Vulnerabilities
Summary — last 7 days
New vulnerabilities3,440▼ 1,366 vs. last week
Critical / high1,315▼ 1,446 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)692▲ 632 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (5.2) | — | — | Microsoft UsbxAI | 10/20/2026 | 10/20/2026 | A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting on an unmapped page. | |
| Awaiting Analysis | Medium (4.9) | — | — | UsbxAI | 10/20/2026 | 10/20/2026 | A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and parsing the data behind it. The walk checked that an item fitted in the descriptor only **after** it had advanced past the header and parsed the… | |
| Awaiting Analysis | Medium (4.9) | — | — | UsbxAI | 10/20/2026 | 10/20/2026 | A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX host recorded that figure and used it as the budget for walking the format, frame and frame-interval descriptors, without holding it against the configuration descriptor… |