CVE Vulnerability Catalog

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service.

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.

In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials. A user able to edit the integration could gain access to the authentication data.

In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments. This violates data integrity and access control.

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action. This allows bypassing access control mechanisms.

In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible. Malicious code could be stored and executed in the victim's browser.

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template. This may lead to service unavailability.

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues. This violates data confidentiality.

In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed. This allows unauthorized issue submission.

In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters. This may lead to excessive resource consumption.

In JetBrains Rider before 2026.2.1 AI Assistant could auto-update third-party skills without user confirmation. This may lead to unauthorized changes in the environment.

In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible. Malicious content could be stored and displayed to other users.

In JetBrains YouTrack before version 2026.2.18991, changing article visibility settings was possible without update permission.

In JetBrains YouTrack before version 2026.2.18991, mailbox integration allowed authentication after a password reset.

In JetBrains YouTrack before version 2026.2.18991, improper access control on Gantt chart allowed edits by users with view-only access.

In JetBrains YouTrack before version 2026.2.18991, missing authorisation allowed read-only users to read project settings.

In JetBrains YouTrack before version 2026.2.18991, SSRF via stored XHTML injection was possible during PDF export.

Authorization bypass through user-controlled key vulnerability in Pay with Vipps for WooCommerce allows exploiting incorrectly configured access control security levels. Affects versions from n/a through 6.2.4.

Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output, which can allow crafted values to be interpreted as SVG markup. Version 0.33.5 contains a patch.