Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 807 of 1013.
- CVE-2026-21386 Private channel enumeration via /mute slash command
- CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption
- CVE-2026-21384 Out-of-bounds Write in Camera Driver
- CVE-2026-21383 Reusing a Nonce, Key Pair in Encryption in HLOS
- CVE-2026-21382 Buffer Copy Without Checking Size of Input in Power Management IC
- CVE-2026-21381 Buffer Over-read in WLAN Firmware
- CVE-2026-21380 Use After Free in DSP Service
- CVE-2026-2138 Tenda TX9 SetStaticRouteCfg sub_42D03C buffer overflow
- CVE-2026-21379 Buffer Over-read in Windows Compute
- CVE-2026-21378 Buffer Over-read in Camera
- CVE-2026-21376 Buffer Over-read in Camera
- CVE-2026-21375 Buffer Over-read in Camera
- CVE-2026-21374 Buffer Over-read in Camera
- CVE-2026-21373 Buffer Over-read in Camera
- CVE-2026-21372 Heap-Based Buffer Overflow in Power Management IC
- CVE-2026-21371 Buffer Over-read in WinBlast Driver
- CVE-2026-21370 Out-of-bounds Write in Camera Driver
- CVE-2026-2137 Tenda TX3 SetIpMacBind buffer overflow
- CVE-2026-21369 Out-of-bounds Write in Camera Driver
- CVE-2026-21368 Out-of-bounds Write in Camera Driver
- CVE-2026-21367 Buffer Over-read in WLAN Firmware
- CVE-2026-21366 Integer Overflow or Wraparound in Data Network Stack & Connectivity
- CVE-2026-21365 Substance3D - Painter | Out-of-bounds Read (CWE-125)
- CVE-2026-21364 Substance3D - Painter | NULL Pointer Dereference (CWE-476)
- CVE-2026-21363 Substance3D - Painter | NULL Pointer Dereference (CWE-476)
- CVE-2026-21362 Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2026-21361 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21360 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-2136 projectworlds Online Food Ordering System view-ticket.php sql injection
- CVE-2026-21359 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21358 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21357 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21355 DNG SDK | Out-of-bounds Read (CWE-125)
- CVE-2026-21354 DNG SDK | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-21353 DNG SDK | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-21352 DNG SDK | Out-of-bounds Write (CWE-787)
- CVE-2026-21351 After Effects | Use After Free (CWE-416)
- CVE-2026-21350 After Effects | NULL Pointer Dereference (CWE-476)
- CVE-2026-2135 UTT HiPER 810 formPdbUpConfig sub_43F020 command injection
- CVE-2026-21349 Lightroom Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-21348 Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2026-21347 Bridge | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-21346 Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-21345 Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2026-21344 Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2026-21343 Substance3D - Stager | Out-of-bounds Read (CWE-125)
- CVE-2026-21342 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2026-21341 Substance3D - Stager | Out-of-bounds Write (CWE-787)
- CVE-2026-21340 Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2026-2134 PHPGurukul Hospital Management System manage-doctors.php sql injection
- CVE-2026-21339 Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2026-21338 Substance3D - Designer | NULL Pointer Dereference (CWE-476)
- CVE-2026-21337 Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2026-21336 Substance3D - Designer | NULL Pointer Dereference (CWE-476)
- CVE-2026-21335 Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2026-21334 Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2026-21333 Illustrator | Untrusted Search Path (CWE-426)
- CVE-2026-21332 InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2026-21331 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-21330 After Effects | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)
- CVE-2026-2133 code-projects Online Music Site AdminUpdateCategory.php unrestricted upload
- CVE-2026-21329 After Effects | Use After Free (CWE-416)
- CVE-2026-21328 After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-21327 After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-21326 After Effects | Use After Free (CWE-416)
- CVE-2026-21325 After Effects | Out-of-bounds Read (CWE-125)
- CVE-2026-21324 After Effects | Out-of-bounds Read (CWE-125)
- CVE-2026-21323 After Effects | Use After Free (CWE-416)
- CVE-2026-21322 After Effects | Out-of-bounds Read (CWE-125)
- CVE-2026-21321 After Effects | Integer Overflow or Wraparound (CWE-190)
- CVE-2026-21320 After Effects | Use After Free (CWE-416)
- CVE-2026-2132 code-projects Online Music Site AdminUpdateCategory.php sql injection
- CVE-2026-21319 After Effects | Out-of-bounds Read (CWE-125)
- CVE-2026-21318 After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-21317 Audition | Out-of-bounds Read (CWE-125)
- CVE-2026-21316 Audition | Access of Memory Location After End of Buffer (CWE-788)
- CVE-2026-21315 Audition | Out-of-bounds Read (CWE-125)
- CVE-2026-21314 Audition | Out-of-bounds Read (CWE-125)
- CVE-2026-21313 Audition | Out-of-bounds Read (CWE-125)
- CVE-2026-21312 Audition | Out-of-bounds Write (CWE-787)
- CVE-2026-21311 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21310 Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-2131 XixianLiang HarmonyOS-mcp-server input_text os command injection
- CVE-2026-21309 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21308 Substance3D - Designer | Out-of-bounds Read (CWE-125)
- CVE-2026-21307 Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2026-21306 Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2026-21305 Substance3D - Painter | Out-of-bounds Write (CWE-787)
- CVE-2026-21304 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21303 Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2026-21302 Substance3D - Modeler | Out-of-bounds Read (CWE-125)
- CVE-2026-21301 Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
- CVE-2026-21300 Substance3D - Modeler | NULL Pointer Dereference (CWE-476)
- CVE-2026-2130 BurtTheCoder mcp-maigret search_username index.ts command injection
- CVE-2026-21299 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-21298 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-21297 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21296 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21295 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- CVE-2026-21294 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)