CVE Catalog
636 confirmed 0-day vulnerabilities
| CVE ID ⬍ | Vendor / Product | Weakness | CVSS ⬍ | EPSS ⬍ | Confidence ⬍ | Mentions ⬍ | Sources | Published ▼ |
|---|---|---|---|---|---|---|---|---|
|
Microsoft
Exchange
|
CWE-79
Cross-site Scripting
|
8.1
v3
|
9% |
95%
|
21 |
Bleepin…
CERT-FR
CISA-Ad…
DarkRea…
Microso…
Securit…
TheHack…
|
May 14, 2026 | |
|
Google
Chrome
|
CWE-416
Use After Free
|
8.8
v3
|
1% |
95%
|
8 |
Bleepin…
CISA-Ad…
KrebsOn…
Microso…
Securit…
TheHack…
|
Apr 01, 2026 | |
|
Qualcomm
GPU
|
CWE-190
Integer Overflow
|
7.8
v3
|
0% |
92%
|
18 |
Bleepin…
CISA-Ad…
CyberSc…
DarkRea…
TheHack…
|
Mar 02, 2026 | |
|
Cisco
Cisco Catalyst SD-WAN Manager
|
CWE-287
Improper Authentication
|
10.0
v3
|
44% |
92%
|
33 |
Bleepin…
CERT-EU
CERT-FR
CISA-Ad…
CyberSc…
DarkRea…
Securit…
Tenable…
TheHack…
|
Feb 25, 2026 | |
|
Microsoft
Office
|
CWE-807
Reliance on Untrusted Inputs
|
7.8
v3
|
5% |
92%
|
9 |
Bleepin…
CISA-Ad…
CyberSc…
Microso…
Tenable…
TheHack…
|
Feb 10, 2026 | |
|
Cisco
Cisco Unified Communications Manager
|
CWE-94
Code Injection
|
8.2
v3
|
4% |
85%
|
4 |
Bleepin…
TheHack…
|
Jan 21, 2026 | |
|
QNAP Systems Inc.
Malware Remover
|
CWE-94
Code Injection
|
8.1
v4
|
0% |
85%
|
1 |
Bleepin…
|
Jan 02, 2026 | |
|
SmarterTools
SmarterMail
|
— |
10.0
v3
|
89% |
82%
|
4 |
TheHack…
|
Dec 29, 2025 | |
|
Gogs
Gogs
|
CWE-22
Path Traversal
|
8.7
v4
|
18% |
95%
|
4 |
Bleepin…
TheHack…
|
Dec 10, 2025 | |
|
Microsoft
Windows
|
CWE-416
Use After Free
|
7.8
v3
|
2% |
92%
|
5 |
Bleepin…
Microso…
Qualys
TheHack…
|
Dec 09, 2025 | |
|
QNAP Systems Inc.
QuMagie
|
CWE-89
SQL Injection
|
9.5
v4
|
0% |
85%
|
1 |
Bleepin…
|
Nov 07, 2025 | |
|
Gladinet
CentreStack and TrioFox
|
— |
7.5
v3
|
68% |
85%
|
5 |
TheHack…
|
Oct 09, 2025 | |
|
Cisco
IOS
|
CWE-122
Heap-based Buffer Overflow
|
9.0
v3
|
6% |
85%
|
4 |
Bleepin…
CERT-EU
TheHack…
|
Sep 25, 2025 | |
|
Cisco
IOS
|
CWE-121
Stack-based Buffer Overflow
|
7.7
v3
|
4% |
79%
|
5 |
Bleepin…
CERT-EU
TheHack…
|
Sep 24, 2025 | |
|
Fortra
GoAnywhere MFT
|
CWE-77
Command Injection
|
10.0
v3
|
59% |
95%
|
5 |
TheHack…
|
Sep 18, 2025 | |
|
Google
Android
|
Memory corruption |
8.8
v3
|
0% |
88%
|
4 |
Securit…
TheHack…
|
Sep 04, 2025 | |
|
NetScaler
ADC
|
CWE-1284
Improper Validation of Integer Value
|
8.7
v4
|
0% |
85%
|
3 |
Bleepin…
CERT-EU
TheHack…
|
Aug 26, 2025 | |
|
Microsoft
Windows
|
CWE-451
User Interface (UI) Misrepresentation of Critical Information
|
4.6
v4
|
1% |
85%
|
6 |
Bleepin…
TheHack…
|
Aug 26, 2025 | |
|
Fortinet
FortiSIEM
|
CWE-78
OS Command Injection
|
9.8
v3
|
40% |
85%
|
5 |
Bleepin…
CERT-EU
Tenable…
TheHack…
|
Aug 12, 2025 | |
|
win.rar GmbH
WinRAR
|
CWE-35
Path Traversal: '.../...//'
|
8.4
v4
|
8% |
95%
|
13 |
Bleepin…
DarkRea…
TheHack…
|
Aug 08, 2025 | |
|
Microsoft
Sharepoint
|
CWE-502
Deserialization of Untrusted Data
|
9.8
v3
|
90% |
95%
|
15 |
Bleepin…
CERT-EU
Qualys
Tenable…
TheHack…
|
Jul 20, 2025 | |
|
Google
Chrome
|
Memory corruption |
8.8
v3
|
4% |
92%
|
10 |
Bleepin…
TheHack…
|
Jun 02, 2025 | |
|
SysAid
SysAid On-Prem
|
CWE-611
XML External Entity
|
9.3
v3
|
69% |
85%
|
3 |
TheHack…
|
May 07, 2025 | |
|
Apple
WebKit
|
Memory Corruption |
10.0
v3
|
0% |
95%
|
11 |
Bleepin…
TheHack…
|
Mar 11, 2025 | |
|
VMware
ESXi
|
— |
9.3
v3
|
47% |
92%
|
7 |
Bleepin…
CERT-EU
Qualys
TheHack…
|
Mar 04, 2025 |