Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-43712 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash MEDIUM 6.5 N/A cvelistv5 2026-08-25
cve-2026-43707 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash MEDIUM 6.5 N/A cvelistv5 2026-08-25
cve-2026-43705 SUSE CVE CVE-2026-43705 HIGH 8.8 N/A cvelistv5 2026-08-18
cve-2026-43701 webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox HIGH 7.1 N/A cvelistv5 2026-08-25
cve-2026-43699 SUSE CVE CVE-2026-43699 MEDIUM 6.5 N/A cvelistv5 2026-08-18
cve-2026-43676 SUSE CVE CVE-2026-43676 MEDIUM 6.5 N/A cvelistv5 2026-08-18
cve-2026-43663 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash MEDIUM 6.5 N/A cvelistv5 2026-08-25
cve-2026-43660 A validation issue was addressed with improved logic HIGH 7.5 N/A cvelistv5 2026-10-26
cve-2026-43658 The issue was addressed with improved memory handling HIGH 7.5 N/A cvelistv5 2026-10-26
cve-2026-42792 Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote ... MEDIUM 6.3 N/A cvelistv5 2026-10-24
cve-2026-42769 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate MEDIUM 5.9 N/A cvelistv5 2026-09-01
cve-2026-42768 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() MEDIUM 6.3 N/A cvelistv5 2026-09-01
cve-2026-42496 SUSE CVE CVE-2026-42496 CRITICAL 9.1 N/A cvelistv5 2026-07-15
cve-2026-42257 SUSE CVE CVE-2026-42257 CRITICAL 9.8 N/A cvelistv5 2026-08-06
cve-2026-41854 spring-framework: Spring Framework: Server-Side Request Forgery via incorrect host parsing MEDIUM 4.2 N/A cvelistv5 2026-07-17
cve-2026-41853 Spring Framework: Spring Framework: Request smuggling vulnerability in Spring MVC and WebFlux MEDIUM 5.3 N/A cvelistv5 2026-07-24
cve-2026-41852 spring-framework: org.springframework/spring-expression: Spring Framework: SpEL vulnerability allows unintended application logic invocation LOW 3.7 N/A cvelistv5 2026-06-29
cve-2026-41851 Spring Framework: Spring Framework: Denial of Service via unbounded cache growth in SpEL evaluation MEDIUM 5.3 N/A cvelistv5 2026-07-17
cve-2026-41850 spring-framework: Spring Framework: Denial of Service via specially crafted SpEL expressions MEDIUM 5.9 N/A cvelistv5 2026-07-17
cve-2026-41849 spring-framework: Spring Framework: Denial of Service via integer overflow in SpEL MEDIUM 5.9 N/A cvelistv5 2026-07-20
cve-2026-41848 spring-framework: Spring Framework: Regular Expression Denial of Service in AntPathMatcher MEDIUM 5.9 N/A cvelistv5 2026-07-17
cve-2026-41847 Spring Framework: Spring WebFlux applications: Security bypass when using Kotlin Router DSL MEDIUM 4.8 N/A cvelistv5 2026-08-25
cve-2026-41846 Spring Framework: Spring Framework: Cross-site scripting (XSS) via user-supplied values in JSP form tags MEDIUM 6.8 N/A cvelistv5 2026-07-17
cve-2026-41845 org.springframework: Spring Framework: Cross-site scripting (XSS) via incorrect JavaScript escaping HIGH 7.1 N/A cvelistv5 2026-07-17
cve-2026-41844 Spring Framework: Spring Framework: Open Redirect via crafted link MEDIUM 4.2 N/A cvelistv5 2026-07-17
cve-2026-41843 spring-webflux: spring-webmvc: Spring Framework: Information Disclosure via Path Traversal MEDIUM 5.9 N/A cvelistv5 2026-08-05
cve-2026-41842 spring-framework: Spring Framework: Denial of Service when resolving static resources MEDIUM 5.9 N/A cvelistv5 2026-07-17
cve-2026-41841 Spring Framework: Spring MVC and WebFlux applications: Information Disclosure via static resource resolution MEDIUM 5.9 N/A cvelistv5 2026-09-25
cve-2026-41840 Spring Framework: Spring WebFlux: Denial of Service via multipart request processing MEDIUM 5.9 N/A cvelistv5 2026-08-25
cve-2026-41839 spring-framework: Spring Framework: Privilege escalation via session ID exchange in WebFlux applications MEDIUM 4.2 N/A cvelistv5 2026-07-17