CVEs published July 14, 2026
1,007 CVEs were published on July 14, 2026: 73 critical, 590 high. 8 are now in CISA KEV.
- Published
- 1,007
- Critical
- 73
- High
- 590
- Medium
- 321
- Low
- 23
- Unrated
- 0
- Now in CISA KEV
- 8
- Fix available
- 760
Most affected products
- Microsoft Windows
- 394
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 31
- Microsoft 365 Apps for Enterprise · Microsoft Office
- 19
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 17
- Google Chrome
- 15
- Adobe Commerce · Adobe Magento Open Source
- 14
- twigphp Twig · twig/twig
- 14
- Adobe ColdFusion
- 13
- Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- 13
- Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- 12
Critical 73
- CVE-2026-5269Navigator NCS and MCP System Accounts with Default PasswordsCIENA Navigator NCS · CIENA MCP +1
- CVE-2026-5270Authentication Bypass in Navigator and Blue Planet ProductsCIENA Navigator NCS · CIENA MCP +5
- CVE-2026-45363`jwt` (Ruby gem) - empty-key HMAC bypassruby-jwt · jwt
- CVE-2026-48334Illustrator | Improper Input Validation (CWE-20)Adobe Illustrator Desktop
- CVE-2026-48324ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe ColdFusion
- CVE-2026-48318ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-48327ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-48319ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-48321ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-48322ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe ColdFusion
- CVE-2026-48284ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-48325ColdFusion | Missing Authentication for Critical Function (CWE-306)Adobe ColdFusion
- CVE-2026-15773Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escapeGoogle Chrome
- CVE-2026-53486decompress: Archive extraction can create files and links outside the target directoryXhmikosR decompress · @xhmikosr/decompress +1
- CVE-2026-15643AWS HealthLake MCP Server SSRF via Pagination URLawslabs.healthlake-mcp-server
- CVE-2026-48358Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-15409A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.SonicWall SMA1000
- CVE-2026-53633Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCEvitest-dev vitest · @vitest/browser +1
- CVE-2026-13001Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parametereteubert Podlove Podcast Publisher
- CVE-2026-47428Vitest browser mode serves unsanitized otelCarrier query parameter as inline scriptvitest-dev vitest · @vitest/browser
- CVE-2026-47429Vitest: Arbitrary file can be read and executed when Vitest UI server is listeningvitest-dev vitest · vitest
- CVE-2026-48259Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48359Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-45063Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticatorsymfony · symfony/security-http +1
- CVE-2026-57092Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56188Windows Server Network driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56190Remote Desktop Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56159DHCP Server Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-55944Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55010Minecraft Bedrock Dedicated Server Remote Code Execution VulnerabilityMicrosoft Minecraft Bedrock Dedicated Server
- CVE-2026-50518Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50447Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-15747Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracleSRI Mojolicious
- CVE-2026-50380Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49798Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58644Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-50522Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-54118Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-54117Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-55008Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-54990Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49172Windows FTP Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-42990SQL Server ODBC driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-48561Microsoft Edge Copilot Remote Code Execution VulnerabilityMicrosoft Edge Copilot for Android · Microsoft Edge Copilot…
- CVE-2026-59891Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registrysigstore-js · @sigstore/oci
- CVE-2026-15701Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflowTotolink NR1800X
- CVE-2026-60082DBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowHMBRAND DBI
- CVE-2026-55954Missing ID token claim validation in ueberauth_apple allows account takeoverueberauth_apple
- CVE-2025-11698CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer OverflowRockwell Automation CompactLogix® 5380 Recovery Image…
- CVE-2025-12012CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer OverflowRockwell Automation CompactLogix® 5370 Compact GuardLo…
- CVE-2025-12011CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer OverflowRockwell Automation CompactLogix® 5370 Compact GuardLo…
- CVE-2026-15265Tenable Agent Path Traversal Leading to Remote Code Executiontenable_agent
- CVE-2026-58479Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command InjectionDan-in-CA SIP
- CVE-2026-10577Rockwell Automation 1715 Redundant IO – Access Control VulnerabilityRockwell Auotmation 1715 EtherNet/IP Communications Module
- CVE-2026-62390Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh APIApache Software Foundation Apache Kylin
- CVE-2026-62422In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass vJetBrains YouTrack
- CVE-2026-15043DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textHMBRAND DBI::SQL::Nano
- CVE-2026-58319Apache Doris: Improper Authentication in Frontend HTTP APIApache Software Foundation Apache Doris
- CVE-2026-56451A vulnerability has been identified in Opcenter X (All versions < V2604).Siemens Opcenter X
- CVE-2026-15183Input Validation Vulnerabilities in Snowflake Spark ConnectorSnowflake Spark Connector
- CVE-2026-59084Apache Tomcat: EncryptInterceptor requirements not clearly documentedApache Software Foundation Apache Tomcat
- CVE-2026-59083Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypassApache Software Foundation Apache Tomcat
- CVE-2026-57898In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable to Eclipse Foundation Eclipse BaSyx - Java Server SDK
- CVE-2026-11563Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path TraversalWord Count and Social Shares
- CVE-2026-44761Insecure Sample Credentials in SAP Commerce CloudSAP_SE SAP Commerce Cloud
- CVE-2026-44747Memory Corruption vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2026-27690HTTP Request Smuggling in SAP ApprouterSAP_SE SAP Approuter · @sap/approuter
- CVE-2026-38450An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description par
- CVE-2026-51807Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4) ca
- CVE-2026-51808Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_impl::
- CVE-2026-52101An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadR
High 590
- CVE-2026-54684jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx runskylot jadx
- CVE-2026-42049jadx: RCE Via Groovy Code Injection in Gradle Exportskylot jadx
- CVE-2026-59733rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositoriesrclone · github.com/rclone/rclone
- CVE-2026-54572rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remoterclone · github.com/rclone/rclone
- CVE-2026-50130Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`pi-hole
- CVE-2026-48295CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48290CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48287CAI Content Credentials | Untrusted Search Path (CWE-426)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48351CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48352CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48807Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filterstwigphp Twig · twig/twig
- CVE-2026-48806Twig: Sandbox `__toString()` policy bypass via dynamic mapping keystwigphp Twig · twig/twig
- CVE-2026-46640Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilationtwigphp Twig · twig/twig
- CVE-2026-46634Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template nametwigphp Twig · twig/twig
- CVE-2026-48336Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator Desktop
- CVE-2026-48335Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator Desktop
- CVE-2026-48337Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator Desktop
- CVE-2026-48275Illustrator | Untrusted Search Path (CWE-426)Adobe Illustrator Desktop
- CVE-2026-46627Twig: Sandbox resource exhaustion via unbounded `for` / `range()`twigphp Twig
- CVE-2026-46633Twig: PHP code injection via `{% use %}` template nametwigphp Twig · twig/twig
- CVE-2026-46639Twig: Sandbox property and method bypass via object-destructuring assignmenttwigphp Twig · twig/twig
- CVE-2026-47732Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion pointstwigphp Twig · twig/twig
- CVE-2026-48320ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe ColdFusion
- CVE-2026-48332ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)Adobe ColdFusion
- CVE-2026-48328ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-49476Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsievefacelessuser soupsieve · soupsieve
- CVE-2026-49477Soup Sieve: Regular Expression Denial of Service (ReDoS) in soupsieve Selector Parserfacelessuser soupsieve · soupsieve
- CVE-2026-49855tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)tornadoweb tornado · tornado
- CVE-2026-49853Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClienttornadoweb tornado · tornado
- CVE-2026-48340Bridge | Untrusted Pointer Dereference (CWE-822)Adobe Bridge
- CVE-2026-48343Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-48339Bridge | Heap-based Buffer Overflow (CWE-122)Adobe Bridge
- CVE-2026-48311Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-48342Bridge | Integer Overflow or Wraparound (CWE-190)Adobe Bridge
- CVE-2026-48341Bridge | Out-of-bounds Write (CWE-787)Adobe Bridge
- CVE-2026-48815sigstore-js: `certificateOIDs` verification constraints are silently dropped and never enforcedsigstore-js · sigstore
