THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
The complete recent NVD stream, including unscored entries. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,974 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-100137 — CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application den…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100137Read original ↗ (opens in a new tab) - NVD
CVE-2026-100136 — CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application d…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVE-2026-100136Read original ↗ (opens in a new tab) - NVD
CVE-2026-100135 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100135Read original ↗ (opens in a new tab) - NVD
CVE-2026-100125 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
Medium · CVSS 3.1 5.9 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-100125Read original ↗ (opens in a new tab) - NVD
CVE-2026-100124 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100124Read original ↗ (opens in a new tab) - NVD
CVE-2026-100123 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100123Read original ↗ (opens in a new tab) - NVD
CVE-2026-100122 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100122Read original ↗ (opens in a new tab) - NVD
CVE-2026-100121 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100121Read original ↗ (opens in a new tab) - NVD
CVE-2026-100120 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100120Read original ↗ (opens in a new tab) - NVD
CVE-2026-100119 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100119Read original ↗ (opens in a new tab) - NVD
CVE-2026-100118 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100118Read original ↗ (opens in a new tab) - NVD
CVE-2026-100117 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100117Read original ↗ (opens in a new tab) - NVD
CVE-2026-100116 — CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feat…
Medium · CVSS 3.1 5.9 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
CVE-2026-100116Read original ↗ (opens in a new tab) - NVD
CVE-2026-100115 — CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypa…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100115Read original ↗ (opens in a new tab) - NVD
CVE-2026-100114 — CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypa…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100114Read original ↗ (opens in a new tab) - NVD
CVE-2026-100113 — CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature by…
High · CVSS 3.1 7.5 · Assessor: [email protected]
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
CVE-2026-100113Read original ↗ (opens in a new tab) - NVD
CVE-2026-97312 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-97312Read original ↗ (opens in a new tab) - NVD
CVE-2026-96956 — Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
High · CVSS 3.1 8.0 · Assessor: [email protected]
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-96956Read original ↗ (opens in a new tab) - NVD
CVE-2026-96523 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-96523Read original ↗ (opens in a new tab) - NVD
CVE-2026-96522 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-96522Read original ↗ (opens in a new tab) - NVD
CVE-2026-96521 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-96521Read original ↗ (opens in a new tab) - NVD
CVE-2026-95696 — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of se…
High · CVSS 3.1 7.5 · Assessor: [email protected]
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.
CVE-2026-95696Read original ↗ (opens in a new tab) - NVD
CVE-2026-95695 — IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security rest…
Critical · CVSS 3.1 9.1 · Assessor: [email protected]
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-95695Read original ↗ (opens in a new tab) - NVD
CVE-2026-95641 — Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the c…
High · CVSS 3.1 7.8 · Assessor: [email protected]
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-95641Read original ↗ (opens in a new tab) - NVD
CVE-2026-95640 — Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-serv…
Medium · CVSS 3.1 5.5 · Assessor: [email protected]
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-95640Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.