Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16231 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20499 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01857954; Issue ID: MSV-8247.
CVE-2026-20545 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879158 / MOLY01774038; Issue ID: MSV-9811.
CVE-2026-20566 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 5.3 Medium
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: MOLY01923663 / ALPS11315955; Issue ID: MSV-10866.
CVE-2026-20565 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 8.4 High
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.
CVE-2026-20564 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.2 Medium
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01780439; Issue ID: MSV-8901.
CVE-2026-20553 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.8 Medium
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11468968; Issue ID: MSV-10166.
CVE-2026-20552 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.5 Medium
In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 (Note: For MT6880, MT6890) / ALPS11297423 (Note: For MT6813, MT6986, MT6982, MT6980D) / AUTO00864897 (Note: For MT2735, MT2737); Issue ID: MSV-10724.
CVE-2026-20551 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 5.5 Medium
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.
CVE-2026-20550 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.2 Medium
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731.
CVE-2026-115653 1 Eclipse 1 Threadx 2026-11-02 N/A
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without checking that pointer against the thread's stack. A user-mode, memory-protected module can thereby write up to nine words, eight of its choosing, or 25 with floating-point state, into memory immediately below any region it may write, and read back what is stored there.
CVE-2026-84604 1 Apple 1 Macos 2026-11-02 7.8 High
A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory.
CVE-2026-84627 1 Apple 5 Ios And Ipados, Ipados, Iphone Os and 2 more 2026-11-02 7.8 High
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption.
CVE-2026-20563 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 5.3 Medium
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.
CVE-2026-68589 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.7 Medium
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889.
CVE-2026-20567 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 6.7 Medium
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431394; Issue ID: MSV-10004.
CVE-2026-20548 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01872867 / MOLY01774038; Issue ID: MSV-9801.
CVE-2026-20549 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775865; Issue ID: MSV-8895.
CVE-2026-20546 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01876654 / MOLY01774038; Issue ID: MSV-9803.
CVE-2026-20556 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01876662; Issue ID: MSV-9833.
CVE-2026-20557 2 Mediatek, Mediatek, Inc. 2 Mediatek Chipset, Mediatek Chipset 2026-11-02 7.5 High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01877236; Issue ID: MSV-9804.