- CVE-2026-48272Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)Adobe Creative Cloud Desktop
- CVE-2026-48344GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)Adobe Creative Cloud Desktop
- CVE-2026-24272NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer.NVIDIA TensorRT
- CVE-2026-24268NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow.NVIDIA TensorRT
- CVE-2026-24238NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index.NVIDIA TensorRT
- CVE-2026-15777Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific Google Chrome
- CVE-2026-15776Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sanGoogle Chrome
- CVE-2026-15774Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentGoogle Chrome
- CVE-2026-15772Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer processGoogle Chrome
- CVE-2026-15769Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacGoogle Chrome
- CVE-2026-15767Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code insidGoogle Chrome
- CVE-2026-15765Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gesGoogle Chrome
- CVE-2026-15764Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specifGoogle Chrome
- CVE-2026-48367After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-48274After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-24229NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or NVIDIA TensorRT-LLM
- CVE-2026-48269Premiere Pro | Heap-based Buffer Overflow (CWE-122)Adobe Premiere
- CVE-2026-48369Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-48270Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-48801linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loopmarkdown-it linkify-it · linkify-it
- CVE-2026-47473NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition.NVIDIA TensorRT-LLM
- CVE-2026-47471NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer oNVIDIA TensorRT-LLM
- CVE-2026-47472NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could caNVIDIA TensorRT-LLM
- CVE-2026-24233NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unaNVIDIA TensorRT-LLM
- CVE-2026-47971Media Encoder | Stack-based Buffer Overflow (CWE-121)Adobe Media Encoder
- CVE-2026-48366Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-47976Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-48370Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-47423DOMPurify XSS via `selectedcontent` re-clonecure53 DOMPurify · dompurify
- CVE-2026-47736Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustionpuma
- CVE-2026-48346Animate | Untrusted Search Path (CWE-426)Adobe Animate
- CVE-2026-48345Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Animate
- CVE-2026-48347Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Animate
- CVE-2026-48349Animate | Incorrect Authorization (CWE-863)Adobe Animate
- CVE-2026-48348Animate | Incorrect Authorization (CWE-863)Adobe Animate
- CVE-2026-48350Animate | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Animate
- CVE-2026-47482NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifeNVIDIA Triton Inference Server
- CVE-2026-47480NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an uncaught exception.NVIDIA Triton Inference Server
- CVE-2026-47479NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption.NVIDIA Triton Inference Server
- CVE-2026-47478NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor.NVIDIA Triton Inference Server
- CVE-2026-15711Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationRed Hat Enterprise Linux
- CVE-2026-47737Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connectionspuma
- CVE-2026-47477NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause a stack-based buffer overflow.NVIDIA Triton Inference Server
- CVE-2026-47984Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47988Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47995Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47994Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47992Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47476NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause uncontrolled resource consumption.NVIDIA Triton Inference Server
- CVE-2026-15410Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance ManSonicWall SMA1000
- CVE-2026-48069@grpc/grps-js: An incoming malformed compressed message can cause a client or server crashgrpc-node · @grpc/grpc-js
- CVE-2026-15709Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceRed Hat Enterprise Linux
- CVE-2026-50651.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +14
- CVE-2026-48068@grpc/grps-js: A malformed request can cause a server crashgrpc-node · @grpc/grpc-js
- CVE-2026-50650.NET Framework Elevation of Privilege VulnerabilityMicrosoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime +7
- CVE-2026-50649.NET Remote Code Execution VulnerabilityMicrosoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime +4
- CVE-2026-50648.NET Framework Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +4
- CVE-2026-50646.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime +7
- CVE-2026-50528.NET Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +14
- CVE-2026-50527.NET Framework Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +4
- CVE-2026-50526.NET Tampering VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +3
- CVE-2026-50525.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +4
- CVE-2026-50524.NET Framework Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +14
- CVE-2026-48310Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48252Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48489Symfony: Security Firewall Bypass via failure_forward Subrequest: Unauthenticated Access to access_control-Protected GET Routessymfony · symfony/security-http +1
- CVE-2026-45068Symfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Addresssymfony · symfony/mailer +1
- CVE-2026-45071Symfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = truesymfony · symfony/dom-crawler +1
- CVE-2026-45305Symfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regexsymfony · symfony/yaml +1
- CVE-2026-45304Symfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")symfony · symfony/yaml +1
- CVE-2026-45069Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claimssymfony · symfony/security-http +1
- CVE-2026-47305Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2026-47304.NET Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +4
- CVE-2026-47303ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +3
- CVE-2026-47302.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +16
- CVE-2026-47301Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Configuration Manager
- CVE-2026-45133Symfony: [Yaml] Harden the parser when handling untrusted inputsymfony · symfony/yaml +1
- CVE-2026-45075Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]symfony · symfony/http-kernel +2
- CVE-2026-47767Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatchsymfony · symfony/runtime +1
- CVE-2026-15720Pre-auth heap out-of-bounds read in the AMF NAS 5GS mobile-identity handleropen5gs
- CVE-2026-47300ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +3
- CVE-2026-15641Improper authorization in the access request status endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated low-privilegDevolutions Server
- CVE-2026-15637Improper authorization in the PAM SSH key and certificate retrieval endpoints in Devolutions Server 2026.2.11, 2026.1.22 allows an authentDevolutions Server
- CVE-2026-5040Weak Password Hashing Mechanism in TP-Link Deco M5TP-Link Systems Deco M5 Deco M5
- CVE-2026-45756Symfony: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits — ReDoSsymfony · symfony/json-path +1
- CVE-2026-45074Symfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replaysymfony · symfony/security-http +1
- CVE-2026-47967Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-48309Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-48365Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-47968Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-48368Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-45077Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listenersymfony · symfony/monolog-bridge +1
- CVE-2026-4017Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-58529Windows Active Directory Federation Services (ADFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-56181Windows Network Address Translation (NAT) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-58637Windows Client-Side Caching Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58634Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58633Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58632Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58629DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58628Windows Wireless Network Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58627Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-58626Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58619Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58617M365 Copilot for iOS Elevation of Privilege VulnerabilityMicrosoft 365 Copilot for iOS
- CVE-2026-58613Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58594Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58541Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58542Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58544Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58536Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58534Windows Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58537Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58532Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58531Windows SMB Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58540Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58538Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58530Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58527Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58277Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-57968Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2026-57108.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +9
