By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 37 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-92049No exploit	Use-after-free in the Widget: Win32 componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
36Monitor	CVE-2026-92050No exploit	Sandbox escape due to race condition in the XPConnect componentmozilla · firefox · CWE-362 Pre-auth Race condition	Critical9.1	—	0.4%	Sep 15, 2026
36Monitor	CVE-2026-92051No exploit	Spoofing issue due to invalid pointer in the Graphics componentmozilla · firefox · CWE-476 Pre-auth Memory safety	Critical9.1	—	0.5%	Sep 15, 2026
35Monitor	CVE-2026-92052No exploit	Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-457 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92053No exploit	Privilege escalation in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92054No exploit	Privilege escalation in the Memory componentmozilla · firefox · CWE-119 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92055No exploit	Privilege escalation in the DevTools componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92056No exploit	Use-after-free in the Graphics: Text componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
36Monitor	CVE-2026-92057No exploit	Mitigation bypass in the Enterprise Policies componentmozilla · firefox · CWE-693 Pre-auth	Critical9.1	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92058No exploit	Use-after-free in the Graphics componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
37Monitor	CVE-2026-92059No exploit	Incorrect boundary conditions in the DOM: Editor componentmozilla · firefox · CWE-119 Memory safety	Critical9.3	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-92060No exploit	Use-after-free in the Internationalization componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
39Monitor	CVE-2026-92061No exploit	Incorrect boundary conditions in the Security: Process Sandboxing componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.8	—	0.5%	Sep 15, 2026
35Monitor	CVE-2026-92062No exploit	Privilege escalation in the Session Restore componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92064No exploit	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 Memory safety	High8.8	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-92065No exploit	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 Memory safety	High8.8	—	0.1%	Sep 15, 2026
39Monitor	CVE-2026-92066No exploit	Sandbox escape in the Profile Backup componentmozilla · firefox · CWE-693 Pre-auth	Critical9.8	—	0.5%	Sep 15, 2026
35Monitor	CVE-2026-92067No exploit	Use-after-free in the Widget: Gtk componentmozilla · firefox · CWE-416 Pre-auth Memory safety	High8.8	—	0.2%	Sep 15, 2026
38Monitor	CVE-2026-92071No exploit	Sandbox escape due to incorrect boundary conditions in the Widget: Win32 componentmozilla · firefox · CWE-119 Pre-auth Memory safety	Critical9.6	—	0.2%	Sep 15, 2026
32Monitor	CVE-2026-92072No exploit	Incorrect boundary conditions in the Safe Browsing componentmozilla · firefox · CWE-119 Memory safety	High8.0	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92073No exploit	Privilege escalation in the Enterprise Policies componentmozilla · firefox · CWE-269 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-92074No exploit	Mitigation bypass in the Popup Blocker componentmozilla · firefox · CWE-693	High8.8	—	0.1%	Sep 15, 2026
36Monitor	CVE-2026-92075No exploit	Mitigation bypass in the Networking componentmozilla · firefox · CWE-693 Pre-auth	Critical9.1	—	0.3%	Sep 15, 2026
35Monitor	CVE-2026-92076No exploit	Incorrect boundary conditions in the Networking componentmozilla · firefox · CWE-119 Memory safety	High8.8	—	0.1%	Sep 15, 2026
36Monitor	CVE-2026-92079No exploit	Mitigation bypass in the Widget: Win32 componentmozilla · firefox · CWE-693 Pre-auth	Critical9.1	—	0.2%	Sep 15, 2026
37Monitor	CVE-2023-54398No exploit	Yonyou U8 Cloud Java Deserialization RCE via FileManageServletyonyou · u8 cloud · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	1.2%	Sep 15, 2026
