Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

30424

Tracked CVEs

2984

Critical

377

Exploited in wild

4940

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-85046High· 8.8Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page874
2CVE-2026-58704High· 8.8In Cellular Modem, there is a possible permission bypass due to a logic error in the code373
3CVE-2026-69836Critical· 10.0Microsoft Entra ID Remote Code Execution Vulnerability267
4CVE-2026-66747Critical· 9.8Zbtlink router firmware ships an embedded remote-control implant, ENDLESSDOORS, present in every published build across the product line266
5CVE-2026-18963Critical· 9.1A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak263

This week's digest →All digests

Feed

76 matches

CVE-2026-91782Low· 3.3

1w ago

A vulnerability was detected in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null poi…

▾ Sunlitgnu · binutilsEPSS 0.13%via NVD

CVE-2026-91781Low· 3.3PoC

1w ago

A security vulnerability has been detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer derefer…

▾ Twilightgnu · binutilsEPSS 0.13%via NVD

CVE-2026-91780Low· 3.3PoC

1w ago

A weakness has been identified in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally.…

▾ Twilightgnu · binutilsEPSS 0.12%via NVD

CVE-2026-91779Low· 3.3PoC

1w ago

A security flaw has been discovered in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dere…

▾ Twilightgnu · binutilsEPSS 0.12%via NVD

CVE-2026-91752High· 7.5PoC

1w ago

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data. Attackers can craft malicious StarO…

▾ MidnightGNU · libextractorEPSS 0.41%via NVD

CVE-2026-90829Medium· 5.3PoC

1w ago

A weakness has been identified in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereferen…

▾ Twilightgnu · binutilsEPSS 0.17%via NVD

CVE-2026-90830Medium· 5.3PoC

1w ago

A security vulnerability has been detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack ne…

▾ Twilightgnu · binutilsEPSS 0.16%via NVD

CVE-2026-90831Medium· 5.3

1w ago

A vulnerability was detected in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requ…

▾ Sunlitgnu · binutilsEPSS 0.16%via NVD

CVE-2026-90828Medium· 5.3PoC

1w ago

A security flaw has been discovered in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer…

▾ Twilightgnu · binutilsEPSS 0.15%via NVD

CVE-2026-90804Medium· 4.8PoC

1w ago

A vulnerability was detected in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument…

▾ Twilightgnu · binutilsEPSS 0.14%via NVD

CVE-2026-90803Medium· 5.3PoC

1w ago

A security vulnerability has been detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads …

▾ Twilightgnu · binutilsEPSS 0.14%via NVD

CVE-2026-90802Medium· 4.4PoC

1w ago

A weakness has been identified in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has b…

▾ Twilightgnu · binutilsEPSS 0.13%via NVD

CVE-2026-90801Medium· 5.3PoC

1w ago

A security flaw has been discovered in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local…

▾ Twilightgnu · binutilsEPSS 0.16%via NVD

CVE-2026-90622Low· 3.3PoC

1w ago

A security flaw has been discovered in GNU libredwg 0.13.4

A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to …

▾ TwilightGNU · libredwgEPSS 0.16%via NVD

CVE-2026-18508Medium· 4.4

1mo ago

A flaw was found in GNU tar

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted arch…

▾ Sunlitgnu · tarEPSS 0.14%via NVD

CVE-2026-18477Medium· 4.4

1mo ago

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access …

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access …

▾ Sunlitgnu · tarEPSS 0.08%via NVD

CVE-2026-56289Medium· 5.5

2mo ago

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing t…

▾ Sunlitgnu · patchEPSS 0.17%via NVD

CVE-2026-56288Medium· 5.5

2mo ago

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) d…

▾ Sunlitgnu · patchEPSS 0.17%via NVD

CVE-2026-41992High· 7.5⚖ disputed

2mo ago

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array …

▾ Twilightgnu · gzipEPSS 0.41%via NVD

CVE-2026-56968Low· 3.7

3mo ago

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

▾ Sunlitgnu · saslEPSS 0.29%via NVD

CVE-2026-42009High· 7.5

4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not cor…

▾ Twilightgnu · gnutlsEPSS 1.3%via NVD

CVE-2026-42010High· 7.1

4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a spec…

▾ Twilightgnu · gnutlsEPSS 1.1%via NVD

CVE-2026-3833Medium· 6.5PoC

4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `perm…

▾ Twilightgnu · gnutlsEPSS 0.56%via NVD

CVE-2026-33845High· 7.5

4mo ago

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may…

▾ Twilightgnu · gnutlsEPSS 0.80%via NVD

CVE-2026-6843Medium· 5.5

5mo ago

A flaw was found in nano

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading…

▾ Sunlitgnu · nanoEPSS 0.11%via NVD

From the blog

All posts →

Sep 8, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data

A weakness has been identified in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

A security flaw has been discovered in GNU libredwg 0.13.4

A flaw was found in GNU tar

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access …

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

A flaw was found in gnutls

A flaw was found in gnutls

A flaw was found in gnutls

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read

A flaw was found in nano

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office function that sizes a variable-length stack array from attacker-controlled OLE2 stream data

A weakness has been identified in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

A vulnerability was detected in GNU Binutils 2.47

A security vulnerability has been detected in GNU Binutils 2.47

A weakness has been identified in GNU Binutils 2.47

A security flaw has been discovered in GNU Binutils 2.47

A security flaw has been discovered in GNU libredwg 0.13.4

A flaw was found in GNU tar

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access …

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution

GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory disclosure via a crafted server.

A flaw was found in gnutls

A flaw was found in gnutls

A flaw was found in gnutls

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read

A flaw was found in nano

From the blog

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

VulnSea is live