- CVE-2026-57102Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-57101Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-57096Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-57093Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-57088Extensible Storage Engine (ESENT) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-57087Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-57089Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-57091Windows File History Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-57094Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-57090Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56650Windows Network File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56648Windows NFS Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56647Windows Remote Access Service Infrastructure Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56194Windows NFS Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54124Windows Terminal Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56644DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56643DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56642Microsoft Fabric Data Warehouse Remote Code Execution VulnerabilityMicrosoft Service Fabric
- CVE-2026-56197Windows Admin Center (WAC) Remote Code Execution VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-56196Windows Admin Center (WAC) Remote Code Execution VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-50665Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-56189Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56186Windows Secure Channel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-56187Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-56183Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-56182Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56175Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56176Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-56173Windows WebView Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50359Microsoft XML Core Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56156Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-55949Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55947Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-54131Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55052Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55120Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-55123Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-55133Microsoft OneNote Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-55043Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-55130Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55128Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55140Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55056Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55134Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55126Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55131Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55122Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55053Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55137Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55132Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55038Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55058Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55037Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55055Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55044Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55036Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55129Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55141Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55136Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55127Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55041Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55033Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55032Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55049Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55045Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55039Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55029Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55034Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55048Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55031Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55125Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55025Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55022Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55021Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55018Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55024Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55017Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-50467Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-50314Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-50301Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-47642Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-47290Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-54128Windows DHCP Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50692Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54125Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50689Windows Clipboard Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50686Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50687Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50683Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50685Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50682Active Directory Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-54121Active Directory Certificate Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50680Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50688Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50679Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54115Windows Message Queuing (MSMQ) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50677Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50676Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50674Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50673Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50672Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50670Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50669Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50667Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50666Windows Remote Access Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50658Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2026-50655Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50647Active Directory Federation Server Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50510GitHub Copilot Remote Code Execution VulnerabilityMicrosoft GitHub Copilot Plugin for JetBrains IDEs
- CVE-2026-50509Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-47295Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-50496Windows Network Policy Server SNMP Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50503Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50501Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50491Code Integrity DLL (ci.dll) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50505Windows Message Queuing Service (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50498Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50490Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50494Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50489Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50499Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50500Windows Netlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50488Clipboard User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50487Windows DNS Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50486Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50502Windows Event Logging Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50493DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50484Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50482Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50480Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50479Windows USB Hub Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50478Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50477Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50459Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50470Windows Network Policy Server SNMP Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50406Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50424Windows Domain Controller Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50450Windows Network Connections Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50429Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50476Windows Network Connections Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50458Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50444Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50411Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50474Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50362Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50438Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2026-50417Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50461Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50399Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50457Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50462Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50439Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50465Windows DNS Client Tampering VulnerabilityMicrosoft Windows
