CVEs published August 11, 2026
932 CVEs were published on August 11, 2026: 56 critical, 526 high. 4 are now in CISA KEV.
- Published
- 932
- Critical
- 56
- High
- 526
- Medium
- 331
- Low
- 19
- Unrated
- 0
- Now in CISA KEV
- 4
- Fix available
- 640
Most affected products
- Microsoft Windows
- 206
- Microsoft 365 Apps for Enterprise · Microsoft Office
- 36
- MongoDB Server
- 24
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 23
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 22
- Microsoft 365 Apps for Enterprise · Microsoft Office +1
- 20
- Microsoft Windows Server
- 19
- Adobe ColdFusion
- 16
- Intel(R) PROSet/Wireless WiFi Software for Windows
- 16
- n8n-io n8n · n8n
- 16
Critical 56
- CVE-2026-67568Mira Hormone Monitor, Mira Android App Use of Hard-coded CredentialsQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-68067Mira Hormone Monitor, Mira Android App Weak AuthenticationQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-48765TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object bindingbaptisteArno typebot.io
- CVE-2026-71290Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)Apache Software Foundation Apache HttpComponents Client
- CVE-2026-66147An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which alloSonicWall GMS
- CVE-2026-66145An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remotSonicWall GMS
- CVE-2026-16230Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature FieldStrategy11 Formidable Digital Signatures
- CVE-2026-73034DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Headereosphoros-ai DB-GPT
- CVE-2026-45618LiquidJS is Vulnerable to Remote Code Executionharttle liquidjs · liquidjs
- CVE-2026-73032PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()papersgpt-for-zotero
- CVE-2026-72742DSPy 3.3.0b1 Local File Read via Image/Audio Output Field ParsingStanford NLP DSPy
- CVE-2026-18691Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential ExposureMongoDB Server
- CVE-2026-69102MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trustdromara MaxKey
- CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48381Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-71398Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
- CVE-2026-27302Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
- CVE-2026-73211PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()Chocobozzz PeerTube
- CVE-2026-73090PeerTube: Cross-origin remote video takeover via Update activityChocobozzz PeerTube
- CVE-2026-47705TypeBot vulnerable to CSV injection in result exportbaptisteArno typebot.io
- CVE-2026-50516Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft Azure Kubernetes Service
- CVE-2026-70306Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-65791Windows iSCSI Target Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62893Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62878Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62815Microsoft QUIC Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-59124Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityMicrosoft HPC Pack
- CVE-2026-69223Apache Allura: Server-side request forgeryApache Software Foundation Apache Allura
- CVE-2026-12571Authentication Bypass Leading to Account Takeoverzohocorp manageengine_ddi_central
- CVE-2026-48362ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe ColdFusion
- CVE-2026-71384ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-73080SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedleseaweedfs · github.com/seaweedfs/seaweedfs
- CVE-2025-31114Fooocus webui vulnerable to Remote Code Executionlllyasviel Fooocus
- CVE-2026-73069Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Executiontwentyhq twenty
- CVE-2026-72920SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative controlseaweedfs · github.com/seaweedfs/seaweedfs
- CVE-2026-17061Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026Dassault Systèmes SIMULIA Execution Engine
- CVE-2026-47702TypeBot API tokens stored in plaintextbaptisteArno typebot.io
- CVE-2026-46670YesWiki: Unauthenticated SQL Injectionyeswiki · yeswiki/yeswiki
- CVE-2026-48056Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handlertruelockmc streambert
- CVE-2026-48046Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handlertruelockmc streambert
- CVE-2026-18972Velociraptor authenticated identity-spoofing vulnerabilityRapid7 Velociraptor
- CVE-2026-58115A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with NodSiemens SIMATIC IoT2050 Advanced
- CVE-2026-72785Craft CMS before 5.10.6 Authorization Bypass via structures/move-elementcraftcms cms · craftcms/cms
- CVE-2026-72603wg-easy wg-easy - OS Command Injectionwg-easy
- CVE-2026-72599e107 e107 - SQL Injectione107
- CVE-2026-72550Friendica Friendica - SQL InjectionFriendica
- CVE-2026-13738Improper Authorization ValidationCommvault Cloud
- CVE-2026-13737Command Restriction BypassCommvault Cloud
- CVE-2026-58231Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)SAP_SE SAP Commerce Cloud
- CVE-2026-10579Picketlink-federation: auth bypass in picketlink saml unsolicited-responseRed Hat JBoss Enterprise Application Platform
- CVE-2026-13716Path Traversal: '.../...//' in Crafty ControllerArcadia Technology Crafty Controller
- CVE-2026-19516CVE-2026-19516 CVE RecordGrafana MCP Server · mcp-grafana
- CVE-2026-19425Win Men Intermational｜Travel Agency Management System - SQL InjectionWin Men Intermational Travel Agency Management System
- CVE-2026-44758Code Injection vulnerability in Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-34265Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
- CVE-2026-51584An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in ser
High 526
- CVE-2026-18710Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client InitializationMongoDB Driver
- CVE-2026-73249calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modificationkovidgoyal calibre
- CVE-2026-73248calibre: Bypass of Python template restrictions via nested `template()` leading to RCEkovidgoyal calibre
- CVE-2026-73247Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadatakestra-io kestra · io.kestra:core +1
- CVE-2026-73246Kestra: Unauthenticated management `/worker` endpoint exposes live task configuration and plaintext credentialskestra-io kestra
- CVE-2026-5917libgit2 Shell Command Injection via ssh_libssh2 Backendlibgit2
- CVE-2026-66875Mira Hormone Monitor, Mira Android App Missing authentication for critical functionQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-29036cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape DecodingDaveGamble cJSON
- CVE-2026-66098Mira Hormone Monitor, Mira Android App Missing authentication for critical functionQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-67558Mira Hormone Monitor, Mira Android App Authentication bypass by spoofingQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-19560Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a Google Chrome
- CVE-2026-19559Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a cGoogle Chrome
- CVE-2026-19558Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2026-19557Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer procesGoogle Chrome
- CVE-2026-19556Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a craGoogle Chrome
- CVE-2026-48763TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePathbaptisteArno typebot.io
- CVE-2026-19550Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writesRed Hat Enterprise Linux
- CVE-2026-14863FileRun 2026.2.0 RCE via Thumbnail Generation Command InjectionFileRun
- CVE-2026-63177Malcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBACcisagov Malcolm
- CVE-2026-15606Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Tokenshabti Frontend Admin by DynamiApps
- CVE-2026-55676Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload componentcisagov Malcolm
- CVE-2026-66150Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated atSonicWall Email Security
- CVE-2026-66149Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated atSonicWall Email Security
- CVE-2026-18634An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and SonicWall GMS
- CVE-2026-29035CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompressioncivetweb
- CVE-2026-66154An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) aSonicWall GMS
- CVE-2026-18844Pulsetto Vagus Nerve Stimulator Hidden FunctionalityPulsetto Vagus Nerve Stimulator
- CVE-2026-73242FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`FreeRDP
- CVE-2026-73241FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)FreeRDP
- CVE-2026-73234FreeCAD: FCStd path traversal allows arbitrary file write via unsanitized file attribute in PropertyFileIncluded::Restore()FreeCAD
- CVE-2026-73233FreeCAD: FEM formula incomplete escapeFreeCAD
- CVE-2026-13457InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key DisclosureInstaWP Connect – 1-click WP Staging & Migration
- CVE-2026-19091GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revisionpaoltaia GeoDirectory – WP Business Directory Plugin and Cl…
- CVE-2026-73232ffuf denial of service (OOM) via HTTP response decompression bombffuf · github.com/ffuf/ffuf +1
- CVE-2026-73231Faker: helpers.fake exploitable into arbritary code executionfaker-js faker · @faker-js/faker
- CVE-2026-71474Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx responseRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-48813Flawfinder output manipulation via untrusted filenames and source textdavid-a-wheeler flawfinder · flawfinder
- CVE-2026-71467Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated via upgrade: websocket header spoofingRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-48804python-socketio: Binary attachment accumulation can cause denial of servicemiguelgrinberg python-socketio · python-socketio
