Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
11,153 results · page 6 of 224
Sep 15, 2026In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation.CVE-2026-56974 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In Start of AudioRtpPayloadEncoderNode.cpp, there is a possible out-of-bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible escalation of privilege due to a logic error in the code.CVE-2026-56973 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.CVE-2026-56972 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to a missing permission check.CVE-2026-56970 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.CVE-2026-56967 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible use-after-free due to a race condition.CVE-2026-56964 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.4
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible use-after-free due to a logic error in the code.CVE-2026-56960 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check.CVE-2026-56958 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 5.5
In gf_algo_get_cached_dump_data of gf_algo.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation.CVE-2026-56950 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 4.4
In validate_ns_buf of mbu_class.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In VPU, there is a possible out-of-bounds write due to a confused deputy.CVE-2026-56945 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.8
In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check.CVE-2026-56942 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code.CVE-2026-56941 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Trusted Execution Environment, there is a possible memory corruption due to improper input validation.CVE-2026-56932 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In Trusted Execution Environment, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition.CVE-2026-56923 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.4
In handle_unmap_req of tipc_virtio_dev.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In CPM, there is a possible permission bypass due to a confused deputy.CVE-2026-56922 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code.CVE-2026-56920 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition.CVE-2026-56915 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.4
In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible use-after-free due to improper locking.CVE-2026-56914 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In VPU, there is a possible shared memory overwrite due to improper input validation.CVE-2026-56907 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check.CVE-2026-56892 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.2
In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to an integer overflow.CVE-2026-56889 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to side channel information disclosure.CVE-2026-56888 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.2
In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Cellular Modem, there is a possible information disclosure due to a logic error in the code.CVE-2026-56882 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In Cellular Modem, there is a possible information disclosure due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code.CVE-2026-56881 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In enable_segment of remap.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy.CVE-2026-56879 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.CVE-2026-55366 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check.CVE-2026-55365 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple functions of remap.c, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to a logic error in the code.CVE-2026-55359 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.8
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In VPU, there is a possible out-of-bounds write due to an integer overflow.CVE-2026-55351 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.8
In VPU, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check.CVE-2026-55343 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8
In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible out-of-bounds write due to improper input validation.CVE-2026-55332 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check.CVE-2026-55331 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow.CVE-2026-55323 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.8
In gf_base_update_finger_base of gf_base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible use-after-free due to a race condition.CVE-2026-55318 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In printf of printf.c, there is a possible out-of-bounds write due to improper input validation.CVE-2026-55317 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Cellular Modem, there is a possible denial of service due to improper input validation.CVE-2026-55306 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.5
In Cellular Modem, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code.CVE-2026-55304 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to a logic error in the code.CVE-2026-55302 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check.CVE-2026-55301 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow.CVE-2026-0200 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.8
In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation.CVE-2026-0199 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 7.8
In gf_ta_test_set_config of gf_ta_test.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In VPU, there is a possible information dislclosure due to a logic error in the code.CVE-2026-0197 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 4.4
In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In multiple locations, there is a possible permission bypass due to an integer overflow.CVE-2026-0194 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Bootloader, there is a possible escalation of privilege due to a missing permission check.CVE-2026-0192 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code.CVE-2026-0189 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comHigh 8.4
In ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code.CVE-2026-0187 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code.CVE-2026-0186 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In CPM, there is a possible information disclosure due to a confused deputy.CVE-2026-0183 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 4.4
In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In Bootloader, there is a possible permission bypass due to a missing permission check.CVE-2026-0179 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 6.7
In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 15, 2026In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check.CVE-2026-0177 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comMedium 4.4
In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.