37Monitor	CVE-2024-58385No exploit	Yonyou U8 CRM SQL Injection via fillbacksettingedit.phpyonyou · u8 crm · CWE-89 pre-auth RCE Auth bypass SQL injection	Critical9.3	—	0.6%	Sep 15, 2026
34Monitor	CVE-2026-18110Proof of concept	Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an concretecms · concrete cms · CWE-862 Pre-auth Broken access control (IDOR) CSRF	High8.7	—	1.5%	Sep 15, 2026
35Monitor	CVE-2026-19780No exploit	Koha Eval Code Injection Remote Code Execution Vulnerabilitykoha · koha · CWE-95 RCE	High8.8	—	1.0%	Sep 15, 2026
28Monitor	CVE-2026-21586No exploit	This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, atlassian · confluence data center · CWE-285 RCE Broken access control (IDOR)	High7.1	—	0.4%	Sep 15, 2026
28Monitor	CVE-2026-21587No exploit	This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.atlassian · jira service management data center · CWE-285 RCE Broken access control (IDOR)	High7.1	—	0.4%	Sep 15, 2026
28Monitor	CVE-2026-21588No exploit	This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,atlassian · confluence data center · CWE-400 Denial of service	High7.1	—	0.3%	Sep 15, 2026
34Monitor	CVE-2026-81894No exploit	Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption fieldconcretecms · concrete cms · CWE-89 SQL injection XSS	High8.5	—	0.2%	Sep 15, 2026
34Monitor	CVE-2026-81895No exploit	Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`concretecms · concrete cms · CWE-89 SQL injection	High8.5	—	0.5%	Sep 15, 2026
33Monitor	CVE-2026-81896No exploit	Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Labelconcretecms · concrete cms · CWE-79 XSS	High8.4	—	0.2%	Sep 15, 2026
30Monitor	CVE-2026-81897No exploit	Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_controlconcretecms · concrete cms · CWE-79 Pre-auth XSS CSRF	High7.7	—	0.1%	Sep 15, 2026
36Monitor	CVE-2026-89022No exploit	BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusionbookstackapp · bookstack · CWE-290 Pre-auth Auth bypass	Critical9.1	—	0.4%	Sep 15, 2026
38Monitor	CVE-2026-89026Proof of concept	Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originateissabel foundation · issabel framework · CWE-321 pre-auth RCE Hard-coded credentials	Critical9.3	—	2.6%	Sep 15, 2026
32Monitor	CVE-2026-11728No exploit	IBM MQ .NET client is vulnerable to remote code executionibm · mq · CWE-787 pre-auth RCE Memory safety	High8.1	—	0.3%	Sep 15, 2026
34Monitor	CVE-2026-11729No exploit	IBM MQ Java messaging is vulnerable to remote code executionibm · mq · CWE-502 RCE Deserialization	High8.5	—	0.5%	Sep 15, 2026
36Monitor	CVE-2026-11921No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-522 Pre-auth Info leak	Critical9.1	—	0.4%	Sep 15, 2026
30Monitor	CVE-2026-11926No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 15, 2026
39Monitor	CVE-2026-11928No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.5%	Sep 15, 2026
30Monitor	CVE-2026-11929No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-327 Pre-auth Weak crypto	High7.5	—	0.2%	Sep 15, 2026
28Monitor	CVE-2026-11934No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-285 Broken access control (IDOR)	High7.2	—	0.4%	Sep 15, 2026
32Monitor	CVE-2026-12101No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-289 Pre-auth	High8.1	—	0.3%	Sep 15, 2026
28Monitor	CVE-2026-12150No exploit	IBM MQ queue manager is vulnerable to denial of serviceibm · mq · CWE-121 Pre-auth Memory safety	High7.0	—	0.2%	Sep 15, 2026
39Monitor	CVE-2026-12351No exploit	IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injectionibm · mq · CWE-74 pre-auth RCE	Critical9.8	—	0.8%	Sep 15, 2026
30Monitor	CVE-2026-12354No exploit	IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injectionibm · mq · CWE-913 RCE	High7.5	—	0.4%	Sep 15, 2026
32Monitor	CVE-2026-12355No exploit	IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code executionibm · mq · CWE-74 pre-auth RCE	High8.1	—	0.6%	Sep 15, 2026
30Monitor	CVE-2026-12358No exploit	Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Accessibm · verify identity access · CWE-674 Pre-auth Denial of service	High7.5	—	0.5%	Sep 15, 2026
