITICAL | 9.1 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-32647 | nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files | HIGH | 7.8 | N/A | cvelistv5 | 2026-06-30 |
| cve-2026-32283 | If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connectio... | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-32282 | golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root | HIGH | 7.8 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-32281 | crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation | MEDIUM | 5.9 | N/A | cvelistv5 | 2026-09-03 |
| cve-2026-32280 | During chain building, the amount of work that is done is not correctly limited when a large number of intermediate c... | HIGH | 7.5 | N/A | cvelistv5 | 2026-09-18 |
| cve-2026-3203 | wireshark: Buffer Over-read in Wireshark | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-08 |
| cve-2026-3201 | wireshark: Improperly Controlled Sequential Memory Allocation in Wireshark | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-08 |
| cve-2026-31790 | SUSE CVE CVE-2026-31790 | MEDIUM | 6.5 | N/A | cvelistv5 | 2026-09-21 |
| cve-2026-31788 | SUSE CVE CVE-2026-31788 | HIGH | 8.2 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31787 | kernel: xen/privcmd: fix double free via VMA splitting | HIGH | 7.3 | N/A | cvelistv5 | 2026-08-12 |
| cve-2026-31786 | SUSE CVE CVE-2026-31786 | MEDIUM | 6.6 | N/A | cvelistv5 | 2026-08-07 |
| cve-2026-31781 | kernel: drm/ioc32: stop speculation on the drm_compat_ioctl path | MEDIUM | 4.7 | N/A | cvelistv5 | 2026-06-28 |
| cve-2026-31779 | SUSE CVE CVE-2026-31779 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31778 | SUSE CVE CVE-2026-31778 | MEDIUM | 6.1 | N/A | cvelistv5 | 2026-08-31 |
| cve-2026-31776 | SUSE CVE CVE-2026-31776 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31774 | SUSE CVE CVE-2026-31774 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-09-11 |
| cve-2026-31773 | kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |
| cve-2026-31772 | kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync | HIGH | 7.0 | N/A | cvelistv5 | 2026-07-12 |
| cve-2026-31767 | SUSE CVE CVE-2026-31767 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-24 |
| cve-2026-31765 | kernel: drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-01 |
| cve-2026-31763 | SUSE CVE CVE-2026-31763 | MEDIUM | 6.4 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31762 | SUSE CVE CVE-2026-31762 | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31761 | SUSE CVE CVE-2026-31761 | MEDIUM | 6.4 | N/A | cvelistv5 | 2026-08-28 |
| cve-2026-31759 | SUSE CVE CVE-2026-31759 | HIGH | 7.1 | N/A | cvelistv5 | 2026-09-16 |
| cve-2026-31758 | kernel: usb: usbtmc: Flush anchored URBs in usbtmc_release | MEDIUM | 5.5 | N/A | cvelistv5 | 2026-07-02 |