CVE-2026 list

CVE-2026 records published in March 2026

Page six of six: records 5,001 to 5,228 of the 5,228 published in March 2026, newest first. The first page carries the figures for March 2026.

CVE-2026 records published in March 2026, newest first: records 5,001 to 5,228 of 5,228
CVE Summary CVSS EPSS Published Signals
CVE-2026-27601Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack8.2CNA v4.01.0%2026-03-03Fix
CVE-2026-27600HomeBox affected by blind SSRF5.0CNA v3.10.3%2026-03-03Fix
CVE-2026-27012Unauthenticated privilege escalation in OpenSTAManager via modules/utenti/actions.php9.8CNA v3.10.7%2026-03-03
CVE-2026-26892oretnom23 Simple Logistic Hub Parcel's Management System SQL injection7.2v3.10.3%2026-03-03
CVE-2026-26891oretnom23 Simple Logistic Hub Parcel's Management System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26890oretnom23 Pharmacy Point Of Sale System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26889oretnom23 Pharmacy Point Of Sale System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26888oretnom23 Pharmacy Point Of Sale System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26887oretnom23 Pharmacy Point Of Sale System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26886oretnom23 Simple Online Mens Salon Management System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26885oretnom23 Simple Online Mens Salon Management System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26884oretnom23 Simple Online Mens Salon Management System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26883oretnom23 Simple Online Mens Salon Management System SQL injection2.7CISA ADP v3.10.3%2026-03-03
CVE-2026-26279Froxlor Admin-to-Root privilege escalation via input validation bypass + OS command injection9.1CNA v3.11.1%2026-03-03Fix
CVE-2026-26272HomeBox affected by stored XSS via HTML/SVG Attachment upload4.6CNA v3.10.2%2026-03-03Fix
CVE-2026-26266AliasVault affected by cross-site scripting (XSS) via Email HTML Rendering9.3CNA v3.10.4%2026-03-03Fix
CVE-2026-25906Dell Optimizer link following7.3CNA v3.10.2%2026-03-03Fix
CVE-2026-25674Django potential incorrect permissions on newly created file system objects3.7CISA ADP v3.10.3%2026-03-03Fix
CVE-2026-25673Django potential denial of service vulnerability in URLField via Unicode normalization on Windows7.5CISA ADP v3.11.1%2026-03-03Fix
CVE-2026-25590GLPI Inventory plugin has reflected XSS in task jobs4.5CNA v3.10.3%2026-03-03Fix
CVE-2026-25146OpenEMR's payments gateway_api_key secret rendered into client JS code9.6CNA v3.10.5%2026-03-03Fix
CVE-2026-24898OpenEMR has an Unauthenticated MedEx token disclosure10.0CNA v3.10.6%2026-03-03Fix
CVE-2026-24848OpenEMR arbitrary file write leading to remote code execution8.7CNA v4.06.6%2026-03-03
CVE-2026-24502Dell Command uncontrolled search path8.8CNA v3.10.2%2026-03-03Fix
CVE-2026-24415OpenSTAManager affected by reflected XSS in modifica_iva.php via righe parameter5.1CNA v4.00.3%2026-03-03Exploit codeFix
CVE-2026-24103Tenda AC15 buffer overflow9.8CISA ADP v3.10.4%2026-03-03
CVE-2026-22891The Biosig Project libbiosig Intan CLP parsing functionality heap-based buffer overflow9.8CNA v3.10.6%2026-03-03Fix
CVE-2026-22886Eclipse OpenMQ weak credentials9.8CNA v3.10.4%2026-03-03
CVE-2026-21866Dify stored XSS in chat5.1CNA v4.00.2%2026-03-03Fix
CVE-2026-20801Gallagher NxWitness VMS and Hanwha VMS Integrations cleartext transmission of sensitive information5.6CNA v3.10.1%2026-03-03Fix
CVE-2026-20777The Biosig Project libbiosig Nicolet WFT parsing functionality heap-based buffer overflow8.1CNA v3.10.5%2026-03-03Fix
CVE-2026-20757Gallagher Command Centre Server improper locking2.5CNA v3.10.1%2026-03-03Fix
CVE-2026-3494MariaDB Server Audit Plugin Comment Handling Bypass5.3CNA v4.00.4%2026-03-03Exploit codeFix
CVE-2026-3487itsourcecode College Management System class-result.php SQL injection7.2v3.10.5%2026-03-03
