| CVE-2026-121685CVE-2026-121685 FrodoBots FrodoBots EarthRover Mini+ firmware Versions & vendor guidance → |
Not in downloaded KEV |
Unknown |
| CVE-2026-121668Azure Confidential Clean Rooms Tampering Vulnerability Microsoft Azure Confidential Clean Room Versions & vendor guidance → |
Not in downloaded KEV |
7.7High |
| CVE-2026-121663Visual Studio Code Security Feature Bypass Vulnerability Microsoft Visual Studio Code Versions & vendor guidance → |
Not in downloaded KEV |
8.8High |
| CVE-2026-121662Visual Studio Code Remote Code Execution Vulnerability Microsoft Visual Studio Code Versions & vendor guidance → |
Not in downloaded KEV |
8.6High |
| CVE-2026-121520Malicious client could set xattr value outside of BuildKit state directory Moby BuildKit Reported fix guidance → |
Not in downloaded KEV |
4.5Medium |
| CVE-2026-120831Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat OpenShift Container Platform 4, Red Hat Red Hat OpenShift Container Platform 5 Reported workaround → |
Not in downloaded KEV |
6.5Medium |
| CVE-2026-120830Libslirp: libslirp: out-of-bounds heap read in icmp_forward_error() leading to information disclosure Red Hat Red Hat Enterprise Linux 10, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9, Red Hat Red Hat OpenShift Container Platform 4, Red Hat Red Hat OpenShift Container Platform 5 Reported workaround → |
Not in downloaded KEV |
7.4High |
| CVE-2026-120796.NET Denial of Service Vulnerability Microsoft .NET 11.0 installed on Linux, Microsoft .NET 11.0 installed on Mac OS, Microsoft .NET 11.0 installed on Windows, Microsoft System.Text.Json Versions & vendor guidance → |
Not in downloaded KEV |
5.3Medium |
| CVE-2026-120792Aspire Information Disclosure Vulnerability Microsoft Aspire.Cli Versions & vendor guidance → |
Not in downloaded KEV |
7.3High |
| CVE-2026-120789Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV |
8.8High |
| CVE-2026-120788Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV |
8.8High |
| CVE-2026-120786Microsoft Office Excel Remote Code Execution Vulnerability Microsoft Microsoft 365 Apps for Enterprise, Microsoft Microsoft Office 365 for Mac, Microsoft Microsoft Office LTSC 2021, Microsoft Microsoft Office LTSC 2024, Microsoft Microsoft Office LTSC for Mac 2021, Microsoft Microsoft Office LTSC for Mac 2024, Microsoft Office Online Server Versions & vendor guidance → |
Not in downloaded KEV |
8.8High |
| CVE-2026-120783Azure DevOps Server Elevation of Privilege Vulnerability Microsoft Azure DevOps Server 2025 Versions & vendor guidance → |
Not in downloaded KEV |
6.4Medium |
| CVE-2026-120778Aspire Elevation of Privilege Vulnerability Microsoft Aspire.Cli Versions & vendor guidance → |
Not in downloaded KEV |
7.3High |
| CVE-2026-120758NULL Pointer Dereference in H5HL_unprotect via Corrupted File The HDF Group HDF5 Versions & vendor guidance → |
Not in downloaded KEV |
5.4Medium |
| CVE-2026-120756Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize The HDF Group HDF5 Versions & vendor guidance → |
Not in downloaded KEV |
1.9Low |
| CVE-2026-120755Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter The HDF Group Szip Filter Versions & vendor guidance → |
Not in downloaded KEV |
4.7Medium |
| CVE-2026-120754Uninitialized Heap Memory Disclosure via Truncated Chunk in HDF5 Scale-Offset Filter The HDF Group Scale-Offset Filter Versions & vendor guidance → |
Not in downloaded KEV |
1.9Low |
| CVE-2026-120689Uncontrolled Recursion in HDF5 H5B__iterate_helper() via Crafted File The HDF Group HDF5 Versions & vendor guidance → |
Not in downloaded KEV |
4.3Medium |
| CVE-2026-120651CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
7.5High |
| CVE-2026-120650CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
6.5Medium |
| CVE-2026-120648CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
6.1Medium |
| CVE-2026-120647CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
9.8Critical |
| CVE-2026-120645CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
7.5High |
| CVE-2026-120644CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values Product details not yet enriched Reported fix guidance → |
Not in downloaded KEV |
9.1Critical |