SEARCHSearch the cs-graph

CVE-#### · MITRE T#### · CWE-#### · ATLAS AML.T#### · D3-XX · compliance article references. Authored by Adam Lundqvist.

48 results for “kev-cve-2026-1603” · 0.89 s · cached

Facets · 1 entity types

48 CVE
CVE-2026-10802CVE

CVE-2026-10802

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL …

CVSS 4.3EPSS 0.3%
Match for kev-cve-2026-1603
CVE-2026-31612CVE

CVE-2026-31612

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate EaNameLength in smb2_get_ea() smb2_get_ea() reads ea_req->EaNameLength from the client request and passes it dire…

CVSS 7.5EPSS 0.6%linux
Match for kev-cve-2026-1603
CVE-2026-31590CVE

CVE-2026-31590

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION Drop the WARN in sev_pin_memory() on npages overflowing an in…

CVSS 5.5EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-1453CVE

CVE-2026-1453

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can gran…

CVSS 9.8EPSS 0.5%
Match for kev-cve-2026-1603
CVE-2026-46197CVE

CVE-2026-46197

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: validate SVM ioctl nattr against buffer size Validate nattr field against the buffer size, preventing out-of-bounds b…

CVSS 7.8EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-6303CVE

CVE-2026-6303

Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 8.8EPSS 0.4%
Match for kev-cve-2026-1603
CVE-2026-9076CVE

CVE-2026-9076

Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in…

CVSS 7.5EPSS 1.0%openssl
Match for kev-cve-2026-1603
CVE-2026-43304CVE

CVE-2026-43304

In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN When decoding the key, verify that the key material would fit into a fixed-size buff…

CVSS 9.8EPSS 0.7%
Match for kev-cve-2026-1603
CVE-2026-9642CVE

CVE-2026-9642

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

EPSS 0.1%
Match for kev-cve-2026-1603
CVE-2026-46207CVE

CVE-2026-46207

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, virtio_transport_build_skb() goes through …

CVSS 5.5EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-46316CVE

CVE-2026-46316

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry vgic_its_invalidate_cache() walks the per-IT…

CVSS 9.3EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-3605CVE

CVE-2026-3605

An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting in denial-of-service. This vulne…

CVSS 8.1EPSS 0.5%hashicorp
Match for kev-cve-2026-1603
CVE-2026-23204CVE

CVE-2026-23204

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use s…

CVSS 7.1EPSS 0.1%linux
Match for kev-cve-2026-1603
CVE-2026-26210CVE

CVE-2026-26210

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authe…

CVSS 9.8EPSS 1.0%kvcache-ai
Match for kev-cve-2026-1603
CVE-2026-46164CVE

CVE-2026-46164

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info_sub_group() error path When kobject_init_and_add() fails, the call chain is: create_…

CVSS 7.0EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-47316CVE

CVE-2026-47316

Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2…

CVSS 5.5EPSS 0.3%samsung
Match for kev-cve-2026-1603
CVE-2026-46147CVE

CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() Two bugs exist in the vCPU initialisation path: 1. If a …

CVSS 5.5EPSS 0.2%linux
Match for kev-cve-2026-1603
CVE-2026-46222CVE

CVE-2026-46222

In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads The pads missed checks for connected devices which may a null deref…

CVSS 5.5EPSS 0.1%linux
Match for kev-cve-2026-1603
CVE-2026-5426CVE

CVE-2026-5426

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remot…

CVSS 9.1EPSS 0.8%
Match for kev-cve-2026-1603
CVE-2026-4366CVE

CVE-2026-4366

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows a…

CVSS 5.8EPSS 0.4%redhat
Match for kev-cve-2026-1603
Hybrid search: an exact-match keyword pass (title + MITRE-ID + body-head) fused with Vertex AI semantic similarity (text-embedding-005, cosine vector search over the corpus) via reciprocal-rank fusion — exact IDs stay pinned, related concepts surface by meaning. Curated by Adam Lundqvist, Founder at SQUR.