CVE-2026-3486itsourcecode College Management System student-fee.php SQL injection7.2v3.10.5%2026-03-03
CVE-2026-3485D-Link DIR-868L SSDP service sub_1BF84 os command injection9.3CNA v4.06.7%2026-03-03Emerging Threats
CVE-2026-3484PhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injection8.8v3.14.5%2026-03-03
CVE-2026-3465Tuya App/SDK JSON Data Point denial of service2.3CNA v4.00.5%2026-03-03
CVE-2026-3463xlnt-community xlnt Compound Document binary.hpp append heap-based overflow7.8v3.10.2%2026-03-03
CVE-2026-3455mailparser vulnerable to cross-site scripting5.1CNA v4.00.4%2026-03-03Fix
CVE-2026-3449@tootallnate/once vulnerable to incorrect control flow Scoping4.8CNA v4.00.2%2026-03-03Fix
CVE-2026-3437Portwell Engineering Toolkits driver memory corruption7.8NVD v3.10.2%2026-03-03Fix
CVE-2026-3351Authorization bypass in LXD GET //certificates endpoint2.1CNA v4.00.2%2026-03-03Fix
CVE-2026-3344WatchGuard Firebox System Integrity Check Bypass6.9CNA v4.00.5%2026-03-03Fix
CVE-2026-3343WatchGuard Firebox reflected cross-site-scripting (XSS) vulnerability in Fireware Web UI5.1CNA v4.00.3%2026-03-03Fix
CVE-2026-3342WatchGuard Firebox out-of-bounds write8.6CNA v4.00.7%2026-03-03Fix
CVE-2026-3266Improper access control vulnerability has been discovered in OpenText™ Filr8.3CNA v4.00.6%2026-03-03Fix
CVE-2026-3224Devolutions Server Microsoft Entra ID authentication bypass9.8CISA ADP v3.10.7%2026-03-03Fix
CVE-2026-3204Devolutions Server error message page improper input validation9.8CISA ADP v3.10.6%2026-03-03Fix
CVE-2026-3136Google Cloud Build Comment Control Bypass8.6CNA v4.00.4%2026-03-03Fix
CVE-2026-3130Devolutions Server improper workflow enforcement9.8CISA ADP v3.10.5%2026-03-03Fix
CVE-2026-2915HP System Event Utility denial of service5.2CNA v4.00.1%2026-03-03Fix
CVE-2026-2637iBoysoft NTFS incorrect permission assignment7.8v3.10.2%2026-03-03
CVE-2026-2628All-in-One Microsoft 365 and Entra ID / Azure AD SSO Login WordPress plugin authentication bypass9.8CNA v3.10.7%2026-03-03Fix
CVE-2026-2606IBM webMethods API Gateway createapi endpoint path traversal6.5CNA v3.10.5%2026-03-03Fix
CVE-2026-2590Devolutions Remote Desktop Manager improper certificate validation9.8CISA ADP v3.10.5%2026-03-03Fix
CVE-2026-2568WP Zendesk for Contact Form 7 WordPress plugin stored cross-site scripting7.2CNA v3.10.3%2026-03-03Fix
CVE-2026-2448Page Builder by SiteOrigin WordPress plugin authenticated (Contributor+) local file inclusion8.8CNA v3.10.9%2026-03-03Fix
CVE-2026-2269Uncanny Automator WordPress plugin server-side request forgery7.2CNA v3.10.7%2026-03-03Fix
CVE-2026-1876Denial of service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series Ethernet module8.7CNA v4.00.4%2026-03-03
CVE-2026-1875Denial of service (DoS) vulnerability in Ethernet function of MELSEC iQ-F Series EtherNet/IP module8.7CNA v4.00.4%2026-03-03Fix
CVE-2026-1874Mitsubishi Electric MELSEC iQ-F Series EtherNet/IP module denial of service8.7CNA v4.00.4%2026-03-03Fix
CVE-2026-1775Missing authentication for critical function in Labkotec LID-3300IP8.8CNA v4.00.7%2026-03-03Fix
CVE-2026-1713IBM MQ authentication bypass5.0v3.10.1%2026-03-03Fix
CVE-2026-1567IBM InfoSphere Information Server is affected by an XML external entity injection (XXE)7.1CNA v3.10.3%2026-03-03Fix
CVE-2026-1566LatePoint WordPress plugin authenticated (Agent+) privilege escalation8.8CNA v3.10.3%2026-03-03Fix
CVE-2026-1492User Registration and Membership WordPress plugin unauthenticated privilege escalation9.8CNA v3.128.5%2026-03-03NucleiExploit codeFix
CVE-2026-1487LatePoint WordPress plugin authenticated (Administrator+) SQL injection via JSON import6.5CNA v3.10.3%2026-03-03Fix
CVE-2026-1336AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin unauthorized access5.3CNA v3.10.3%2026-03-03Fix
CVE-2026-1265IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file4.3CNA v3.10.2%2026-03-03Fix
