These CVE IDs are still marked RESERVED at MITRE — no official description, no CVSS, no NVD record — yet the world is already talking about them. Mallory tracks the chatter so you see the risk before the paperwork catches up.
1,134 reserved CVEs with public mentions, ranked by all-time mention count.
Page 22 of 46
CVE-2026-40659First seen Sep 25, 2026
CVE-2026-11099First seen Jun 7, 2026
CVE-2026-61626 is an input-handling vulnerability in libass when processing certain Matroska subtitle chunks containing negative ReadOrder values. Incorrect handling of these values can cause the subtitle renderer to crash and may potentially enable arbitrary code execution.
CVE-2026-61626First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026
First seen Sep 24, 2026