- CVE-2026-73031telegram-search Stored XSS via v-html in MessageList.vueGramSearch telegram-search
- CVE-2026-18712Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other CollectionsMongoDB Server
- CVE-2026-18711Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory DisclosureMongoDB Server
- CVE-2026-18690Improper Authorization in MongoDB Server Allows Unauthorized Actions on System CollectionsMongoDB Server
- CVE-2026-73227electerm's RDP clipboard file download may parse unsafe file nameelecterm
- CVE-2026-73226Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlistelecterm
- CVE-2026-18694Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory DisclosureMongoDB Server
- CVE-2026-73225electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filenameelecterm
- CVE-2026-18696Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on CollectionsMongoDB Server
- CVE-2026-18701Type Confusion in MongoDB Query Subsystem Leads to Denial of ServiceMongoDB Server
- CVE-2026-73224Electerm check folder size function may get attacked by unsafe folder nameelecterm
- CVE-2026-18697Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongosMongoDB Server
- CVE-2026-18693Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory DisclosureMongoDB Server
- CVE-2026-18705Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View DataMongoDB Server
- CVE-2026-73223electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filenameelecterm
- CVE-2026-18704Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write OperationsMongoDB Server
- CVE-2026-18692Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code ExecutionMongoDB Server
- CVE-2026-18688Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory DisclosureMongoDB Server
- CVE-2026-69119Taubyte Tau v1.1.10 Missing Authorization via GET and DELETE /projects/{id}Taubyte tau
- CVE-2026-18695Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of ServiceMongoDB Server
- CVE-2026-18687Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index CorruptionMongoDB Server
- CVE-2026-18706Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of Service and Potential Remote Code ExecutionMongoDB Server
- CVE-2026-69117NetBox 4.5.8 ORM Injection via WritableNestedSerializerNetBox Labs NetBox
- CVE-2026-48802python-engineio has unbound thread allocation that can cause denial of servicemiguelgrinberg python-engineio · python-engineio
- CVE-2026-73222Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)davila7 claude-code-templates · claude-code-templates
- CVE-2026-15426AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Updateacyba AcyMailing – An Ultimate Newsletter Plugin and Market…
- CVE-2026-69115OpenIM Server v3.8.3 Missing Authorization on User and Group Enumeration EndpointsOpenIMSDK OpenIM Server
- CVE-2026-48809python-engineio has possible denial of service due to maximum payload size sometimes not being enforcedmiguelgrinberg python-engineio · python-engineio
- CVE-2026-72713XAgent Path Traversal Arbitrary File Read via /workspace/fileOpenBMB XAgent
- CVE-2026-48414Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48416Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48413Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48415Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-73218Cursor: Sandbox escape via launching privileged containerscursor
- CVE-2026-73217Cursor: Sandbox escape via tampered Python virtual environmentscursor
- CVE-2026-48408Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48409Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48441Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Lightroom Classic
- CVE-2026-48447Lightroom Classic | Incorrect Authorization (CWE-863)Adobe Lightroom Classic
- CVE-2026-48406Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48405Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48397Lightroom Classic | Deserialization of Untrusted Data (CWE-502)Adobe Lightroom Classic
- CVE-2026-48407Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48404Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-48410Lightroom Classic | Out-of-bounds Write (CWE-787)Adobe Lightroom Classic
- CVE-2026-47940Lightroom Classic | Integer Overflow or Wraparound (CWE-190)Adobe Lightroom Classic
- CVE-2026-73215The coturn server can end in a state where it does not accept more requests with "even-port" enabled.coturn
- CVE-2026-73214coturn allocates a full per-peer SSL/session before verifying the DTLS cookie, enabling source-spoofing/botnet state-exhaustion DoScoturn
- CVE-2026-48771ishankportfolio: Stored Contact Form Submission Exposure via Public Client-Side Database ConfigurationIshankjha740 ishankportfolio
- CVE-2025-54512A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, AMD Ryzen™ Master
- CVE-2026-48767Google Sheets OAuth access token disclosure to guest members via getAccessTokenbaptisteArno typebot.io
- CVE-2022-50997Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jspWeaver Network Co. E-cology
- CVE-2016-20097Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoadWeaver Network Co. E-cology
- CVE-2025-0046Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.AMD Power Design Manager (PDM) Software Installer for Windo…
- CVE-2026-48494TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session idsbaptisteArno typebot.io
- CVE-2025-8087A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallAMD Power Design Manager (PDM) Software Un-Installer
- CVE-2026-62869Azure Entra ID Spoofing VulnerabilityMicrosoft Entra
- CVE-2026-65767Microsoft Teams for Android Spoofing VulnerabilityMicrosoft Teams for Android
- CVE-2026-62898Microsoft QUIC Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +7
- CVE-2026-71331Windows Device Health Attestation (DHA) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70354.NET Core Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +8
- CVE-2026-63522Azure SQL Database Elevation of Privilege VulnerabilityMicrosoft Azure SQL Database
- CVE-2026-70337Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-70338Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-70326Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70130Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-56179Windows Network Address Translation (NAT) Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-68817Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68814Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68812Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68805Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68804Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68803Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68801Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68798Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac
- CVE-2026-66808Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-66807Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-66805Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-66802Windows Device Health Attestation (DHA) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-65810.NET Framework Elevation of Privilege VulnerabilityMicrosoft .NET Framework
- CVE-2026-65796Windows iSCSI Target Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-65790Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65781Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65782Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65778Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65780Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65779Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65776Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65775Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65774Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65773Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65679Windows iSCSI Target Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-65681Windows iSCSI Target Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-65673Microsoft Entra Connect Elevation of Privilege VulnerabilityMicrosoft Entra Connect
- CVE-2026-64921Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-64919Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64920Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64915Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-64914Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64908Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64911Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64912Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64910Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64909Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64906Microsoft Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-64907Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-64905Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-64904Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64901Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-64903Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64900Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-64898Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63533Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63532Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63527Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63526Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63525Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-62911Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62888Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62886.NET Elevation of Privilege VulnerabilityMicrosoft .NET Framework · Microsoft Visual Studio +5