32Monitor	CVE-2026-12666No exploit	IBM MQ Java messaging is vulnerable to XML external entity injectionibm · mq · CWE-611 XXE	High8.1	—	0.4%	Sep 15, 2026
28Monitor	CVE-2026-12667No exploit	IBM MQ .NET client is vulnerable to XML external entity injectionibm · mq · CWE-611 XXE	High7.1	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-12728No exploit	IBM MQ Java messaging is vulnerable to remote code executionibm · mq · CWE-502 RCE Deserialization	High8.8	—	0.6%	Sep 15, 2026
28Monitor	CVE-2026-12752No exploit	Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026ibm · business automation workflow containers and traditional · CWE-611 XXE	High7.1	—	0.4%	Sep 15, 2026
30Monitor	CVE-2026-18113No exploit	Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Namesconcrete cms · concrete cms · CWE-79 XSS	High7.5	—	0.4%	Sep 15, 2026
29Monitor	CVE-2026-18115No exploit	In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.concrete cms · concrete cms · CWE-862 Broken access control (IDOR)	High7.4	—	0.4%	Sep 15, 2026
35Monitor	CVE-2026-40058No exploit	Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windowscrowdstrike · falcon sensor for windows · CWE-367 Local privilege escalation Race condition	High8.8	—	0.0%	Sep 15, 2026
35Monitor	CVE-2026-52484No exploit	An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/deCWE-78 RCE Command injection	High8.8	—	0.6%	Sep 15, 2026
39Monitor	CVE-2026-81236No exploit	Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 Pre-auth File upload	Critical9.8	—	0.4%	Sep 15, 2026
36Monitor	CVE-2026-81238No exploit	Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.dell · wyse management suite · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.2%	Sep 15, 2026
39Monitor	CVE-2026-81239No exploit	Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 Pre-auth File upload	Critical9.8	—	0.4%	Sep 15, 2026
39Monitor	CVE-2026-81240No exploit	Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.dell · wyse management suite · CWE-434 Pre-auth File upload	Critical9.8	—	0.4%	Sep 15, 2026
30Monitor	CVE-2026-81898No exploit	Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association viewsconcrete cms · concrete cms · CWE-79 XSS	High7.5	—	0.4%	Sep 15, 2026
29Monitor	CVE-2026-81899No exploit	Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboardconcrete cms · concrete cms · CWE-79 XSS	High7.3	—	0.4%	Sep 15, 2026
35Monitor	CVE-2026-0159No exploit	In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 RCE Memory safety	High8.8	—	0.3%	Sep 15, 2026
35Monitor	CVE-2026-0170No exploit	In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 Memory safety	High8.8	—	0.3%	Sep 15, 2026
35Monitor	CVE-2026-0171No exploit	In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.google · android · CWE-787 RCE Memory safety	High8.8	—	0.3%	Sep 15, 2026
33Monitor	CVE-2026-0189No exploit	In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High8.4	—	0.1%	Sep 15, 2026
33Monitor	CVE-2026-0194No exploit	In multiple locations, there is a possible permission bypass due to an integer overflow.google · android · CWE-190 Local privilege escalation Memory safety	High8.4	—	0.1%	Sep 15, 2026
31Monitor	CVE-2026-0199No exploit	In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.google · android · CWE-20 Local privilege escalation	High7.8	—	0.0%	Sep 15, 2026
35Monitor	CVE-2026-0200No exploit	In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.google · android · CWE-122 Memory safety	High8.8	—	0.3%	Sep 15, 2026
30Monitor	CVE-2026-53957No exploit	Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpcontentful · contentful-mcp-server · CWE-918 SSRF	High7.7	—	0.4%	Sep 15, 2026
28Monitor	CVE-2026-53966No exploit	XWiki Platform: Privilege escalation from edit to script right through Live Data editingxwiki · xwiki-platform · CWE-862 Broken access control (IDOR)	High7.1	—	0.7%	Sep 15, 2026
32Monitor	CVE-2026-54167No exploit	Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host headertektoncd · pipelines-as-code · CWE-345 Pre-auth	High8.2	—	0.2%	Sep 15, 2026
39Monitor	CVE-2026-19773No exploit	libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitylibwebsockets · libwebsockets · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Sep 15, 2026
