Vulnerabilities
Summary — last 7 days
New vulnerabilities4,689▼ 611 vs. last week
Critical / high1,874▼ 1,178 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)746▲ 637 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.6% | — | Mediatek Linkit Software Development KIT | 1/3/2023 | 6/17/2026 | In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20220026; Issue ID: OSBNB00144124. | |
| Modified | Critical (9.8) | 1.5% | — | Mediatek Linkit Software Development KIT | 1/24/2022 | 6/17/2026 | In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc. |