- CVE-2026-50441Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50435Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50402NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50466Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50451Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50367Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50421Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50422Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50427Content Delivery Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50413Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50385Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50365Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50454Windows User Interface Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50469Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50369Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50471Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50436Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50382DirectX Graphics Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50344Windows OLE Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50387Windows GDI Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-50448Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50405Windows Filtering Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50397Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50346Netlogon RPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50378Windows Key Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50423Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50391Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50433Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50403Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50460Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50463Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50379Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50414Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50398Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50336Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50371Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50449Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50410Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50388Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50353DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50373Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50428Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50355Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50358Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50404Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50340Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50317Windows Operating Systems Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50361Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50335Windows Operating Systems Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50322Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50345Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50348Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50452Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50390Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50357Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50330Windows Remote Desktop Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50315Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50425Windows Internal System User Profile Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50321Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50347Windows Data.dll Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50370DHCP Server Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50396Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50343Microsoft Install Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50331Windows Application Model Core API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50407Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50327Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50440Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50313Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50326Windows Unified Consent System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50307Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50368Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50309Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50400Windows App Package Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50386Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50337Windows Notification Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50412Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50393Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50360Windows SMB Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50306Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50328Windows Server Update Service (WSUS) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-50304Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50392Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50363Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50329Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50305Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50372Windows Redirected Drive Buffering System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50332Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50364Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50384Windows Clip Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50356Microsoft Windows App Store Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50325Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50297Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50296DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50354Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50293Windows Internal Task Bar Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49808Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50342Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-50351Windows Audio Compression Manager (ACM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50318Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50323Windows Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49803Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49805Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49806Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49802Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50333Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50311Windows Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50308Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49800Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49797Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49795Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49796Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49793Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49792Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49791Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49790Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49789Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49788HTTP/2 Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-49787HTTP.sys Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-49783Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-49183Windows Clipboard Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49184Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49181Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49178Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-45646OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityMicrosoft AspNet.OData · Microsoft AspNetCore.OData
- CVE-2026-48581Surface Broker SDMA Elevation of Privilege VulnerabilityMicrosoft Surface Go · Microsoft Surface Hub +5
- CVE-2026-48564DHCP Server Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-47632Azure Connected Machine Agent Elevation of Privilege VulnerabilityMicrosoft Azure Connected Machine Agent
- CVE-2026-44800Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-40378Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-40400Windows PowerShell Remote Code Execution VulnerabilityMicrosoft PowerShell · Microsoft Windows
- CVE-2026-50653Azure Active Directory Denial of Service VulnerabilityMicrosoft Azure Active Directory · Microsoft .NET Framework
- CVE-2026-50652Azure Active Directory Denial of Service VulnerabilityMicrosoft Azure Active Directory · Microsoft .NET Framework
- CVE-2026-58647Microsoft PowerBI Report Server Spoofing VulnerabilityMicrosoft Power BI Report Server
- CVE-2026-58640Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58636Microsoft PC Manager Elevation of Privilege VulnerabilityMicrosoft PC Manager
- CVE-2026-58635Windows Narrator Braille Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58631Windows Admin Center (WAC) Remote Code Execution VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-58618Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-58610Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58609Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58608Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-58602Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58601Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-58595Microsoft Bing App for IOS Spoofing VulnerabilityMicrosoft Bing Search for iOS
- CVE-2026-58526Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-55014Windows Remote Help Defense Elevation of Privilege VulnerabilityMicrosoft Windows Remote Help
- CVE-2026-57969Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-57107Windows Admin Center Elevation of Privilege VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-56193Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-54127Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50694Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56170ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +13
- CVE-2026-56169Windows Admin Center Elevation of Privilege VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-56155Active Directory Federation Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-55948Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55899Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-50675Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-50520Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-55144Windows Cryptography API: Next Generation (CNG) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-55002Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-55012Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2026-55011Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2026-50338Azure Spring Apps Elevation of Privilege VulnerabilityMicrosoft Azure Spring Apps