CVE-2026-0869Application User custom defined accounts are not properly password protected in Brocade ASCG8.3CNA v4.00.4%2026-03-03Fix
CVE-2026-0754HP VVX SIP Service Providers possible Impersonation of Poly Voice Device8.2CNA v4.00.1%2026-03-03
CVE-2026-0540DOMPurify XSS via Missing Rawtext Elements in SAFE_FOR_XML5.3CNA v4.00.3%2026-03-03Fix
CVE-2026-28412Textream vulnerable to uncontrolled resource consumption (denial of service)6.5CNA v3.10.4%2026-03-02Fix
CVE-2026-28403Textream Cross-Site WebSocket Hijacking (CSWSH) vulnerability7.6CNA v3.10.2%2026-03-02Fix
CVE-2026-28401NocoDB: Stored cross-site scripting via Rich Text Cells5.3CNA v4.00.3%2026-03-02Fix
CVE-2026-28399NocoDB: SQL injection via DATEADD Formula6.2CNA v4.00.6%2026-03-02Fix
CVE-2026-28398NocoDB: Stored cross-site scripting via Comments and Rich Text Cells5.3CNA v4.00.3%2026-03-02Fix
CVE-2026-28397NocoDB: Stored cross-site scripting via Comments5.3CNA v4.00.3%2026-03-02Fix
CVE-2026-28396NocoDB: Refresh Tokens not Revoked on Password Reset4.9CNA v4.00.3%2026-03-02Fix
CVE-2026-28361NocoDB: Missing Ownership Validation in MCP Token Operations4.9CNA v4.00.3%2026-03-02Fix
CVE-2026-28360NocoDB: Plaintext storage of Shared View Passwords2.7CNA v4.00.3%2026-03-02Fix
CVE-2026-28359NocoDB: Stored cross-site scripting via Rich Text field5.3CNA v4.00.3%2026-03-02Fix
CVE-2026-28358NocoDB: User Enumeration via Password Reset endpoint2.7CNA v4.00.7%2026-03-02NucleiFix
CVE-2026-28357NocoDB: Stored cross-site scripting via Formula Cell5.3CNA v4.00.3%2026-03-02Fix
CVE-2026-28286ZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API8.6CNA v3.10.6%2026-03-02Exploit code
CVE-2026-27631Exiv2: Uncaught exception cannot create std::vector larger than max_size2.7CNA v4.00.4%2026-03-02Fix
CVE-2026-27596Exiv2: Integer underflow in LoaderNative::getData causes heap buffer overflow2.7CNA v4.00.6%2026-03-02Fix
CVE-2026-26720twenty code injection9.8CISA ADP v3.11.2%2026-03-02
CVE-2026-26713Carmelo Simple Food Order System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26712Carmelo Simple Food Order System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26711Carmelo Simple Food Order System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26710Carmelo Simple Food Order System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26709Carmelo Simple Gym Management System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26708oretnom23 Pharmacy Point Of Sale System SQL injection9.8v3.10.3%2026-03-02
CVE-2026-26707oretnom23 Pharmacy Point Of Sale System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-26706oretnom23 Pharmacy Point Of Sale System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-26705oretnom23 Pharmacy Point Of Sale System SQL injection9.8v3.10.4%2026-03-02
CVE-2026-26704oretnom23 Pharmacy Point Of Sale System SQL injection9.8v3.10.4%2026-03-02
CVE-2026-26703Jon-remus-sevellejo Personnel Property Equipment System SQL injection9.8v3.10.6%2026-03-02
CVE-2026-26702Jon-remus-sevellejo Personnel Property Equipment System SQL injection9.8v3.10.6%2026-03-02
CVE-2026-26701Jon-remus-sevellejo Personnel Property Equipment System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-26700Jon-remus-sevellejo Personnel Property Equipment System SQL injection9.8v3.10.4%2026-03-02
CVE-2026-26699Jon-remus-sevellejo Personnel Property Equipment System code injection7.2CISA ADP v3.10.7%2026-03-02
CVE-2026-26698Carmelo Simple Student Alumni System SQL injection4.9CISA ADP v3.10.4%2026-03-02
CVE-2026-26697Carmelo Simple Student Alumni System SQL injection4.9CISA ADP v3.10.4%2026-03-02
CVE-2026-26696Carmelo Simple Student Alumni System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-26695Carmelo Simple Student Alumni System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-26694Carmelo Simple Student Alumni System SQL injection9.8v3.10.5%2026-03-02