- CVE-2026-62885Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62880Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62872.NET Framework Elevation of Privilege VulnerabilityMicrosoft .NET Framework
- CVE-2026-62871.NET Elevation of Privilege VulnerabilityMicrosoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime +1
- CVE-2026-62832Windows User Profile Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62822Windows GDI+ Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62824Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62823Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62811Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62807Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-62803Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-62790Windows SMBv3 Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62788Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62800Windows SMBv3 Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62781RPC Runtime Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62780Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62778Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62776Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-62799Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62770Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62768Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62761Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-62771Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62752Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62751Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62749Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62741Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62736Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62734Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62732Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-62733Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62728Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62726Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62725Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62721Windows User-Mode Power Service (UMPS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62717Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62711Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62710Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62701Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62700Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62698Microsoft Digest Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61938Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61929Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61926Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61358Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61357Application Information Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61365Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61364Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61355Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61359Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61363Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-61349Windows Work Folder Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-59126Windows Event Logging Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-59125Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-59122Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-59119PowerShell Elevation of Privilege VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-58651Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-58641.NET Elevation of Privilege VulnerabilityMicrosoft SkiaSharp
- CVE-2026-54981Visual Studio Code Python Extension Security Feature Bypass VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2026-42976Remote Access Management service/API (RPC server) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70355Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2026-73089Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOMbrowserslist
- CVE-2026-70347Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70346Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70345Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70344Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-66804Microsoft Windows Cross Device Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65783Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61352Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70340Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-57104Azure Storage Explorer Elevation of Privilege VulnerabilityMicrosoft Azure Storage Explorer
- CVE-2026-70336Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-70335GitHub Copilot and Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-70329Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-70324Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-70321Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-70313Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70311Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-70307Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69306Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-69278Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-69320Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-68821Windows Package Manager Elevation of Privilege VulnerabilityMicrosoft App Installer
- CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68816Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68815Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68811Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2025-48505Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged eAMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in W…
- CVE-2026-68810Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68806Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68807Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac
- CVE-2026-68800Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac
- CVE-2026-68796Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68795Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68794Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68793Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68792Microsoft Office Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-66799Windows Key Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65815Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2026-65814Microsoft Windows Storage Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65811Power BI Remote Code Execution VulnerabilityMicrosoft Power BI Report Server
- CVE-2026-65807Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-65788Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65787Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65789Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-65786Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65678Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65675CoPilot Chat Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code CoPilot Chat Extension
- CVE-2026-65672Remote Access API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65671Remote Access API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65665Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Server
- CVE-2026-65664Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-65660Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-65663Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-65661Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-65658Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-65656Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-65657Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63519Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63518Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63515Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63513Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-62914Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62913Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62910Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62909.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2
- CVE-2026-62908Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62901.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2
- CVE-2026-62897.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +8