- CVE-2026-55009Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-55006Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-55005Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-54122Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54995Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54999Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54119Windows Active Directory Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-54996Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54114Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54982Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54109Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54992Microsoft Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-55004Windows Print Configuration Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54112Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-55001Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54993Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54986Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54107Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54991Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54111Universal Print Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50697Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50696Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-54987Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54989Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-54129Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50695Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-54983Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50663Game: Age of Empires II: Definitive Edition Remote Code Execution VulnerabilityMicrosoft Age of Empires II: Definitive Edition Game
- CVE-2026-50506OData for ASP.NET and ASP.NET Core Denial of Service VulnerabilityMicrosoft AspNet.OData · Microsoft AspNetCore.OData
- CVE-2026-49784Microsoft Windows App Store Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49173Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49175Windows DNS Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49176Windows WalletService Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49171Windows Speech Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49170Windows StateRepository API Server file Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49169Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-49166Windows Print Configuration Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49165Microsoft Windows App Store Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-49164Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49162Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-48571Windows App Package Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-48572Windows App Package Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-42975Windows Bluetooth Port Driver Remote Code ExecutionMicrosoft Windows
- CVE-2026-42900Microsoft Windows App Store Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-47296Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2016 Service Pack · Microsoft SQL Serv…
- CVE-2026-42982Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-15428OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800vTP-Link Systems Archer VX1800v
- CVE-2026-15427OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800vTP-Link Systems Archer VX1800v
- CVE-2026-59884pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDspyasn1
- CVE-2026-59885pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of servicepyasn1
- CVE-2026-59886pyasn1: Uncontrolled resource consumption when converting decoded REAL valuespyasn1
- CVE-2026-54058Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)python-pillow Pillow · pillow
- CVE-2026-59197Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`python-pillow Pillow · pillow
- CVE-2026-54433In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email messageRoundcube Webmail
- CVE-2026-59200Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()python-pillow Pillow · pillow
- CVE-2026-14504Nexus Repository 3 - Authorization Bypass in Component Upload APISonatype Nexus Repository
- CVE-2026-62643In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages maRoundcube Webmail
- CVE-2026-12523Resource exhaustion in quiche HTTP/3 and QPACK layersCloudflare quiche
- CVE-2026-59205Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` via output mode mismatchpython-pillow Pillow · pillow
- CVE-2026-59199Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflowpython-pillow Pillow · pillow
- CVE-2026-59204Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of servicepython-pillow Pillow · pillow
- CVE-2026-60081DBI::ProfileData versions before 1.651 for Perl do not limit the path indexHMBRAND DBI::ProfileData
- CVE-2026-15392DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted locationHMBRAND DBD::File
- CVE-2026-55651Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposurealextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-11403Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationSonatype Nexus Repository Manager
- CVE-2026-12707Unbounded path event queue growth in quiche via peer-driven source connection ID rotationCloudflare quiche
- CVE-2026-12659Rockwell Automation Flex 5000® Adapter - Denial of ServiceRockwell Automation The FLEX 5000® EtherNet/IP Adapter
- CVE-2025-53379A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remotFortinet FortiAuthenticator
- CVE-2026-9128Studio 5000 Logix Designer® – Multiple VulnerabilitiesRockwell Automation Studio 5000 Logix Designer
- CVE-2026-59835A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may alloFortinet FortiSandbox
- CVE-2026-9636Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List VulnerabilityRockwell Automation ControlLogix® 5580, CompactLogix® 5380,…
- CVE-2026-9127Studio 5000 Logix Designer® – Multiple VulnerabilitiesRockwell Automation Studio 5000 Logix Designer
- CVE-2026-11917ThinManager® - Path Traversal via APIRockwell Automation FactoryTalk ThinManager
- CVE-2026-9292Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site ScriptingRockwell Automation FactoryTalk® DataMosaix™ Private Cloud
- CVE-2026-10714Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication via JWT Validation BypassRockwell Automation FactoryTalk® Services Platform
- CVE-2026-10672Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)zephyrproject zephyr
- CVE-2026-10671User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)zephyrproject zephyr
- CVE-2026-10669Xtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypass syscall pointer validationzephyrproject zephyr
- CVE-2026-96531756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection IDRockwell Automation 1756-EN2, 1756-EN3 · Rockwell Automatio…
- CVE-2026-91401718-AENTR/1719-AENTR - Denial of ServiceRockwell Automation 1718-AENTR/1719-AENTR
- CVE-2026-15696Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflowTenda BE12 Pro
- CVE-2026-58477Sustainable Irrigation Platform 5.2.16 Mass Assignment via HTTP ParametersDan-in-CA SIP
- CVE-2026-60114Sustainable Irrigation Platform 5.2.16 Path Traversal via JSON Backup RestoreDan-in-CA SIP
- CVE-2026-15695Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflowTenda BE12 Pro
- CVE-2026-14903Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web rivanti Xtraction
- CVE-2026-58476Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET RequestsDan-in-CA SIP
- CVE-2026-15694Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflowTenda BE12 Pro
- CVE-2026-15736Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemySnowflake SQLAlchemy · snowflake-sqlalchemy
- CVE-2026-8590Spotfire OAuth2 PKCE Bypass for public clientsSpotfire Enterprise · Spotfire on Kubernetes
- CVE-2026-15693Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflowTenda BE12 Pro
- CVE-2026-53565Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCitrix Secure Access Client for Windows · Citrix Endpoint A…
- CVE-2026-8314Rockwell Automation Arena® - Memory Corruption VulnerabilityRockwell Automation Arena® Simulation
- CVE-2026-8313Rockwell Automation Arena® - Memory Corruption VulnerabilityRockwell Automation Arena® Simulation
- CVE-2026-8312Rockwell Automation Arena® - Memory Corruption VulnerabilityRockwell Auotmation Arena® Simulation
- CVE-2026-8085Rockwell Automation Arena® - Memory Corruption VulnerabilityRockwell Automation Arena® Simulation
- CVE-2026-15692Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflowTenda BE12 Pro
- CVE-2026-62392Apache Kylin: OS Command Injection via Async Query APIApache Software Foundation Apache Kylin
- CVE-2026-15691Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflowTenda BE12 Pro
- CVE-2026-15389Inadequate access control in Sesame Time session managementSesame Time
- CVE-2026-54429A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions).Siemens SIMATIC S7-PLCSIM Advanced
- CVE-2024-7708For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak.Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…
- CVE-2026-15416Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpointargoproj argo-helm · Red Hat OpenShift GitOps +1
- CVE-2026-58229Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoSelixir-mint mint
- CVE-2026-15075In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates alEclipse Foundation Eclipse Vert.x
- CVE-2026-15076In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), the WebClientSession component of Eclipse Vert.x Web Client doesEclipse Foundation Eclipse Vert.x
- CVE-2026-9561Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the authoritative source of the client IP addrEclipse Foundation Eclipse Kura
- CVE-2026-59674LPE from suricata user to root due to chown in %post in suricata packagingopenSUSE Tumbleweed
- CVE-2026-6851Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)Bitdefender Total Security · Bitdefender Internet Security