CVE-2026-25884Exiv2: Out-of-bounds read in CrwMap::decode0x08052.7CNA v4.00.5%2026-03-02Fix
CVE-2026-25477AFFiNE: Open redirect via Regex Bypass in redirect-proxy6.9CNA v4.00.3%2026-03-02Fix
CVE-2026-24115Tenda W20E buffer overflow9.8v3.10.7%2026-03-02
CVE-2026-24114Tenda W20E buffer overflow9.8v3.10.6%2026-03-02
CVE-2026-24113Tenda W20E buffer overflow9.8v3.10.6%2026-03-02
CVE-2026-24112Tenda W20E buffer overflow9.8v3.10.5%2026-03-02
CVE-2026-24111Tenda W20E buffer overflow9.8v3.10.6%2026-03-02
CVE-2026-24110Tenda W20E buffer overflow9.8CISA ADP v3.10.4%2026-03-02
CVE-2026-24109Tenda W20E buffer overflow9.8v3.10.6%2026-03-02
CVE-2026-24108Tenda W20E buffer overflow9.8CISA ADP v3.10.7%2026-03-02
CVE-2026-24107Tenda W20E code injection9.8CISA ADP v3.12.2%2026-03-02
CVE-2026-24105Tenda AC15 code injection9.8CISA ADP v3.11.8%2026-03-02Fix
CVE-2026-24101Tenda AC15 OS command injection9.8CISA ADP v3.11.7%2026-03-02
CVE-2026-23865FreeType integer overflow5.3CNA v3.10.1%2026-03-02Fix
CVE-2026-23600HPE AutoPass License Server (APLS) authentication bypass10.0CNA v4.01.0%2026-03-02Fix
CVE-2026-21882Theshit's Improper Privilege Dropping allows local privilege escalation via Command Re-execution8.4CNA v3.10.2%2026-03-02Fix
CVE-2026-21853AFFiNE: One-click remote code execution through Custom URL Handling8.8CNA v3.10.6%2026-03-02Fix
CVE-2026-21385Qualcomm Multiple Chipsets memory corruption7.8CNA v3.11.3%2026-03-02KEVFix
CVE-2026-20445MediaTek chipset MDDP crash4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20444MediaTek chipset display memory corruption6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20443MediaTek chipset display memory corruption6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20442MediaTek chipset display crash4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20441MediaTek chipset MAE out-of-bounds write6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20440MediaTek chipset MAE out-of-bounds write6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20439MediaTek chipset imgsys crash4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20438MediaTek chipset MAE out-of-bounds write6.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20437MediaTek chipset MAE crash4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20436MediaTek chipset wlan STA driver privilege escalation6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20435MediaTek chipset preloader information disclosure4.6CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20434MediaTek chipset Modem out-of-bounds write7.5CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-20430MediaTek chipset wlan AP FW out-of-bounds write8.8CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-20429MediaTek chipset display out-of-bounds read4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20428MediaTek chipset display out-of-bounds write6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20427MediaTek chipset display privilege escalation6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20426MediaTek chipset display out-of-bounds write6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20425MediaTek chipset display out-of-bounds write6.7CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20424MediaTek chipset display out-of-bounds read4.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20423MediaTek chipset wlan STA driver out-of-bounds write7.8CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-20416MediaTek chipset pcie out-of-bounds write7.2CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-3432Sim Studio AI Unauthenticated OAuth Token Theft9.1NVD v3.10.5%2026-03-02Fix
CVE-2026-3431Sim Studio AI MongoDB SSRF and arbitrary Document Deletion9.8CNA v3.10.6%2026-03-02Fix
CVE-2026-3422E-Excellence｜U-Office Force insecure deserialization9.3CNA v4.01.0%2026-03-02Fix
CVE-2026-3413itsourcecode University Management System admin_single_student.php SQL injection9.8v3.10.6%2026-03-02
