Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Adobe Acrobat and Reader Prototype Pollution Vulnerability CVE-2026-34621 | HighExploited | 7.2% | 11 Apr, 2026 | |
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability CVE-2026-34486 | HighExploited | 98.5% | 09 Apr, 2026 | |
Apache ActiveMQ Improper Input Validation Vulnerability CVE-2026-34197 | HighExploited | 98.3% | 07 Apr, 2026 | |
Google Dawn Use-After-Free Vulnerability CVE-2026-5281 | HighExploited | 13.5% | 01 Apr, 2026 | |
TrueConf Client Download of Code Without Integrity Check Vulnerability CVE-2026-3502 | HighExploited | 5.8% | 30 Mar, 2026 | |
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability CVE-2026-3910 | HighExploited | 2.7% | 13 Mar, 2026 | |
Google Skia Out-of-Bounds Write Vulnerability CVE-2026-3909 | HighExploited | 2.3% | 13 Mar, 2026 | |
Qualcomm Multiple Chipsets Memory Corruption Vulnerability CVE-2026-21385 | HighExploited | 1.3% | 02 Mar, 2026 | |
Broadcom VMware Aria Operations Command Injection Vulnerability CVE-2026-22719 | HighExploited | 18.3% | 25 Feb, 2026 | |
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-20133 | HighExploited | 31.5% | 25 Feb, 2026 | |
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20128 | HighExploited | 7.3% | 25 Feb, 2026 | |
Google Chromium CSS Use-After-Free Vulnerability CVE-2026-2441 | HighExploited | 55.0% | 13 Feb, 2026 | |
Soliton Systems K.K FileZen OS Command Injection Vulnerability CVE-2026-25108 | HighExploited | 5.2% | 13 Feb, 2026 | |
Apple Multiple Buffer Overflow Vulnerability CVE-2026-20700 | HighExploited | 1.7% | 11 Feb, 2026 | |
Microsoft Windows Improper Privilege Management Vulnerability CVE-2026-21533 | HighExploited | 4.2% | 10 Feb, 2026 | |
Microsoft Windows Type Confusion Vulnerability CVE-2026-21519 | HighExploited | 2.5% | 10 Feb, 2026 | |
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability CVE-2026-21514 | HighExploited | 1.6% | 10 Feb, 2026 | |
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability CVE-2026-21513 | HighExploited | 15.9% | 10 Feb, 2026 | |
Microsoft Windows Shell Protection Mechanism Failure Vulnerability CVE-2026-21510 | HighExploited | 61.2% | 10 Feb, 2026 | |
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability CVE-2026-1603 | HighExploited | 88.3% | 10 Feb, 2026 | |
Notepad++ Download of Code Without Integrity Check Vulnerability CVE-2025-15556 | HighExploited | 1.8% | 03 Feb, 2026 | |
Microsoft Office Security Feature Bypass Vulnerability CVE-2026-21509 | HighExploited | 70.8% | 26 Jan, 2026 | |
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability CVE-2025-68645 | HighExploited | 48.9% | 22 Dec, 2025 | |
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability CVE-2025-14847 | HighExploited | 83.2% | 19 Dec, 2025 | |
Apple Multiple Products Use-After-Free WebKit Vulnerability CVE-2025-43529 | HighExploited | 25.7% | 17 Dec, 2025 | |
Apple Multiple Products Improper Locking Vulnerability CVE-2025-43510 | HighExploited | 0.4% | 12 Dec, 2025 | |
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability CVE-2025-14611 | HighExploited | 53.3% | 12 Dec, 2025 | |
Google Chromium Out of Bounds Memory Access Vulnerability CVE-2025-14174 | HighExploited | 55.3% | 12 Dec, 2025 | |
Gogs Path Traversal Vulnerability CVE-2025-8110 | HighExploited | 85.2% | 10 Dec, 2025 | |
Microsoft Windows Use After Free Vulnerability CVE-2025-62221 | HighExploited | 2.5% | 09 Dec, 2025 | |
Android Framework Privilege Escalation Vulnerability CVE-2025-48572 | HighExploited | 0.3% | 08 Dec, 2025 | |
Fortinet FortiWeb OS Command Injection Vulnerability CVE-2025-58034 | HighExploited | 54.7% | 18 Nov, 2025 | |
Google Chromium V8 Type Confusion Vulnerability CVE-2025-13223 | HighExploited | 4.9% | 17 Nov, 2025 | |
Microsoft Windows Race Condition Vulnerability CVE-2025-62215 | HighExploited | 4.5% | 11 Nov, 2025 | |
Microsoft Windows Link Following Vulnerability CVE-2025-60710 | HighExploited | 4.6% | 11 Nov, 2025 | |
Sangoma FreePBX OS Command Injection Vulnerability CVE-2025-64328 | HighExploited | 84.6% | 07 Nov, 2025 | |
Apple Multiple products Use-After-Free Vulnerability CVE-2023-43000 | HighExploited | 4.0% | 05 Nov, 2025 | |
Microsoft Windows Improper Access Control Vulnerability CVE-2025-59230 | HighExploited | 2.7% | 14 Oct, 2025 | |
Microsoft Windows Untrusted Pointer Dereference Vulnerability CVE-2025-24990 | HighExploited | 6.4% | 14 Oct, 2025 | |
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 | HighExploited | 95.9% | 12 Oct, 2025 | |
Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability CVE-2025-11371 | HighExploited | 92.1% | 09 Oct, 2025 | |
Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability CVE-2025-41244 | HighExploited | 8.6% | 29 Sep, 2025 | |
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability CVE-2025-20362 | HighExploited | 87.1% | 25 Sep, 2025 | |
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability CVE-2025-20352 | HighExploited | 41.5% | 24 Sep, 2025 | |
Android Runtime Use-After-Free Vulnerability CVE-2025-48543 | HighExploited | 0.6% | 04 Sep, 2025 | |
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability CVE-2025-9377 | HighExploited | 37.7% | 29 Aug, 2025 | |
RARLAB WinRAR Path Traversal Vulnerability CVE-2025-8088 | HighExploited | 94.5% | 08 Aug, 2025 | |
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability CVE-2025-6204 | HighExploited | 79.6% | 04 Aug, 2025 | |
Apple Multiple Products Buffer Overflow Vulnerability CVE-2025-31277 | HighExploited | 1.7% | 30 Jul, 2025 | |
Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability CVE-2025-38352 | HighExploited | 1.4% | 22 Jul, 2025 |