- CVE-2026-12583Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom FieldNewsletters
- CVE-2026-12511AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path TraversalAI Engine
- CVE-2026-58233Remote Code Execution vulnerability in SAP Change and Transport System Attach Tool (ctsattach)SAP_SE SAP Change and Transport System Attach Tool
- CVE-2026-44752Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard)SAP_SE SAP NetWeaver Application Server Java
- CVE-2026-44745Open Redirect vulnerability in SAP ApprouterSAP_SE SAP Approuter · @sap/approuter
- CVE-2026-0487DLL Hijacking vulnerability in SAProuter on Microsoft WindowsSAP_SE SAProuter on Microsoft Windows
- CVE-2026-51105Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OP_SERVERMESSAGE
- CVE-2026-52100Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary cod
Medium, low and unrated 344
- CVE-2026-15753zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server sidezhinianboke xianyu-auto-reply
- CVE-2026-15752zhinianboke xianyu-auto-reply Backend User Endpoint users authorizationzhinianboke xianyu-auto-reply
- CVE-2026-15751mastergo-design mastergo-magic-mcp mcp__getComponentGenerator component-workflow.md execute path traversalmastergo-design mastergo-magic-mcp
- CVE-2026-42447jadx: HTML Injection in Summary panelskylot jadx
- CVE-2026-21840HCL BigFix Platform is affected by a user enumeration vulnerabilityHCLSoftware HCL BigFix Platform
- CVE-2026-59732rclone archive extract allows S3 destination prefix escape via crafted archive pathsrclone · github.com/rclone/rclone
- CVE-2026-48357CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48296CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48312CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48302CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48354CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48298CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48353CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-15750mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgerymastergo-design mastergo-magic-mcp
- CVE-2026-48808Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`twigphp Twig · twig/twig
- CVE-2026-48805Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`twigphp Twig · twig/twig
- CVE-2026-49981Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`twigphp Twig · twig/twig
- CVE-2026-46637Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`twigphp Twig · twig cssinliner-extra +3
- CVE-2026-46638Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)twigphp Twig · twig/twig
- CVE-2026-46629Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argumentstwigphp Twig · twig/intl-extra
- CVE-2026-47730Twig: XSS in profiler HtmlDumper via unescaped template and profile namestwigphp Twig · twig/twig
- CVE-2026-46628Twig: The `spaceless` filter implicitly marks its output as safetwigphp Twig · twig/twig
- CVE-2026-46635Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)twigphp Twig · twig/twig
- CVE-2026-48338ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe ColdFusion
- CVE-2026-48329ColdFusion | Insufficient Session Expiration (CWE-613)Adobe ColdFusion
- CVE-2026-15749mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversalmastergo-design mastergo-magic-mcp
- CVE-2026-48125UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()`faisalman ua-parser-js · ua-parser-js
- CVE-2026-46644symfony/polyfill-intl-idn accepts xn-- labels whose Punycode payload decodes to ASCII-only: insecure equivalencesymfony polyfill · symfony polyfill-intl-idn +2
- CVE-2026-49854Tornado: Out-of-bounds memory access in C extensiontornadoweb tornado · tornado
- CVE-2026-48816sigstore-js: Insufficient Verification of Data Authenticitysigstore-js · @sigstore/verify
- CVE-2026-48758sigstore-js: DSSE payloadType type-binding failuresigstore-js · @sigstore/core
- CVE-2026-15738Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer ControllerAmazon aws-load-balancer-controller
- CVE-2026-61520Simple Machines Forum SSRF via image proxySimpleMachines SMF
- CVE-2026-24227NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data.NVIDIA TensorRT
- CVE-2026-15778Insufficient validation of untrusted input in Navigation in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who had compromiGoogle Chrome
- CVE-2026-15775Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a craGoogle Chrome
- CVE-2026-15771Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had coGoogle Chrome
- CVE-2026-15770Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from Google Chrome
- CVE-2026-15768Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin pGoogle Chrome
- CVE-2026-15766Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information froGoogle Chrome
- CVE-2026-24271NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resourcNVIDIA TensorRT-LLM
- CVE-2026-47475NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion inNVIDIA TensorRT-LLM
- CVE-2026-47470NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by NVIDIA TensorRT-LLM
- CVE-2026-24226NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation.NVIDIA TensorRT-LLM
- CVE-2026-24259NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function.NVIDIA TensorRT-LLM
- CVE-2026-24220NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen server, where an attacker could cause an unsafe deserialization NVIDIA TensorRT-LLM
- CVE-2026-24234NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker couldNVIDIA TensorRT-LLM
- CVE-2026-48308Premiere Pro | Improper Input Validation (CWE-20)Adobe Premiere
- CVE-2026-49978DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.contentcure53 DOMPurify · dompurify
- CVE-2026-49459DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOMcure53 DOMPurify · dompurify
- CVE-2026-47979Media Encoder | Out-of-bounds Read (CWE-125)Adobe Media Encoder
- CVE-2026-49458DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checkscure53 DOMPurify · dompurify
- CVE-2026-59889jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserializationFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-15714Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringRed Hat Enterprise Linux
- CVE-2026-47481NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternativNVIDIA Triton Inference Server
- CVE-2026-15713Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakRed Hat Enterprise Linux
- CVE-2026-47997Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47999Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47998Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48000Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48001Adobe Commerce | Information Exposure (CWE-200)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48371Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-47996Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-50659.NET Spoofing VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +15
- CVE-2026-48038joi: Uncaught RangeError on deeply nested input through recursive `link()` schemashapijs joi · joi
- CVE-2026-48761Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object>, <applet>, <iframe>, <img> and the URL Inside <meta http-equiv="refresh"> contentsymfony · symfony/html-sanitizer +1
- CVE-2026-48263Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48260Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48355Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48261Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48253Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48262Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48255Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48257Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48254Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-48747Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgradesymfony · symfony/mailomat-mailer +1
- CVE-2026-48760Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defensesymfony · symfony/html-sanitizer +1
- CVE-2026-48736Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClientsymfony · symfony/http-client +2
- CVE-2026-48784Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalizationsymfony · symfony/routing +1
- CVE-2026-47212Symfony: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature HMAC: Unauthenticated Webhook Event Injectionsymfony · symfony/symfony +1
- CVE-2026-45755Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injectionsymfony · /mailtrap-mailer mailtrap-mailer +2
- CVE-2026-45754Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret — Unauthenticated Webhook Event Injectionsymfony · symfony/lox24-notifier +2
- CVE-2026-45064Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofingsymfony · symfony/html-sanitizer +1
- CVE-2026-45070Symfony: Email Header Injection via Non-Token Characters in Mime Parameter Namessymfony · symfony/mime +1
- CVE-2026-45073Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefixsymfony · cache symfony +2
- CVE-2026-45753Symfony: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite — javascript: URI Survives Sanitization (XSS)symfony · symfony/html-sanitizer +1
- CVE-2026-15712Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumptionRed Hat Enterprise Linux
- CVE-2026-15058Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to dDevolutions Server
- CVE-2026-45072Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Renderingsymfony · symfony/symfony +2
- CVE-2026-15642Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.Devolutions Server
- CVE-2026-45066Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassificationsymfony · symfony/html-sanitizer +1
- CVE-2026-47969Audition | Out-of-bounds Read (CWE-125)Adobe Audition
- CVE-2026-62659Authenticated users can make unauthorized changes on NETGEAR WAX333 Access PointsNETGEAR WAX333
- CVE-2026-15757Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem routerNETGEAR DGND3700v1
- CVE-2026-62656Post-authenticated command injection vulnerability found in certain NETGEAR RAX modelsNETGEAR RAXE450 · NETGEAR RAXE500
- CVE-2026-62655A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi modelsNETGEAR RBR860 · NETGEAR RBRE950 +6
- CVE-2026-62657Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsNETGEAR MR70 · NETGEAR MS70 +2