28Monitor	CVE-2026-19774No exploit	BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerabilitybluez · bluez · CWE-121 pre-auth RCE Memory safety	High7.1	—	0.2%	Sep 15, 2026
31Monitor	CVE-2026-19781No exploit	Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilityashlar-vellum · cobalt · CWE-122 RCE Memory safety	High7.8	—	0.2%	Sep 15, 2026
31Monitor	CVE-2026-19885No exploit	OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-787 RCE Memory safety	High7.8	—	0.2%	Sep 15, 2026
31Monitor	CVE-2026-19886No exploit	OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-119 RCE Memory safety	High7.8	—	0.2%	Sep 15, 2026
36Monitor	CVE-2026-55158No exploit	Conflibot: Command injection via crafted pull request branch names under pull_request_targetwktk · conflibot · CWE-78 pre-auth RCE Command injection	Critical9.1	—	0.8%	Sep 15, 2026
30Monitor	CVE-2026-55178No exploit	GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile datageolens-io · geolens · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	Sep 15, 2026
34Monitor	CVE-2026-57586No exploit	CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Executionnaranor · agent-coderag · CWE-78 RCE Local privilege escalation Command injection	High8.6	—	0.2%	Sep 15, 2026
40Plan	CVE-2026-59971No exploit	MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)designcomputer · mysql_mcp_server · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.4%	Sep 15, 2026
36Monitor	CVE-2026-61549No exploit	Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backendwoodpecker-ci · woodpecker · CWE-269	Critical9.0	—	0.2%	Sep 15, 2026
33Monitor	CVE-2026-55301No exploit	In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 Local privilege escalation Memory safety	High8.4	—	0.1%	Sep 15, 2026
30Monitor	CVE-2026-55306No exploit	In Cellular Modem, there is a possible denial of service due to improper input validation.google · android · CWE-20 Pre-auth Denial of service	High7.5	—	0.3%	Sep 15, 2026
35Monitor	CVE-2026-55318No exploit	In multiple locations, there is a possible use-after-free due to a race condition.google · android · CWE-362 RCE Race condition	High8.8	—	0.2%	Sep 15, 2026
31Monitor	CVE-2026-55323No exploit	In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.google · android · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 15, 2026
35Monitor	CVE-2026-55331No exploit	In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.google · android · CWE-120 RCE Memory safety	High8.8	—	0.3%	Sep 15, 2026
32Monitor	CVE-2026-55343No exploit	In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-120 RCE Memory safety	High8.0	—	0.2%	Sep 15, 2026
31Monitor	CVE-2026-55351No exploit	In VPU, there is a possible out-of-bounds write due to an integer overflow.google · android · CWE-190 Local privilege escalation Memory safety	High7.8	—	0.0%	Sep 15, 2026
31Monitor	CVE-2026-55359No exploit	In multiple locations, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High7.8	—	0.1%	Sep 15, 2026
39Monitor	CVE-2026-55366No exploit	In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.google · android · CWE-693 Pre-auth Auth bypass	Critical9.8	—	0.4%	Sep 15, 2026
33Monitor	CVE-2026-56881No exploit	In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High8.4	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-56882No exploit	In Cellular Modem, there is a possible information disclosure due to a logic error in the code.google · android · CWE-200 RCE Info leak	High8.8	—	0.3%	Sep 15, 2026
33Monitor	CVE-2026-56914No exploit	In multiple locations, there is a possible use-after-free due to improper locking.google · android · CWE-416 Local privilege escalation Memory safety	High8.4	—	0.0%	Sep 15, 2026
35Monitor	CVE-2026-56920No exploit	In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.google · android · CWE-787 RCE Memory safety	High8.8	—	0.3%	Sep 15, 2026
