Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates
3,682 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.
Incorrect Authorization in Graphics
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.
Published 2025-06-03T06:42:42.042Z. Updated 2026-02-26T18:27:39.157Z.
Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS
The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scri…
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T06:00:17.565Z. Updated 2025-06-03T15:24:55.420Z.
FancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSS
The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T06:00:17.231Z. Updated 2025-06-03T15:28:29.716Z.
Newsletter < 8.8.2 - Admin+ Stored XSS via Subscription
The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T06:00:16.525Z. Updated 2025-06-03T15:32:46.821Z.
Use After Free in Graphics
Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.
Published 2025-06-03T05:53:06.692Z. Updated 2026-02-26T18:27:39.591Z.
Use After Free in Bluetooth HOST
memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:53:05.590Z. Updated 2025-06-03T14:48:40.556Z.
Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:53:04.451Z. Updated 2025-06-03T14:49:01.250Z.
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:53:03.272Z. Updated 2026-02-26T18:27:39.903Z.
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:53:02.083Z. Updated 2026-02-26T18:27:40.213Z.
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) KEV listed. Forecast present in this snapshot.
Published 2025-06-03T05:53:00.920Z. Updated 2026-02-26T18:27:40.561Z.
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:58.605Z. Updated 2025-06-03T15:10:22.762Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:57.455Z. Updated 2025-06-03T15:11:13.353Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:55.940Z. Updated 2025-06-03T15:10:54.652Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:54.550Z. Updated 2025-06-03T14:49:32.785Z.
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:53.147Z. Updated 2025-06-03T13:30:43.914Z.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption may occur while processing the OIS packet parser.
Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:52.029Z. Updated 2025-06-03T13:31:27.718Z.
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command.
Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:50.844Z. Updated 2025-06-03T13:32:03.256Z.
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing I2C settings in Camera driver.
Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:49.688Z. Updated 2025-06-03T13:32:37.862Z.
Use After Free in Computer Vision
Memory corruption while processing IOCTL command to handle buffers associated with a session.
Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:48.537Z. Updated 2025-06-03T13:37:42.828Z.
Buffer Copy Without Checking Size of Input in Audio
Memory corruption may occur while processing voice call registration with user.
Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2025-06-03T05:52:47.377Z. Updated 2025-06-03T13:33:38.949Z.