- CVE-2026-62894Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62892Capability Access Management Service (camsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62890Windows GDI+ Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62889Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62877Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-62876Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62820Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62819Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62818Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62817Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62816Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62812Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-62797Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62795Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62787Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-62784Microsoft Local Security Authority Server (lsasrv) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62792Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62779Windows Schannel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62777Windows License Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62785Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62774Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62772Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62773Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62766Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62758Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62755Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62783Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62754Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62747Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62739Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62737Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62735Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62753Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62729Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62748Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62724Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62723Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62722Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62719Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62712Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62713Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62707Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62705Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62696Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62693Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-62690Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62688Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-62695Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61939Winlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61934Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61932Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62692Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61937Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61930Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61927Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61925Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61366Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61923Windows Display Enhancement Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61367Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61356Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61348Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61361Windows DHCP Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-61353Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61346Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-59134Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-59132Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-59133Microsoft High Performance Computing (HPC) Pack Elevation of Privilege VulnerabilityMicrosoft HPC Pack
- CVE-2026-59127Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-47299Azure Monitor Agent Elevation of Privilege VulnerabilityMicrosoft Azure Monitor Agent Linux Extension
- CVE-2026-59113Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-58612PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell · powershell
- CVE-2026-49179Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54984Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-54113Remote Procedure Call Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-63520Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-63514Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-62827Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-57105Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2026-65768Microsoft Teams Remote Code Execution VulnerabilityMicrosoft Teams for Android
- CVE-2026-58650Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-56174Windows Narrator Braille Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-50472Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2025-48506Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in W…
- CVE-2026-73088Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)browserslist
- CVE-2025-61970Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary codAMD Vitis™ Embedded Single File Download (SFD) for Windows
- CVE-2026-48442CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48438CAI Content Credentials | NULL Pointer Dereference (CWE-476)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48439CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2025-0041Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged userAMD Vitis™ Embedded Single File Download (SFD) for Windows
- CVE-2026-43606Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially peAMD Vitis™ Libraries - Security Module · AMD Vitis™ Unifie…
- CVE-2026-73086nanoid: Integer Overflow or Wraparoundai nanoid · nanoid
- CVE-2026-73083Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loadingactivepieces
- CVE-2026-71387ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-48385ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe ColdFusion
- CVE-2026-71383ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-21279ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-48440ColdFusion | Heap-based Buffer Overflow (CWE-122)Adobe ColdFusion
- CVE-2026-34635ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)Adobe ColdFusion
- CVE-2026-48386ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)Adobe ColdFusion
- CVE-2026-71386ColdFusion | Cross-site Scripting (XSS) (CWE-79)Adobe ColdFusion
- CVE-2026-25652ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-21273ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-73081Activepieces: Remote Code Execution via Command Injection in Code Step Nameactivepieces
- CVE-2025-31936Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may aIntel(R) Xeon(R) 6 processors when using Intel(R) TDX
- CVE-2026-24911Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-22887Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of serviceIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20898Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalatiin Alias Checking Trusted Module for some Intel(R) Xeon(R)…
- CVE-2026-20890Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20885Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosuIntel(R) platforms
- CVE-2026-20878Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of serIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20795Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial ofIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20789Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation ofIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20787Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of serIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20778Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20776Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20749Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege.Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20747Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20745Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20741Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20739Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of seIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20727Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20716Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.Intel(R) Processors
- CVE-2026-20715Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard ManageabIntel(R) Active Management Technology (Intel(R) AMT) and so…
- CVE-2026-20702Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure.Intel(R) Data Center Attestation Primitives (Intel(R) DCAP)…
- CVE-2026-47704TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` lineage allows unauthorized control of another bot's waiting sessionbaptisteArno typebot.io
- CVE-2026-53416Zoom VDI - Path TraversalZoom Communications Zoom VDI
- CVE-2026-53415Zoom Clients - Use After FreeZoom Communications Zoom Clients
- CVE-2026-48495TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebotsbaptisteArno typebot.io
- CVE-2026-67180Google Turbinia arbitrary command executionGoogle Turbinia
- CVE-2026-67179Genkit improper host header validationgenkit-ai genkit
- CVE-2026-53413Zoom Clients - Buffer Over-writeZoom Communications Zoom Clients
- CVE-2026-48766TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrlbaptisteArno typebot.io
- CVE-2026-73079Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentialsWei-Shaw sub2api
- CVE-2026-56721CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersControllerowen2345 CamaleonCMS
- CVE-2026-42142TypeBot has Authorization Bypass in Google Sheets `getSheets` Endpoint that Allows Cross-Workspace Credential AccessbaptisteArno typebot.io
- CVE-2026-73078Vim: Arbitrary Code Execution via Netrw Menu Constructionvim
- CVE-2026-73077Vim: Arbitrary Code Execution via Shell Keyword Lookupvim
- CVE-2026-73076Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`vim
- CVE-2026-73074Vim: Heap Buffer Overflow in Text Property Handlingvim
- CVE-2026-73072Vim: Heap Buffer Overflow when Loading a Spell Filevim
- CVE-2026-6726An information leakage vulnerability in the TCG TPM 2.0 reference code.Trusted Computing Group TPM2.0
- CVE-2026-19546Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attributeRed Hat Enterprise Linux
- CVE-2026-18639Velociraptor OIDC Authenticator susceptible to email spoofingRapid7 Velociraptor
- CVE-2026-18640Velociraptor directory traversal via the NewNotebook APIRapid7 Velociraptor
- CVE-2026-18860Velociraptor incorrect Org deletion permissions checkRapid7 Velociraptor
- CVE-2026-72922AutoGPT: Webhook provider path confusion bypasses generic webhook secret verificationSignificant-Gravitas AutoGPT
