Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2019-14778 | high | 7.8 | No | The mkv::virtual_segment_c::seek method of demux/mkv/virtual_segment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 2026-11-02 |
| CVE-2019-14777 | high | 7.8 | No | The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 2026-11-02 |
| CVE-2019-14776 | high | 7.8 | No | A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file. | 2026-11-02 |
| CVE-2019-14534 | medium | 5.5 | No | In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to a... | 2026-11-02 |
| CVE-2019-14535 | high | 7.8 | No | A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be... | 2026-11-02 |
| CVE-2019-14533 | high | 7.8 | No | The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free. | 2026-11-02 |
| CVE-2019-14498 | high | 7.8 | No | A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1. As a result, an FPE can be trigge... | 2026-11-02 |
| CVE-2019-14438 | high | 7.8 | No | A heap-based buffer over-read in xiph_PackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to... | 2026-11-02 |
| CVE-2019-14437 | high | 7.8 | No | The xiph_SplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly. As a resul... | 2026-11-02 |
| CVE-2019-12874 | critical | 9.8 | No | An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska... | 2026-11-02 |
| CVE-2019-12439 | high | 7.8 | No | bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations (related t... | 2026-11-02 |
| CVE-2019-10072 | high | 7.5 | No | The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1... | 2026-11-02 |
| CVE-2019-0232 | high | 8.1 | No | When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0... | 2026-11-02 |
| CVE-2019-0221 | medium | 6.1 | No | The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escapi... | 2026-11-02 |
| CVE-2018-12209 | low | 3.3 | No | Insufficient access control in User Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10... | 2026-11-02 |
| CVE-2017-5647 | high | 7.5 | No | A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.7... | 2026-11-02 |
| CVE-2017-13745 | high | 7.5 | No | There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to a remote deni... | 2026-11-02 |
| CVE-2026-20799 | high | 7.0 | No | Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an esca... | 2026-11-02 |
| CVE-2026-20903 | medium | 6.7 | No | Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation... | 2026-11-02 |
| CVE-2026-21387 | medium | 6.5 | No | Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege... | 2026-11-02 |