CVE-2026-3412itsourcecode University Management System att_single_view.php cross-site scripting6.1v3.10.5%2026-03-02
CVE-2026-3411itsourcecode University Management System admin_single_student_update.php SQL injection9.8v3.10.6%2026-03-02
CVE-2026-3410itsourcecode Society Management System check_studid.php SQL injection9.8v3.10.6%2026-03-02
CVE-2026-3409eosphoros-ai DB-GPT Flow Import Endpoint code injection6.9CNA v4.00.5%2026-03-02
CVE-2026-3408Open Babel CDXML file atom.cpp GetExplicitValence null pointer dereference6.5v3.10.7%2026-03-02Fix
CVE-2026-3407YosysHQ yosys BLIF file rtlil.h set heap-based overflow4.8CNA v4.00.2%2026-03-02
CVE-2026-3406Projectworlds Online Art Gallery Shop Registration registration.php SQL injection9.8v3.10.6%2026-03-02
CVE-2026-3405thinkgem JeeSite Connection path traversal8.1v3.10.9%2026-03-02
CVE-2026-3404thinkgem JeeSite Endpoint CasOutHandler.java XML external entity reference8.1v3.10.5%2026-03-02
CVE-2026-3403PHPGurukul Student Record Management System edit-subject.php cross-site scripting4.8v3.10.4%2026-03-02
CVE-2026-3402PHPGurukul Student Record Management System edit-course.php cross-site scripting4.8v3.10.4%2026-03-02
CVE-2026-3401SourceCodester Web-based Pharmacy Product Management System session expiration6.6v3.10.5%2026-03-02
CVE-2026-3400Tenda AC15 TextEditingConversion stack-based overflow9.8v3.11.1%2026-03-02
CVE-2026-3338PKCS7_verify signature validation Bypass in AWS-LC8.7CNA v4.00.4%2026-03-02Fix
CVE-2026-3337Timing side-channel in AES-CCM Tag Verification in AWS-LC8.2CNA v4.00.5%2026-03-02Fix
CVE-2026-3336PKCS7_verify Certificate Chain Validation Bypass in AWS-LC8.7CNA v4.00.4%2026-03-02Fix
CVE-2026-3180Contest Gallery WordPress plugin unauthenticated SQL injection7.5CNA v3.11.0%2026-03-02Exploit codeFix
CVE-2026-3132Master Addons for Elementor Premium WordPress plugin remote code execution8.8CNA v3.11.1%2026-03-02Fix
CVE-2026-3000Changing｜IDExpert Windows Logon Agent remote code execution9.3CNA v4.00.6%2026-03-02Fix
CVE-2026-2999Changing｜IDExpert Windows Logon Agent remote code execution9.3CNA v4.00.6%2026-03-02Fix
CVE-2026-2584SQL injection in Ciser System SL firmware9.3CNA v4.00.8%2026-03-02
CVE-2026-2583Blocksy WordPress theme stored cross-site scripting6.4CNA v3.10.3%2026-03-02Fix
CVE-2026-2256Command injection vulnerability in ModelScope's ms-agent6.5CISA ADP v3.11.7%2026-03-02Exploit code
CVE-2026-1628Mattermost Desktop preload script navigation restriction inclusion of untrusted functionality4.6CNA v3.10.1%2026-03-02Fix
CVE-2026-0995Arm C1 Pro race condition3.6CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0689Extreme Networks ExtremeCloud IQ XIQ‑SE NAC admin credential exposure via HTTP Response6.0CNA v4.00.3%2026-03-02Fix
CVE-2026-0655Path traversal on TP-Link Deco BE256.9CNA v4.00.3%2026-03-02Fix
CVE-2026-0654Command injection on TP-Link Deco BE258.5CNA v4.00.3%2026-03-02Fix
CVE-2026-0047Google Android ActivityManagerService.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Exploit codeFix
CVE-2026-0038Google Android mem_protect.c privilege escalation8.4CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0037Google Android ffa.c memory corruption8.4CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0035Google Android MediaProvider.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0034Google Android ManagedServices.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0032Google Android mem_protect.c out-of-bounds write7.8CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0031Google Android mem_protect.c out-of-bounds write8.4CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0030Google Android mem_protect.c out-of-bounds write8.4CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0029Google Android pkvm.c memory corruption8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0028Google Android mem_protect.c out-of-bounds write8.4CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0027Google Android arm-smmu-v3.c out-of-bounds write6.7CISA ADP v3.10.2%2026-03-02Fix