- CVE-2026-72921SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling pathsseaweedfs · github.com/seaweedfs/seaweedfs
- CVE-2026-18129Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticatIvanti Endpoint Manager
- CVE-2026-18127External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full wrIvanti Endpoint Manager
- CVE-2026-18125An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an aIvanti Endpoint Manager
- CVE-2026-18635Velociraptor query plugin allows impersonation in other orgsRapid7 Velociraptor
- CVE-2026-19539IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and deletionRoskus Prospero Flow CRM
- CVE-2026-69109A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3).Siemens License Server
- CVE-2026-64629A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230).Siemens Parasolid
- CVE-2026-59701A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).Siemens Simcenter Femap
- CVE-2026-59700A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).Siemens Simcenter Femap
- CVE-2026-59086A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606).Siemens Simcenter Femap · Siemens Simcenter Nastran
- CVE-2026-50064A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50063A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50062A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50061A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50060A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50059A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-50058A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update Siemens Solid Edge SE2025 · Siemens Solid Edge SE2026
- CVE-2026-72782Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leakcraftcms cms · craftcms/cms
- CVE-2026-72781Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escapecraftcms cms · craftcms/cms
- CVE-2026-72780Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkeycraftcms cms · craftcms/cms
- CVE-2026-72779Craft CMS 5.0.0-RC1 before 5.10.6 Arbitrary File Read via SplFileObjectcraftcms cms · craftcms/cms
- CVE-2026-72778Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.configcraftcms cms · craftcms/cms
- CVE-2026-72774n8n before 1.123.67 Authentication Bypass via HTTP Request Noden8n-io n8n · n8n
- CVE-2026-72772n8n before 2.32.1 Authentication Bypass via Token Exchangen8n-io n8n · n8n
- CVE-2026-72771n8n before 2.32.1 Credential Restriction Bypass via AI/LLM Nodesn8n-io n8n · n8n
- CVE-2026-72770n8n before 1.123.67 Path Traversal via Git Node Operationsn8n-io n8n · n8n
- CVE-2026-72767n8n before 1.123.67 Remote Code Execution via Git noden8n-io n8n · n8n
- CVE-2026-72766n8n before 1.123.67 Arbitrary File Read via Send Email Noden8n-io n8n · n8n
- CVE-2026-72765n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escapen8n-io n8n · n8n
- CVE-2026-72763n8n before 1.123.67 Credential Exfiltration via Sub-Workflown8n-io n8n · n8n
- CVE-2026-72762n8n before 1.123.67 Arbitrary File Write via Edit Image Noden8n-io n8n · n8n
- CVE-2026-72749n8n before 1.123.67 Prototype Pollution via Edit Fieldsn8n-io n8n · n8n
- CVE-2026-50236Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift consoleRed Hat OpenShift Container Platform
- CVE-2026-50237Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift consoleRed Hat OpenShift Container Platform
- CVE-2026-72609Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.plKoha Community Koha
- CVE-2026-72607Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by AgeKoha Community Koha
- CVE-2026-72606Pinry Pinry - Server-Side Request ForgeryPinry
- CVE-2026-72605Swing Music Swing Music - Missing AuthenticationSwing Music
- CVE-2026-72602AsyncFuncAI deepwiki-open - Path TraversalAsyncFuncAI deepwiki-open
- CVE-2026-72601CSZ CMS CSZ CMS - Broken Access ControlCSZ CMS
- CVE-2026-72600Idurar IDURAR ERP CRM - Broken Access ControlIDURAR ERP CRM
- CVE-2026-72596Ghost Foundation Ghost - Broken Access ControlGhost Foundation Ghost
- CVE-2026-72595BadChoice Handesk - Broken Access ControlBadChoice Handesk
- CVE-2026-72563BadChoice Handesk - Broken Access ControlBadChoice Handesk
- CVE-2026-72562Pimcore pimcore admin-ui-classic-bundle - SQL Injectionpimcore admin-ui-classic-bundle
- CVE-2026-72561Peppermint Lab Peppermint - Broken Access ControlPeppermint Lab Peppermint
- CVE-2026-72558CiviCRM CiviCRM - SQL InjectionCiviCRM
- CVE-2026-72557Cockpit CMS Cockpit CMS - Unrestricted File UploadCockpit CMS
- CVE-2026-72556ZoneMinder ZoneMinder - Remote Code ExecutionZoneMinder
- CVE-2026-72555Peppermint Lab Peppermint - Broken Access ControlPeppermint Lab Peppermint
- CVE-2026-72552Dub Dub - Server-Side Request ForgeryDub
- CVE-2026-72551Apioo Fusio - Remote Code ExecutionApioo Fusio
- CVE-2026-72548OpenSignLabs OpenSign - Information DisclosureOpenSignLabs OpenSign
- CVE-2026-72547Attendize Attendize - Insecure Direct Object ReferenceAttendize
- CVE-2026-72546Attendize Attendize - Insecure Direct Object ReferenceAttendize
- CVE-2026-72545OpenSignLabs OpenSign - Insecure Direct Object ReferenceOpenSignLabs OpenSign
- CVE-2026-72544OpenSignLabs OpenSign - Insufficient Verification of Data AuthenticityOpenSignLabs OpenSign
- CVE-2026-72543OpenSignLabs OpenSign - Insecure Direct Object ReferenceOpenSignLabs OpenSign
- CVE-2026-72538PrefectHQ Prefect - Argument InjectionPrefectHQ Prefect
- CVE-2026-72537Authentik Security authentik - Privilege EscalationAuthentik Security authentik
- CVE-2026-72536Chaskiq Chaskiq - Missing AuthenticationChaskiq
- CVE-2026-72535Chaskiq Chaskiq - Missing AuthenticationChaskiq
- CVE-2026-72534Authentik Security authentik - Privilege EscalationAuthentik Security authentik
- CVE-2026-72533Portainer Portainer CE - Authentication BypassPortainer CE
- CVE-2026-13739Server-Side Request Forgery (SSRF)Commvault Cloud
- CVE-2026-73160cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP AddressesMISP cti-transmute
- CVE-2026-71217Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustionRed Hat Enterprise Linux
- CVE-2026-15567Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listenerRed Hat JBoss Enterprise Application Platform · Red Hat… +1
- CVE-2026-15565Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage methodRed Hat JBoss Enterprise Application Platform · Red Hat… +3
- CVE-2026-15563Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dosRed Hat JBoss Enterprise Application Platform · Red Hat… +2
- CVE-2026-15562Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of serviceRed Hat JBoss Enterprise Application Platform
- CVE-2026-15561Undertow-core: oom via missing limits in chunked trailer in eap's undertowRed Hat JBoss Enterprise Application Platform
- CVE-2026-15560Openjdk-orb: unauthed class loading via iiop in eapRed Hat JBoss Enterprise Application Platform
- CVE-2026-15556Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertionsRed Hat JBoss Enterprise Application Platform
- CVE-2026-15555Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshallerRed Hat JBoss Enterprise Application Platform
- CVE-2026-15554Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgeryRed Hat JBoss Enterprise Application Platform
- CVE-2026-72693Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginRed Hat Enterprise Linux · Red Hat OpenShift Container P… +1
- CVE-2026-72694Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationRed Hat Enterprise Linux
- CVE-2026-19418TYPO3 CMS - Broken Access Control in Backend and Install ToolTYPO3 CMS · typo3/cms-backend +1
- CVE-2026-16053Path TraversalZohocorp ManageEngine M365 Manager Plus · Zohocorp ManageEn…
- CVE-2026-4757A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.Axis Communications AB AXIS OS
- CVE-2026-8917Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to wrASUS GPU Tweak III · ASUS GPUTweakII +2
- CVE-2026-19424Inventec Appliances｜Chiline Cloud - Insecure Direct Object ReferenceInventec Appliances Chiline Cloud
- CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2026-58243Privilege Escalation vulnerability in SAP ABAP Developer ToolsSAP_SE SAP ABAP Developer Tools
- CVE-2026-58230Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform · @sap/approuter
- CVE-2026-44765Missing Authorization Check in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-44764Missing Authorization Check in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-44763Directory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-51583An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook va
Medium, low and unrated 350
- CVE-2024-14043Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflowOpen5GS
- CVE-2026-73250Notepad++: Install-time PowerShell command injection through installation pathnotepad-plus-plus
- CVE-2026-73245Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-authkestra-io kestra · io.kestra:kestra
- CVE-2026-66340Mira Hormone Monitor, Mira Android App Improper restriction of excessive authentication attemptsQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-64934Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decisionQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-66832Mira Hormone Monitor, Mira Android App Use of GET request method with sensitive query stringsQuanovate Tech Inc. (operating as Mira / Mira Care) Mira Fi…
- CVE-2026-48762TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription HandlerbaptisteArno typebot.io
- CVE-2026-63134Malcolm's Path Traversal in Archive Extraction Allows Arbitrary Directory Creationcisagov Malcolm
- CVE-2026-63133Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)cisagov Malcolm
- CVE-2026-19579Snipe-IT Checkout Request Cancellation IDORGrokability Snipe-IT
- CVE-2026-66148An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versSonicWall GMS
- CVE-2026-73244kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listingkekingcn kkFileView