33Monitor	CVE-2026-56941No exploit	In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.google · android · CWE-693 Local privilege escalation	High8.4	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-56942No exploit	In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.google · android · CWE-787 Memory safety	High8.8	—	0.3%	Sep 15, 2026

CVE-2026-92049
35Monitor
Use-after-free in the Widget: Win32 component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92050
36Monitor
Sandbox escape due to race condition in the XPConnect component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Race condition
mozilla · firefoxSep 15, 2026
CVE-2026-92051
36Monitor
Spoofing issue due to invalid pointer in the Graphics component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92052
35Monitor
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92053
35Monitor
Privilege escalation in the Graphics: CanvasWebGL component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92054
35Monitor
Privilege escalation in the Memory component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92055
35Monitor
Privilege escalation in the DevTools component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92056
35Monitor
Use-after-free in the Graphics: Text component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92057
36Monitor
Mitigation bypass in the Enterprise Policies component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92058
35Monitor
Use-after-free in the Graphics component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92059
37Monitor
Incorrect boundary conditions in the DOM: Editor component
CriticalCVSS 9.3No exploitEPSS 0%
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92060
35Monitor
Use-after-free in the Internationalization component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92061
39Monitor
Incorrect boundary conditions in the Security: Process Sandboxing component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92062
35Monitor
Privilege escalation in the Session Restore component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92064
35Monitor
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92065
35Monitor
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92066
39Monitor
Sandbox escape in the Profile Backup component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92067
35Monitor
Use-after-free in the Widget: Gtk component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92071
38Monitor
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92072
32Monitor
Incorrect boundary conditions in the Safe Browsing component
HighCVSS 8.0No exploitEPSS 0%
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92073
35Monitor
Privilege escalation in the Enterprise Policies component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92074
35Monitor
Mitigation bypass in the Popup Blocker component
HighCVSS 8.8No exploitEPSS 0%
mozilla · firefoxSep 15, 2026
CVE-2026-92075
36Monitor
Mitigation bypass in the Networking component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-92076
35Monitor
Incorrect boundary conditions in the Networking component
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
mozilla · firefoxSep 15, 2026
CVE-2026-92079
36Monitor
Mitigation bypass in the Widget: Win32 component
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2023-54398
37Monitor
Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Deserialization
yonyou · u8 cloudSep 15, 2026
CVE-2024-58385
37Monitor
Yonyou U8 CRM SQL Injection via fillbacksettingedit.php
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
- SQL injection
yonyou · u8 crmSep 15, 2026
CVE-2026-18110
34Monitor
Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an
HighCVSS 8.7Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
- CSRF
concretecms · concrete cmsSep 15, 2026
CVE-2026-19780
35Monitor
Koha Eval Code Injection Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
koha · kohaSep 15, 2026
CVE-2026-21586
28Monitor
This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1,
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
atlassian · confluence data centerSep 15, 2026
CVE-2026-21587
28Monitor
This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center.
