CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.18)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in Google Chrome before version 45.0.2454.85 may allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact.
A use-after-free vulnerability in the SkMatrix::invertNonIdentity function in the Skia library, used in Google Chrome before version 45.0.2454.85, allows remote attackers to cause a denial of service or potentially unspecified other impact by triggering matrix elements that lead to an infinite result during inversion calculations.
The DOM implementation in Blink, used in Google Chrome before version 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
The mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, mdare64_52.sys, and Fortishield.sys drivers in Fortinet FortiClient before version 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry. This allows local users to obtain a privileged handle to a PID and possibly have unspecified other impact.
The Fortishield.sys driver in Fortinet FortiClient before version 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in ioctl calls 0x220024 or 0x220028.
The mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys drivers in Fortinet FortiClient before version 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call.
The pcsd web UI in PCS version 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via 'escape characters' in a URL.
A double free vulnerability in lib/x509/x509_ext.c in GnuTLS before version 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted CRL distribution point.
The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, allowing remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.
IPPUSBXD before 1.22 listens on all interfaces, allowing remote attackers to access USB connected printers via a direct request.
Cisco IOS XE versions 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allow remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet.
Cisco IOS XE versions 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when using NAT Application Layer Gateway, allow remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted SIP packet.
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet.
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet.
Array index error in the tcm_vhost_make_tpg function in the Linux kernel before version 4.0 may allow guest OS users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted VHOST_SCSI_SET_ENDPOINT ioctl call.
Unspecified vulnerability in HP Intelligent Provisioning versions 1.00 through 1.62(a), 2.00, and 2.10 allows remote attackers to execute arbitrary code via unknown vectors.
Check_MK versions 1.2.2p2, 1.2.2p3, and 1.2.3i5 allow remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot.
Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command.
The udp_recvmsg and udpv6_recvmsg functions in the Linux kernel before version 4.0.6 do not properly consider yielding a processor, allowing remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.
In the Linux kernel before version 4.1.6 on the x86_64 platform, there is a flaw in handling IRET faults during NMI processing that occurred during userspace execution. This may allow local users to gain privileges by triggering an NMI.