- CVE-2026-66146Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote SonicWall GMS
- CVE-2026-73243kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypasskekingcn kkFileView
- CVE-2026-73235FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parserFreeCAD
- CVE-2026-73036Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.tomlBash-it
- CVE-2026-65655Temporal UI Server may set OAuth credential cookies without Secure behind a TLS-terminating reverse proxyTemporal Technologies Temporal UI Server
- CVE-2026-71468Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cacheRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-71475Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url pathRed Hat Advanced Cluster Management for Kubernetes
- CVE-2026-71845Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()Red Hat Advanced Cluster Management for Kubernetes
- CVE-2026-70339Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2026-73230Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secretsente
- CVE-2026-73283In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.OpenBSD OpenSSH
- CVE-2024-14042Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflowOpen5GS
- CVE-2026-73282In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.OpenBSD OpenSSH
- CVE-2026-73281In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that aOpenBSD OpenSSH
- CVE-2026-73229Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requestsencode django-rest-framework · djangorestframework
- CVE-2026-73228Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`encode django-rest-framework · djangorestframework
- CVE-2026-18709Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data InconsistencyMongoDB Server
- CVE-2026-18698Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate CommandMongoDB Server
- CVE-2026-18699Improper Input Validation in MongoDB Query Planner Leads to Denial of ServiceMongoDB Server
- CVE-2026-18702Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic SettingsMongoDB Server
- CVE-2026-18708Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query ScopesMongoDB Server
- CVE-2026-18700Use-After-Free in MongoDB Geospatial Validation Leads to Denial of ServiceMongoDB Server
- CVE-2026-18707Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of ServiceMongoDB Server
- CVE-2026-18703Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication MethodMongoDB Server
- CVE-2026-73221CVAT: Flawed authorization logic in endpoints related to lambda requestscvat-ai cvat
- CVE-2026-69113Cap v0.3.1 Broken Access Control via video comment endpointCapSoftware Cap
- CVE-2026-48412Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-48411Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-73219CVAT: Denial of service with regards to automatic annotationcvat-ai cvat
- CVE-2026-65680Microsoft OneDrive for MacOS Elevation of Privilege VulnerabilityMicrosoft OneDrive for MacOS
- CVE-2026-73216coturn: mobility disconnects bypass allocation quotas and exhaust relay capacitycoturn
- CVE-2026-20712Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disclosure.Intel(R) reference platforms
- CVE-2026-20917Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0:Intel(R) Processors
- CVE-2026-72712Nmap 7.99 Denial of Service via Zero-Length TCP Option PacketNmap Project Nmap
- CVE-2026-73213Coturn: `addr_less_eq()` does a component-wise IPv6 comparison instead of a lexicographic one, letting an authenticated TURN client bypass `denied-peer-ip`/`allowed-peer-ip` IPv6 ranges (TURN-specific SSRF)coturn
- CVE-2026-73212coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCEcoturn
- CVE-2026-20901Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege.Intel(R) Xeon(R) processors
- CVE-2026-48790turso-cli persists Turso platform JWT with world-readable (0o644) file permissionstursodatabase turso-cli · github.com/tursodatabase/turso-cli
- CVE-2026-0465A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentialAMD Ryzen™ Master
- CVE-2026-62917Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-62839Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-58639Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-62738Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68799Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68797Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-66809Microsoft Office Graphics Component Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-66810Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-66806Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-65798Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65799Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65797Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65794Windows SMB Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-65795Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-65777Active Directory Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-62882Microsoft Outlook Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-64917Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-64916Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-64899Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-64902Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-64897Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-63531Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63530Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63529Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-63528Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63524Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-62842Microsoft Office Graphics Component Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-62887Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62883Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62881Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62814Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62793Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62786Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62782Windows SMB Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62775Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62769Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62757Windows Schannel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-62730Windows Wired AutoConfig Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62743Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62714Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62720Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62709Windows GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62708Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-61921Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61918Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61920Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2026-61360Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-59131AMD Zen Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72971Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-70348Windows Management Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-65806Azure CycleCloud Information Disclosure VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-70330Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70304Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70328Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-70327Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-70322Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70323Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70320Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70319Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70325Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70317Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70314Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70318Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-70315Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70316Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-70310Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-70312Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-66301Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2026-65769Microsoft Teams iOS Information Disclosure VulnerabilityMicrosoft Teams for iOS
- CVE-2026-68819Windows Network File System Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-68813Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-68809Powerpoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-68808Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-68802Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-65813Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-65784Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-65785Windows DHCP Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-65662Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-64922Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-63521Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-63517Microsoft Office Graphics Component Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-54123Microsoft Defender for Endpoint for Mac Information Disclosure VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2026-62915Microsoft Exchange Server Security Feature Bypass VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62912Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-62902.NET Information Disclosure VulnerabilityMicrosoft .NET 8.0 runtime · Microsoft .NET 9.0 runtime +6
- CVE-2026-62900.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2
- CVE-2026-62899.NET Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +2
- CVE-2026-62796Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62798Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62750Windows HTTP Protocol Stack Tampering VulnerabilityMicrosoft Windows
