CVE's Trending

CVE-2025-38617

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread...

CVSS 4.7 MIDDEL EPSS 0.0% KEV: Nee Hype: 31

CVE-2024-30085

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 7.8 HOOG EPSS 52.3% KEV: Nee Hype: 22

CVE-2025-43529

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, vis...

CVSS 8.8 HOOG EPSS 0.1% KEV: Ja Hype: 11

CVE-2025-36911

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no addi...

CVSS 7.1 HOOG EPSS 0.0% KEV: Nee Hype: 9

CVE-2025-25257

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, ...

CVSS 9.8 KRITIEK EPSS 37.8% KEV: Ja Hype: 8

CVE-2025-54136

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file...

CVSS 7.2 HOOG EPSS 0.1% KEV: Nee Hype: 8

CVE-2025-14500

IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authenti...

CVSS 9.8 KRITIEK EPSS 1.3% KEV: Nee Hype: 4

CVE-2025-59489

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location. If an application was built w...

CVSS 7.4 HOOG EPSS 0.0% KEV: Nee Hype: 3

CVE-2025-70341

Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.

CVSS 7.8 HOOG EPSS - KEV: Nee Hype: 2

CVE-2025-59059

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

CVSS 9.8 KRITIEK EPSS 0.3% KEV: Nee Hype: 1