| | CVE-2026-41842 |  VMware | high | 7.5 | 0.4%
| | Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41841 | VMware | medium | 5.9 | 0.3%
| | Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving … | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41840 | VMware | medium | 5.9 | 0.2%
| | Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multip… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41839 | VMware | medium | 4.2 | 0.2%
| | A WebFlux application with a compromised subdomain (for example, compromised via cross-site scriptin… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41838 | VMware | medium | 4.8 | 0.2%
| | IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, w… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41007 | VMware | high | 7.5 | 0.3%
| | Spring HATEOAS maintains an unbounded static cache of StringLinkRelation instances keyed on attacker… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-41006 | VMware | high | 7.5 | 0.3%
| | Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JS… | Jun 9, 2026 | Jul 23, 2026 |
| | CVE-2026-46315 |  Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in the Linux kernel's `io_uring` subsystem, specifically within the `IORING_OP_WAIT… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46317 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's KVM (Kernel-based Virtual Machine) for arm64 architectures. A… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46321 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel. A local attacker with access to the tun/tap device can exploit… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46319 | Red Hat | high | 7.0 | — | | A flaw was found in the Linux kernel. A race condition in the `act_ct` module, specifically during t… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46324 | Red Hat | medium | 7.0 | — | | No description is available for this CVE. | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46316 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) for ARM64, specifically wi… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46318 | Red Hat | low | 5.5 | — | | A flaw was found in the Linux kernel's hugetlbfs component. An issue in the `mmap_prepare` stage inc… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46320 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel's tap driver. This vulnerability occurs in the `tap_get_user_xd… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46322 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel's `tun` driver. This vulnerability occurs when the `build_skb()… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46327 | Red Hat | low | 5.5 | — | | A flaw was found in the Linux kernel's device mapper (dm) component. The `dm_blk_report_zones` funct… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46332 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's Greybus subsystem, specifically in the `gb-beagleplay` driver… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46326 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel, specifically within the `iio: pressure: mprls0025pa` driver. T… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-52906 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's 9p filesystem. When mounting, access mode flags were incorrec… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46330 | Red Hat | high | 7.0 | — | | A flaw was found in the Linux kernel's TCP User-Level Protocol (ULP) support for SMC. This vulnerabi… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46328 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's AppArmor security module. The system's rlimit (resource limit… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-52907 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel, specifically within the `media: rockchip: rkcif` component. Th… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46325 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically wi… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-52904 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's `drm/nouveau` component. This issue arises during device init… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-52905 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's Data Access MONitor (DAMON) core. The `damon_start()` functio… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-46329 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel's erofs filesystem. This vulnerability occurs due to improper h… | Jun 9, 2026 | Jun 9, 2026 |
| | CVE-2026-49975 |  Apache | high | 7.5 | 28.0%
| | Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to … | Jun 8, 2026 | Aug 19, 2026 |
| | CVE-2026-48913 | Apache | high | 7.3 | 0.5%
| | Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already ex… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-44631 | Apache | critical | 9.8 | 0.5%
| | Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configur… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-44186 | Apache | high | 7.3 | 0.6%
| | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in … | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-44185 | Apache | high | 7.3 | 0.7%
| | Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker contr… | Jun 8, 2026 | Sep 2, 2026 |
| | CVE-2026-44119 | Apache | medium | 5.5 | 0.2%
| | Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .h… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-43951 | Apache | medium | 6.5 | 0.5%
| | Out-of-bounds Read vulnerability in Apache HTTP Server with mod_headers and mod_mime and multiple re… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-42536 | Apache | high | 7.5 | 1.0%
| | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with mod_xml2enc, xml2StartParse, and… | Jun 8, 2026 | Sep 2, 2026 |
| | CVE-2026-42535 | Apache | critical | 9.1 | 0.5%
| | A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to d… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-34356 | Apache | high | 7.5 | 0.7%
| | Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and Pr… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-34355 | Apache | high | 7.5 | 1.2%
| | A buffer overflow in mod_proxy_html in Apache HTTP Server 2.4.67 and earlier allows an attack by an … | Jun 8, 2026 | Sep 2, 2026 |
| | CVE-2026-29170 | Apache | medium | 6.1 | 0.5%
| | A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apa… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-29167 | Apache | critical | 9.8 | 0.7%
| | Use After Free vulnerability in Apache HTTP Server with mod_ldap in per-directory configuration
Thi… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-47430 | Apache | high | 7.5 | 0.7%
| | ## Summary
The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WK… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-50751 |  Check Point | medium | — | 82.6%
| ⚠ KEV | A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 … | Jun 8, 2026 | Aug 4, 2026 |
| | CVE-2026-50752 | Check Point | high | 7.4 | 0.0%
| | A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an una… | Jun 8, 2026 | Jun 9, 2026 |
| | CVE-2026-41724 | VMware | high | 8.0 | 0.3%
| | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-41723 | VMware | high | 8.0 | 0.4%
| | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-41722 | VMware | high | 8.0 | 0.3%
| | VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A m… | Jun 8, 2026 | Jul 23, 2026 |
| | CVE-2026-11569 | Red Hat | medium | 5.4 | 0.0%
| | A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing a… | Jun 8, 2026 | Jun 8, 2026 |
| | CVE-2026-11577 | Red Hat | high | 7.2 | — | | A flaw was found in Keycloak. A limited administrator can exploit an improper access control vulnera… | Jun 8, 2026 | Jun 8, 2026 |
| | CVE-2025-71315 | Red Hat | low | 5.5 | — | | No description is available for this CVE. | Jun 8, 2026 | Jun 8, 2026 |
| | CVE-2026-46275 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's Bluetooth hci_uart component. Lifecycle management issues, in… | Jun 8, 2026 | Jun 8, 2026 |