- CVE-2026-62745Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62742Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62740Windows Imaging Component Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-62746Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62716Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62715Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server 2012 R2 · Microsoft Windows Server
- CVE-2026-62718Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-62703Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-62699Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62702Windows Graphics Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-61936Windows Defender Firewall Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-61933Windows DWM Core Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61928Windows Hello Tampering VulnerabilityMicrosoft Windows
- CVE-2026-61924Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61368Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61350Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61347Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-61345Microsoft Remote Registry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-59138Microsoft Remote Registry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-59137Windows Event Logging Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-59136Microsoft COM for Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-59135Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-59130AMD Zen Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-59128Windows Encrypting File System (EFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-47285Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-40375Microsoft Dynamics Business Central Information Disclosure VulnerabilityMicrosoft Dynamics NAV
- CVE-2026-63516Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-63512Microsoft SharePoint Server Tampering VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-62837Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-62829Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Server
- CVE-2026-48434CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48443CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-47922CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-71390CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48445CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48387CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48436CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48446CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48444CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48435CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-48437CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-71389CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Content Credentials Rust SDK · Adobe Content Crede… +1
- CVE-2026-73087Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcheramir20 dozzle · github.com/amir20/dozzle
- CVE-2026-73085Audiobookshelf: Refresh Token Accepted on Resource Endpointsadvplyr audiobookshelf
- CVE-2026-73084Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpointactivepieces
- CVE-2026-48384ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-48375ColdFusion | Incorrect Authorization (CWE-863)Adobe ColdFusion
- CVE-2026-21269ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)Adobe ColdFusion
- CVE-2026-48376ColdFusion | Improper Encoding or Escaping of Output (CWE-116)Adobe ColdFusion
- CVE-2026-73082Activepieces: Server-side request forgery in MCP tool validation endpointactivepieces
- CVE-2026-39452Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escaIntel(R) Transfer Learning Tool
- CVE-2025-35987Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: KernIntel(R) Software Guard Extensions Data Center Attestation…
- CVE-2025-35973Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privIntel(R) Processors
- CVE-2026-35502Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow anIntel(R) Extension for PyTorch
- CVE-2026-34175Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may alHardware-Aware-Automated-MachineLearning NA
- CVE-2026-32791Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User ApplicationIntel(R) Performance Counter Monitor (Intel(R) PCM)
- CVE-2026-32788Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User ApplicationApproximate Bayesian Inference Framework
- CVE-2026-32677Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege.gaudi-container-runtime
- CVE-2025-31938Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX ma…
- CVE-2025-31356Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow Intel(R) Trust Domain Extensions (Intel(R) TDX)
- CVE-2026-28757Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalationIntel(R) Workload Services Framework software
- CVE-2026-28729Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure.Intel(R) Slim Bootloader may allow an information disclosur…
- CVE-2026-28707Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege.LLM-on-Ray
- CVE-2026-28700Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege.EquiTriton
- CVE-2026-27765Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User ApplicationvLLM Hardware Plugin for Intel(R) Gaudi(R) software
- CVE-2026-25194Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service.Intel(R) Slim Bootloader may allow a denial of service. Sys…
- CVE-2026-24693Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow Intel(R) oneCCL Bindings for PyTorch
- CVE-2026-24099Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-21400Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalIntel(R) AI Reference Models
- CVE-2026-21399Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) lib…
- CVE-2026-21387Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilegeIntel(R) LLM Library for PyTorch
- CVE-2026-20913Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escIntel(R) Neural Compressor software
- CVE-2026-20908Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a Intel(R) NPU Driver for Windows
- CVE-2026-20906Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an Intel(R) Neural Compressor software
- CVE-2026-20903Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation Intel(R) AI Containers
- CVE-2026-20891Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation ofIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20886Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20799Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escaBattery Life Diagnostic Tool software
- CVE-2026-20786Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.Intel(R) NPU Driver
- CVE-2026-20783Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of sIntel(R) NPU Driver
- CVE-2026-20780Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a deniIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20775Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service.Intel(R) TDX modules
- CVE-2026-20770Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User ApplicatiCluster Management Toolkit for Kubernetes software
- CVE-2026-20769Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.Intel(R) NPU Driver
- CVE-2026-20765Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of pIntel(R) TDX Guest software
- CVE-2026-20763Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of Intel(R) TDX Guest software
- CVE-2026-20760Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may alIntel(R) Processors
- CVE-2026-20755Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege.LLM Scaler software
- CVE-2026-20752Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure.Intel(R) PROSet/Wireless WiFi Software
- CVE-2026-20737Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: DeviceIntel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-20734Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard ManageabiIntel(R) Active Management Technology (Intel(R) AMT), and s…
- CVE-2026-20731Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.Intel(R) NPU Driver
- CVE-2026-20728Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may aIntel Extension for TensorFlow software
- CVE-2026-20713Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege.Intel(R) Xeon(R) processors may allow an escalation of priv…
- CVE-2026-20708Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an infoIntel(R) AMT and Intel(R) Standard Manageability may allow…
- CVE-2026-20707Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow3rd Gen Intel(R) Xeon(R) Scalable Processors
- CVE-2026-20705Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow informIntel(R) platform
- CVE-2026-48483TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot serverbaptisteArno typebot.io
- CVE-2026-18247DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web PortalsBlackBerry AtHoc IWS
- CVE-2026-53414Zoom Clients - Buffer Over-readZoom Communications Zoom Clients
- CVE-2026-56720CamaleonCMS 2.9.2 and earlier Missing Authorization via profile Actionowen2345 CamaleonCMS
- CVE-2026-73075Vim: Out-of-bounds Access in Popup Opacity Handlingvim
- CVE-2026-19078Ose-oauth-server: oauth-server: open redirect vulnerability enables phishing via unvalidated parameter.Red Hat OpenShift Container Platform
- CVE-2026-14180Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlapRed Hat JBoss Enterprise Application Platform 8.1.8.GA ·… +7
- CVE-2026-73071Vim: Use-after-free in JSON Decodingvim
- CVE-2026-6727CVE-2026-6727Trusted Computing Group TPM2.0
- CVE-2026-73070Vim: Stack Buffer Overflow in the Vim Socket Servervim
- CVE-2026-9214Insufficient input validation in NETGEAR R7000 router allows administrators to tamper with the device.NETGEAR R7000
