NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-28641 In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in th... 2026-10-05 7.8 LOCAL HIGH NVD
CVE-2026-28640 In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation... 2026-10-05 7.8 LOCAL HIGH NVD
CVE-2026-28625 In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with n... 2026-10-05 7.8 LOCAL HIGH NVD
CVE-2026-105712 gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) ... 2026-10-05 3.6 LOCAL LOW NVD
CVE-2026-105326 An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that sup... 2026-10-05 2.5 LOCAL LOW NVD
CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message ... 2026-10-05 8.8 NETWORK HIGH NVD
CVE-2026-104713 Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bo... 2026-10-05 6.5 NETWORK MEDIUM NVD
CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal (j... 2026-10-05 7.5 NETWORK HIGH NVD
CVE-2026-104711 Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Struts.... 2026-10-05 9.8 NETWORK CRITICAL NVD
CVE-2026-93323 The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing ... 2026-10-05 6.8 LOCAL MEDIUM NVD
CVE-2026-93322 A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. 2026-10-05 6.9 LOCAL MEDIUM NVD
CVE-2026-93320 BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or,... 2026-10-05 6.0 LOCAL MEDIUM NVD
CVE-2026-93319 A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit... 2026-10-05 5.7 LOCAL MEDIUM NVD
CVE-2026-93318 A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the adv... 2026-10-05 7.5 NETWORK HIGH NVD
CVE-2026-93317 An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The re... 2026-10-05 5.9 NETWORK MEDIUM NVD