CVE-2026-0026Google Android PermissionManagerServiceImpl.java privilege escalation7.8v3.10.1%2026-03-02Fix
CVE-2026-0025Google Android Notification.java privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2026-0024Google Android MediaProvider.java information disclosure4.0v3.10.1%2026-03-02Fix
CVE-2026-0023Google Android PackageInstallerService.java privilege escalation7.8v3.10.1%2026-03-02Exploit codeFix
CVE-2026-0021Google Android AppInfoBase.java insecure permissions8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0020Google Android ParsedPermissionUtils.java privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0017Google Android BiometricService.java privilege escalation7.7NVD v3.10.1%2026-03-02Fix
CVE-2026-0015Google Android AppOpsService.java denial of service6.2CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0014Google Android AppOpsService.java denial of service6.2CISA ADP v3.10.1%2026-03-02Exploit codeFix
CVE-2026-0013Google Android PickActivity.java privilege escalation8.4CISA ADP v3.10.2%2026-03-02Exploit codeFix
CVE-2026-0012Google Android ExpandableNotificationRow.java information disclosure6.2v3.10.1%2026-03-02Fix
CVE-2026-0011Google Android Settings.java privilege escalation8.4v3.10.1%2026-03-02Fix
CVE-2026-0010Google Android IDrmManagerService.cpp out-of-bounds write8.4v3.10.1%2026-03-02Exploit codeFix
CVE-2026-0008Google Android FaceEnroll.kt privilege escalation8.4CISA ADP v3.10.1%2026-03-02Fix
CVE-2026-0007Google Android WindowInfo.cpp privilege escalation8.6v3.10.1%2026-03-02Fix
CVE-2026-0006Google Android multiple locations out-of-bounds read9.8CISA ADP v3.10.7%2026-03-02Exploit codeFix
CVE-2026-0005Google Android KeyguardServiceDelegate.java information disclosure6.2v3.10.1%2026-03-02Fix
CVE-2026-3399Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow8.7CNA v4.01.0%2026-03-01Emerging Threats
CVE-2026-3398Tenda F453 httpd AdvSetWan fromAdvSetWan buffer overflow8.7CNA v4.01.0%2026-03-01
CVE-2026-3395MaxSite CMS MarkItUp Preview AJAX endpoint preview-ajax.php eval code injection9.8v3.12.5%2026-03-01NucleiExploit code
CVE-2026-3394jarikomppa soloud WAV file soloud_wav.cpp loadwav memory corruption7.8v3.10.2%2026-03-01
CVE-2026-3393jarikomppa soloud Audio file soloud_wav.cpp loadflac heap-based overflow7.8v3.10.2%2026-03-01
CVE-2026-3392FascinatedBox lily lily_emitter.c eval_tree null pointer dereference5.5v3.10.2%2026-03-01Fix
CVE-2026-3391FascinatedBox lily lily_emitter.c clear_storages out-of-bounds5.5v3.10.2%2026-03-01
CVE-2026-3390FascinatedBox lily Error Reporting lily_build_error.c patch_line_end out-of-bounds5.5v3.10.2%2026-03-01
CVE-2026-3389Squirrel sqstdrex.cpp sqstd_rex_newnode null pointer dereference5.5v3.10.2%2026-03-01
CVE-2026-3388Squirrel sqcompiler.cpp UnaryOP recursion5.5v3.10.2%2026-03-01
CVE-2026-3387wren-lang Wren wren_compiler.c getByteCountForArguments null pointer dereference5.5v3.10.2%2026-03-01
CVE-2026-3386wren-lang Wren wren_compiler.c emitOp out-of-bounds7.1v3.10.2%2026-03-01
CVE-2026-3385wren-lang Wren wren_compiler.c resolveLocal recursion5.5v3.10.2%2026-03-01
CVE-2026-3384ChaiScript chaiscript_eval.hpp Function_Push_Pop recursion5.5v3.10.2%2026-03-01
CVE-2026-3383ChaiScript boxed_number.hpp go divide by zero5.5v3.10.2%2026-03-01
CVE-2026-3382ChaiScript boxed_number.hpp get_as memory corruption5.5v3.10.2%2026-03-01
CVE-2026-3380Tenda F453 L7Im frmL7ImForm buffer overflow8.8CISA ADP v3.11.0%2026-03-01
CVE-2026-3379Tenda F453 SetIpBind fromSetIpBind buffer overflow8.7CNA v4.01.0%2026-03-01
CVE-2026-3378Tenda F453 qossetting fromqossetting buffer overflow8.7CNA v4.01.0%2026-03-01
CVE-2026-3377Tenda F453 SafeUrlFilter fromSafeUrlFilter buffer overflow8.7CNA v4.01.0%2026-03-01