- CVE-2026-62658Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series modelsNETGEAR RAX43 · NETGEAR RAX45 +3
- CVE-2026-15715SourceCodester Class and Exam Timetabling System exam.php cross site scriptingSourceCodester Class and Exam Timetabling System
- CVE-2026-45065Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injectionsymfony · symfony/routing +1
- CVE-2026-45067Symfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Addresssymfony · symfony/mime +1
- CVE-2026-4018TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-0515Insufficient parameter validation in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-55121Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-58638Windows Boot Loader Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-58543Universal Print Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58545Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-58547Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58539Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-58546Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-58535Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-58533Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-58528Windows USB Audio Class Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-57982Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-57973Windows Subsystem for Linux (WSL2) Kernel Tampering VulnerabilityMicrosoft Windows Subsystem for Linux
- CVE-2026-57085Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-57095Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-57084Windows File Explorer Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-57083Windows Media Photo Codec Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-56649Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-56178Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2026-56195Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-56192Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-56184Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-56168Windows SMB Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-56157Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55898Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55145Outlook Copilot Tampering VulnerabilityMicrosoft Copilot
- CVE-2026-54116Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-50468Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-55135Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55139Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55042Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55142Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55051Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55057Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-55054Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55035Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55124Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55138Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55050Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +3
- CVE-2026-55047Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55028Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55027Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55026Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55030Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55023Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +2
- CVE-2026-55020Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55046Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55019Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-50408Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-55016Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-48580Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-54126Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50690Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50681Windows Secure Channel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50684Active Directory Federation Server Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-50668Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50661Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-50657Microsoft Defender for Endpoint for Mac Information Disclosure VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2026-50504Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50497Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50492Windows Resilient File System (ReFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50485Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50483Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50495DNS Client Tampering VulnerabilityMicrosoft Windows
- CVE-2026-50475Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50415Windows Media Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50394Windows Media Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50420HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50453Windows USB Audio Class Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50431Windows Quality of Service (QoS) Packet Scheduler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50432Window Virtual Filtering Platform (VFP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50456Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50389Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50442Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50473Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50409Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50455Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50383Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50374Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50426Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-50437Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50352Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50445Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50334Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50376Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50401Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50418Windows System Secure Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-50416Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50366Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50375DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50377Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50312Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50324Windows Active Directory Federation Services Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framew… +2
- CVE-2026-50310Windows Human Interface Device Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50430Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50339Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50434Windows Push Notification Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50341Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50419Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50302Windows Cryptographic Services Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-50303Windows Key Guard Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-50300Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50381Composite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50350Windows Trusted Runtime Interface Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50295Windows Zero Trust DNS Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-50316Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50298Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49807Windows DirectX Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-49801Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-50294Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-49804Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49799Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-50299Windows Storage Spaces Direct Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-49794Windows USB Audio Class Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-49180Universal Plug and Play (upnp.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-44806Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-34348Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-41087Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-40422Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-34328Windows Audio Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-33842Windows File Explorer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-58614Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-58279Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-57979Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-57976Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-57097Microsoft XML Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-56185Windows Admin Center Information Disclosure VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-56164Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-54988Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-50678Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-54108Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-55003Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-54997Windows SMB Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-54132Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-55000Windows USB Print Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-45496Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-47282GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-49177Windows TCP/IP Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-49174DNS Client Tampering VulnerabilityMicrosoft Windows
- CVE-2026-49168Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-49167Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-34346Windows Ancillary Function Driver for WinSock Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-34349Windows Media Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-15429Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800vTP-Link Systems Archer VX1800v
- CVE-2026-15703SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injectionSourceCodester Simple and Nice Shopping Cart Script