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
atlassian · jira service management data centerSep 15, 2026
CVE-2026-21588
28Monitor
This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2,
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
atlassian · confluence data centerSep 15, 2026
CVE-2026-81894
34Monitor
Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
- XSS
concretecms · concrete cmsSep 15, 2026
CVE-2026-81895
34Monitor
Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
concretecms · concrete cmsSep 15, 2026
CVE-2026-81896
33Monitor
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label
HighCVSS 8.4No exploitEPSS 0%
- XSS
concretecms · concrete cmsSep 15, 2026
CVE-2026-81897
30Monitor
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_control
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
concretecms · concrete cmsSep 15, 2026
CVE-2026-89022
36Monitor
BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
bookstackapp · bookstackSep 15, 2026
CVE-2026-89026
38Monitor
Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Hard-coded credentials
issabel foundation · issabel frameworkSep 15, 2026
CVE-2026-11728
32Monitor
IBM MQ .NET client is vulnerable to remote code execution
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · mqSep 15, 2026
CVE-2026-11729
34Monitor
IBM MQ Java messaging is vulnerable to remote code execution
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Deserialization
ibm · mqSep 15, 2026
CVE-2026-11921
36Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Info leak
ibm · verify identity accessSep 15, 2026
CVE-2026-11926
30Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · verify identity accessSep 15, 2026
CVE-2026-11928
39Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ibm · verify identity accessSep 15, 2026
CVE-2026-11929
30Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
ibm · verify identity accessSep 15, 2026
CVE-2026-11934
28Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
ibm · verify identity accessSep 15, 2026
CVE-2026-12101
32Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
ibm · verify identity accessSep 15, 2026
CVE-2026-12150
28Monitor
IBM MQ queue manager is vulnerable to denial of service
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
ibm · mqSep 15, 2026
CVE-2026-12351
39Monitor
IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
ibm · mqSep 15, 2026
CVE-2026-12354
30Monitor
IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection
HighCVSS 7.5No exploitEPSS 0%
- RCE
ibm · mqSep 15, 2026
CVE-2026-12355
32Monitor
IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
ibm · mqSep 15, 2026
CVE-2026-12358
30Monitor
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · verify identity accessSep 15, 2026
CVE-2026-12666
32Monitor
IBM MQ Java messaging is vulnerable to XML external entity injection
HighCVSS 8.1No exploitEPSS 0%
- XXE
ibm · mqSep 15, 2026
CVE-2026-12667
28Monitor
IBM MQ .NET client is vulnerable to XML external entity injection
HighCVSS 7.1No exploitEPSS 0%
- XXE
ibm · mqSep 15, 2026
CVE-2026-12728
35Monitor
IBM MQ Java messaging is vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
ibm · mqSep 15, 2026
CVE-2026-12752
28Monitor
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
HighCVSS 7.1No exploitEPSS 0%
- XXE
ibm · business automation workflow containers and traditionalSep 15, 2026
CVE-2026-18113
30Monitor
Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names
HighCVSS 7.5No exploitEPSS 0%
- XSS
concrete cms · concrete cmsSep 15, 2026
CVE-2026-18115
29Monitor
In Concrete CMS 9.2.0 to 9.5.2, Missing Authorization in REST API Users update() and change_password Enables Account Takeover.