- CVE-2026-14646Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectSonatype Nexus Repository
- CVE-2026-15702tamagui config.ts updateConfig prototype pollutiontamagui
- CVE-2026-59888jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategyFasterXML jackson-databind · com.fasterxml.jackson.core:… +1
- CVE-2026-14645Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilitySonatype Nexus Repository
- CVE-2026-54432Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS).Roundcube Webmail
- CVE-2026-15700DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversalDedeCMS
- CVE-2026-59198Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated imagespython-pillow Pillow · pillow
- CVE-2026-62644In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing viaRoundcube Webmail
- CVE-2026-62642In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of Roundcube Webmail
- CVE-2026-62641In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF siRoundcube Webmail
- CVE-2026-7494Nexus Repository - SSRF in SSL Certificate RetrievalSonatype Nexus Repository
- CVE-2026-15699spencermountain compromise Public Root API extend.js nlp.extend prototype pollutionspencermountain compromise
- CVE-2026-60119Hi.Events < 1.11.0 XSS via Event Title JSON.stringify InjectionHiEventsDev Hi.Events
- CVE-2026-59203Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of servicepython-pillow Pillow · pillow
- CVE-2026-60118Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation EndpointHiEventsDev Hi.Events
- CVE-2026-15698kofrasa mingo Update API updateMany prototype pollutionkofrasa mingo
- CVE-2026-52841Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google syncalextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-52840Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal networkalextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-11944openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment downloadOS4ED openSIS-Classic
- CVE-2026-52839Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypassalextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-59840A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0Fortinet FortiOS · Fortinet FortiPAM +2
- CVE-2025-43892A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0Fortinet FortiOS
- CVE-2026-23573An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet ForFortinet FortiOS · Fortinet FortiProxy +1
- CVE-2026-59839A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortFortinet FortiProxy · Fortinet FortiOS +1
- CVE-2025-62826An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FFortinet FortiPAM · Fortinet FortiProxy +1
- CVE-2025-62675An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FFortinet FortiOS · Fortinet FortiPAM +1
- CVE-2026-15697svgdotjs svg.js npm Package API EventTarget.on prototype pollutionsvgdotjs svg.js
- CVE-2026-59836A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCliFortinet FortiClientEMS
- CVE-2026-59841A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 maFortinet FortiSIEMWindowsAgent
- CVE-2026-9108Studio 5000 Logix Designer® – Multiple VulnerabilitiesRockwell Automation Studio 5000 Logix Designer
- CVE-2026-52838Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSSalextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-59837A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, ForFortinet FortiOS · Fortinet FortiProxy +1
- CVE-2026-10670User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy()` syscall verifierzephyrproject zephyr
- CVE-2026-105731734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP ObjectRockwell Automation 1734 POINT I/O
- CVE-2026-52837Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule pagealextselegidis easyappointments · alextselegidis/easyappoin…
- CVE-2026-58478Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URLDan-in-CA SIP
- CVE-2026-14902An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary externaivanti Xtraction
- CVE-2026-58475Sustainable Irrigation Platform 5.2.16 Stored XSS via Program NameDan-in-CA SIP
- CVE-2026-53566Out-of-bounds memory readCitrix Secure Access Client for Windows
- CVE-2026-15305TYPO3 CMS - Unrestricted File Upload in Form FrameworkTYPO3 CMS · typo3/cms-form
- CVE-2026-12588An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console.Trellix HX Console
- CVE-2026-49488Apache OpenMeetings: Arbitrary File ReadApache Software Foundation Apache OpenMeetings
- CVE-2026-62393Apache Kylin: Improper authorization in job information retrievalApache Software Foundation Apache Kylin
- CVE-2026-15719Site isolation issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-15718Invalid pointer in the JavaScript: WebAssembly componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-15690open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null pointer dereferenceopen62541
- CVE-2026-9341Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameterkodezen Academy LMS
- CVE-2026-3014Remote Code Execution by administrative user on the Management ServerMilestone Systems XProtect Management Server
- CVE-2026-14852mk_sap_hana: Privilege escalation via crafted sapstartsrv process nameCheckmk
- CVE-2026-12478Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)Red Hat Enterprise Linux
- CVE-2025-40945A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (AlSiemens COMOS · Siemens Designcenter NX +6
- CVE-2026-8384In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admiEclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…
- CVE-2026-6790In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what pEclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…
- CVE-2026-10051In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to retain the trailers in subsequent requests performed over the Eclipse Foundation Eclipse Jetty · org.eclipse.jetty:jetty-…
- CVE-2026-59246Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memoryelixir-mint mint
- CVE-2026-12606Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveragEclipse Foundation Eclipse GlassFish
- CVE-2025-8412VMDP: Potential buffer overflow in the RtlQueryRegistryValues functionSUSE Virtual Machine Driver Pack
- CVE-2026-13699Databroker 0.6.1 PublishValue missing data_point panicEclipse Foundation Eclipse KUKSA - Databroker
- CVE-2026-15678code-projects Online Job Portal DetailJob.php cross site scriptingcode-projects Online Job Portal
- CVE-2026-15677code-projects Online Job Portal JobSeekerInsert.php unrestricted uploadcode-projects Online Job Portal
- CVE-2026-15676code-projects Online Job Portal DeleteUser.php sql injectioncode-projects Online Job Portal
- CVE-2026-12988WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email BindingWP 2FA
- CVE-2026-11567SureForms < 2.11.1 - Unauthenticated Payment Amount BypassSureForms
- CVE-2025-15665BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode FieldUltimate Before After Image Slider & Gallery
- CVE-2026-15675code-projects Online Job Portal EditUser.php sql injectioncode-projects Online Job Portal
- CVE-2026-15672itsourcecode Electronic Judging System add_judges.php sql injectionitsourcecode Electronic Judging System
- CVE-2026-15669louisho5 picobot exec Tool exec.go ExecTool.Execute os command injectionlouisho5 picobot
- CVE-2026-12482Path Traversal via Symlink Name Validation Bypass in keras-team/keraskeras-team/keras · keras
- CVE-2026-15668louisho5 picobot web Tool web.go WebTool.Execute server-side request forgerylouisho5 picobot
- CVE-2026-15629louisho5 picobot Workspace filesystem.go GetSkill link followinglouisho5 picobot
- CVE-2026-15628zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgeryzhayujie chatgpt-on-wechat CowAgent
- CVE-2026-15627nextlevelbuilder GoClaw tool.go handleNavigate information disclosurenextlevelbuilder GoClaw
- CVE-2026-15626nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile path traversalnextlevelbuilder GoClaw
- CVE-2026-15625nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand incomplete blacklistnextlevelbuilder GoClaw
- CVE-2026-15624nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgerynextlevelbuilder GoClaw
- CVE-2026-7640WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attributeaguilatechnologies WP Customer Area
- CVE-2026-11390News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgetsblazethemes News Kit Addons For Elementor
- CVE-2026-11802FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Actionthemelooks FoodBook Lite – Online Food Ordering System
- CVE-2026-15622poco-ai poco-claw Workspace API workspace.py get_workspace_file authorizationpoco-ai poco-claw
- CVE-2026-15621mosaxiv clawlet File Tools fs_ops.go edit_file link followingmosaxiv clawlet
- CVE-2026-44767Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS InjectionSAP_SE @ui5/webcomponents-base
- CVE-2026-44771Missing Authorization check in SAP S/4HANA (Draft operation)SAP_SE SAP S/4HANA
- CVE-2026-44770Missing Authorization check in SAP S/4 HANA (Create Single Payment)SAP_SE SAP S/4 HANA
- CVE-2026-44769SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)SAP_SE SAP S/4HANA Project Management
- CVE-2026-44768Security misconfiguration in SAP CRM (WebClient UI)SAP_SE SAP CRM
- CVE-2026-44760Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages)SAP_SE SAP NetWeaver Application Server ABAP
- CVE-2026-44759Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise PortalSAP_SE SAP NetWeaver Enterprise Portal
- CVE-2026-44753Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service)SAP_SE SAP HANA Extended Application Services classic model
- CVE-2026-15620mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgerymosaxiv clawlet
- CVE-2026-15619mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgerymosaxiv clawlet
- CVE-2025-56361A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's
- CVE-2025-56362A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.2, specifically within the Level Control cluster's
- CVE-2025-56363A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute functi
- CVE-2025-56364A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value
- CVE-2025-56365A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing log
- CVE-2026-36035Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows au
- CVE-2026-36214osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip cosTicket