HighCVSS 7.4No exploitEPSS 0%
- Broken access control (IDOR)
concrete cms · concrete cmsSep 15, 2026
CVE-2026-40058
35Monitor
Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Race condition
crowdstrike · falcon sensor for windowsSep 15, 2026
CVE-2026-52484
35Monitor
An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/de
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
Sep 15, 2026
CVE-2026-81236
39Monitor
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
dell · wyse management suiteSep 15, 2026
CVE-2026-81238
36Monitor
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
dell · wyse management suiteSep 15, 2026
CVE-2026-81239
39Monitor
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
dell · wyse management suiteSep 15, 2026
CVE-2026-81240
39Monitor
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
dell · wyse management suiteSep 15, 2026
CVE-2026-81898
30Monitor
Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association views
HighCVSS 7.5No exploitEPSS 0%
- XSS
concrete cms · concrete cmsSep 15, 2026
CVE-2026-81899
29Monitor
Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS via group folder name on the Members > Groups dashboard
HighCVSS 7.3No exploitEPSS 0%
- XSS
concrete cms · concrete cmsSep 15, 2026
CVE-2026-0159
35Monitor
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 15, 2026
CVE-2026-0170
35Monitor
In Vp9DecodeFrameTag of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
google · androidSep 15, 2026
CVE-2026-0171
35Monitor
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 15, 2026
CVE-2026-0189
33Monitor
In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
google · androidSep 15, 2026
CVE-2026-0194
33Monitor
In multiple locations, there is a possible permission bypass due to an integer overflow.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 15, 2026
CVE-2026-0199
31Monitor
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 15, 2026
CVE-2026-0200
35Monitor
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
google · androidSep 15, 2026
CVE-2026-53957
30Monitor
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endp
HighCVSS 7.7No exploitEPSS 0%
- SSRF
contentful · contentful-mcp-serverSep 15, 2026
CVE-2026-53966
28Monitor
XWiki Platform: Privilege escalation from edit to script right through Live Data editing
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
xwiki · xwiki-platformSep 15, 2026
CVE-2026-54167
32Monitor
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
tektoncd · pipelines-as-codeSep 15, 2026
CVE-2026-19773
39Monitor
libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
libwebsockets · libwebsocketsSep 15, 2026
CVE-2026-19774
28Monitor
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- pre-auth RCE
- Memory safety
bluez · bluezSep 15, 2026
CVE-2026-19781
31Monitor
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
ashlar-vellum · cobaltSep 15, 2026
CVE-2026-19885
31Monitor
OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · origin viewerSep 15, 2026
CVE-2026-19886
31Monitor
OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · origin viewerSep 15, 2026
CVE-2026-55158
36Monitor
Conflibot: Command injection via crafted pull request branch names under pull_request_target
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
wktk · conflibotSep 15, 2026
CVE-2026-55178
30Monitor
GeoLens: Cross-dataset authorization bypass discloses private dataset metadata, schema, sample values, table rows, and raster/vector tile data
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
geolens-io · geolensSep 15, 2026
CVE-2026-57586
34Monitor
CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
naranor · agent-coderagSep 15, 2026
CVE-2026-59971
40Plan
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
designcomputer · mysql_mcp_serverSep 15, 2026
CVE-2026-61549
36Monitor
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend
CriticalCVSS 9.0No exploitEPSS 0%
woodpecker-ci · woodpeckerSep 15, 2026
CVE-2026-55301
33Monitor
In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 15, 2026
CVE-2026-55306
30Monitor
In Cellular Modem, there is a possible denial of service due to improper input validation.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
google · androidSep 15, 2026
CVE-2026-55318
35Monitor
In multiple locations, there is a possible use-after-free due to a race condition.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Race condition
google · androidSep 15, 2026
CVE-2026-55323
31Monitor
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 15, 2026
CVE-2026-55331
35Monitor
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 15, 2026
CVE-2026-55343
32Monitor
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 15, 2026
CVE-2026-55351
31Monitor
In VPU, there is a possible out-of-bounds write due to an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 15, 2026
CVE-2026-55359
31Monitor
In multiple locations, there is a possible permission bypass due to a logic error in the code.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
google · androidSep 15, 2026
CVE-2026-55366
39Monitor
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
google · androidSep 15, 2026
CVE-2026-56881
33Monitor
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
google · androidSep 15, 2026
CVE-2026-56882
35Monitor
In Cellular Modem, there is a possible information disclosure due to a logic error in the code.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Info leak
google · androidSep 15, 2026
CVE-2026-56914
33Monitor
In multiple locations, there is a possible use-after-free due to improper locking.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
google · androidSep 15, 2026
CVE-2026-56920
35Monitor
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
google · androidSep 15, 2026
CVE-2026-56941
33Monitor
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
google · androidSep 15, 2026
CVE-2026-56942
35Monitor
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
google · androidSep 15, 2026