- CVE-2026-11736Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routersNETGEAR RAX20 · NETGEAR RAX35v2 +17
- CVE-2026-11735Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk modelsNETGEAR R7000 · NETGEAR RAX20 +18
- CVE-2026-11738Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.NETGEAR R7000 · NETGEAR RAXE500 +1
- CVE-2026-11739Command injection vulnerability in some NETGEAR Nighthawk devicesNETGEAR MR60 · NETGEAR MR70 +25
- CVE-2026-11734Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices.NETGEAR MR70 · NETGEAR MR90 +13
- CVE-2026-11733Buffer overflow vulnerability in some NETGEAR Nighthawk routersNETGEAR RAX41 · NETGEAR RAX41v2 +9
- CVE-2026-11737Some NETGEAR Nighthawk devices allow administrators to tamper with the deviceNETGEAR RAX20 · NETGEAR RAX41 +11
- CVE-2026-11814Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routersNETGEAR BE9300 · NETGEAR MR60 +24
- CVE-2026-73068ToolJet: Cross-tenant Broken Access Control in ToolJet Database (tooljet-db): any authenticated user can read and write another organization's tablesToolJet
- CVE-2026-18638Velociraptor server crash via the SetPassword APIRapid7 Velociraptor
- CVE-2026-73067Tesseract: Heap OOB read in the DAWG loadertesseract-ocr tesseract
- CVE-2026-73066Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddatatesseract-ocr tesseract
- CVE-2026-17535Velociraptor Multiple Crashes in NTFS Parser when applied to invalid NTFS VolumesRapid7 Velociraptor
- CVE-2026-72925SWC HTML minifier may allow script element breakout when minifying embedded JSONswc-project swc · @swc html +3
- CVE-2026-18636Velociraptor VFSGetBuffer API path deny list bypassRapid7 Velociraptor
- CVE-2026-73210Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCaptureLookyloo PlaywrightCapture
- CVE-2026-19434Stored Cross-site Scripting in Pentestify finding severity fieldmaalfer Pentestify
- CVE-2026-69108A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1).Siemens License Server
- CVE-2026-59693A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), DesSiemens Desigo DXR2 · Siemens Desigo PXC3 +4
- CVE-2026-57263A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).Siemens LOGO! Soft Comfort
- CVE-2026-57262A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).Siemens LOGO! Soft Comfort
- CVE-2026-72784Craft CMS 5.0.0-RC1 before 5.10.6 SSRF via GraphQL asset mutationcraftcms cms
- CVE-2026-72783Craft CMS 5.0.0-RC1 before 5.10.6 Path Traversal via ensurePathIsContainedcraftcms cms · craftcms/cms
- CVE-2026-72775n8n before 1.123.67 SQL Injection via PostgresTrigger Noden8n-io n8n · n8n
- CVE-2026-72773n8n before 2.32.1 Path Traversal via computer-use search_filesn8n-io n8n · n8n
- CVE-2026-72769n8n before 1.123.67 Prototype Pollution via VM Expression Enginen8n-io n8n · n8n
- CVE-2026-72768n8n before 2.32.1 SSRF Protection Bypass via MCP Clientn8n-io n8n · n8n
- CVE-2026-72764n8n before 1.123.67 Module Cache Poisoning via Code Noden8n-io n8n · n8n
- CVE-2026-72750n8n before 1.123.67 SQL Injection via executeQuery Operationn8n-io n8n · n8n
- CVE-2026-72748AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.phpWWBN AVideo
- CVE-2026-72747AVideo Stored Cross-Site Scripting via Unauthenticated RegistrationWWBN AVideo
- CVE-2026-72744Nuxt before 4.5.1 Information Disclosure via Chrome DevToolsnuxt
- CVE-2026-72610Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip GenerationKoha Community Koha
- CVE-2026-72608Koha Community Koha - Stored SQL Injection via Patron Card Layout image_nameKoha Community Koha
- CVE-2026-72604Intelliants Subrion CMS - Path TraversalIntelliants Subrion CMS
- CVE-2026-72598Apioo Fusio - Server-Side Request ForgeryApioo Fusio
- CVE-2026-72597Friendica Friendica - Server-Side Request ForgeryFriendica
- CVE-2026-72560HumanSignal Label Studio - Server-Side Request ForgeryHumanSignal Label Studio
- CVE-2026-72559Daniel Brendel HortusFox - Cross-Site ScriptingDaniel Brendel HortusFox
- CVE-2026-72554Ladybird Web Solution Faveo Helpdesk - Broken Access ControlLadybird Web Solution Faveo Helpdesk
- CVE-2026-72553ElkArte Forum ElkArte - Cross-Site ScriptingElkArte Forum ElkArte
- CVE-2026-72549OpenSignLabs OpenSign - Information DisclosureOpenSignLabs OpenSign
- CVE-2026-72542Windmill Labs Windmill - Missing AuthorizationWindmill Labs Windmill
- CVE-2026-72541Windmill Labs Windmill - Missing AuthorizationWindmill Labs Windmill
- CVE-2026-72539Windmill Labs Windmill - Information DisclosureWindmill Labs Windmill
- CVE-2026-33922Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0Nozomi Networks Arc
- CVE-2026-33921Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0Nozomi Networks Arc
- CVE-2026-73162cti-transmute CSRF Allows Unauthorized Follow and Notification State ChangesMISP cti-transmute
- CVE-2026-73161cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search HighlightingMISP cti-transmute
- CVE-2026-71218Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustionRed Hat Enterprise Linux
- CVE-2026-73159cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage InterfaceMISP cti-transmute
- CVE-2026-73158cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIconMISP cti-transmute
- CVE-2026-73157cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event MetadataMISP cti-transmute
- CVE-2026-19519Claircore: claircore: denial of service via unchecked type assertion in rpm header parserRed Hat Advanced Cluster Security · Red Hat Quay
- CVE-2026-73156cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion DataMISP cti-transmute
- CVE-2026-73155cti-transmute Missing Authorization Allows Reactions to Private CommentsMISP cti-transmute
- CVE-2026-73140cti-transmute Evaluation Report Exports Expose Private Comments and Author InformationMISP cti-transmute
- CVE-2026-19518Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.Samsung Open Source rlottie
- CVE-2026-19391Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archivesPen Drive Powered by Red Hat Lightspeed · Red Hat Certif… +2
- CVE-2026-19517Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open SoSamsung Open Source rlottie
- CVE-2026-14549Ray Enterprise Translation <= 1.7.3 - Subscriber+ Language Addition and DeletionRay Enterprise Translation
- CVE-2026-14548Ray Enterprise Translation <= 1.7.3 - Subscriber+ Arbitrary API Token UpdateRay Enterprise Translation
- CVE-2026-12052Out-of-bounds write in USB CDC NCM control handler when host wLength is smaller than the responsezephyrproject zephyr
- CVE-2026-6505The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2026-5304An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2026-5303The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2026-8158The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash.Axis Communications AB Signed Video Framework · Axis Com… +1
- CVE-2026-6181The Device Configuration Framework is vulnerable to an authentication bypass flaw.Axis Communications AB AXIS OS
- CVE-2026-18348Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL pluginsRapid7 Velociraptor
- CVE-2026-12051NULL pointer dereference in USB DFU device_next download handler (handle_download)zephyrproject zephyr
- CVE-2026-11894Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error pathszephyrproject zephyr
- CVE-2026-11985Cross-thread FPU register leak on ARM when FPU enabled without register sharingzephyrproject zephyr
- CVE-2026-11893Double free / use-after-free in Bouffalo Lab HCI driver send() error paths (hci_bflb)zephyrproject zephyr
- CVE-2026-16974Kirki - Freeform Page Builder, Website Builder & Customizer <= 6.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_meta Shortcodethemeum Kirki – Freeform Page Builder, Website Builder & Cu…
- CVE-2026-24330Wildfly-core: wildfly: arbitrary file read via malicious archive deploymentRed Hat Fuse · Red Hat JBoss Enterprise Application Plat… +2
- CVE-2026-24329Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.Red Hat Fuse · Red Hat JBoss Enterprise Application Plat… +2
- CVE-2026-66779Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAPSAP_SE SAP NetWeaver Application Server ABAP
- CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66777Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66776Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66775Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66774Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66773Server-controlled `__next` URL is not checking cross-originSAP_SE Odata
- CVE-2026-66772Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2026-66771Cross Site Scripting (XSS) vulnerability in SAPUI5SAP_SE SAPUI5
- CVE-2026-66770SQL Injection vulnerability in SAP Social IntelligenceSAP_SE SAP Social Intelligence
- CVE-2026-66764Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)SAP_SE SAP S/4 HANA
- CVE-2026-66761Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-66760Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-58248XML External Entity Injection in SAP BusinessObjects Business IntelligenceSAP_SE SAP BusinessObjects Business Intelligence
- CVE-2026-58247Memory Corruption vulnerability in SAP ABAP PlatformSAP_SE SAP ABAP Platform
- CVE-2026-58245Hard-coded Credentials in SAP Advanced Planning and Optimization (Model Mix Planning)SAP_SE SAP Advanced Planning and Optimization
- CVE-2026-58244Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)SAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-58241Missing Authorization Check in SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard)SAP_SE SAP NetWeaver and ABAP Platform (Change and Transpor…
- CVE-2026-58239Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-58238Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-58237Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE SAP Business AI Platform
- CVE-2026-58236OS Command Injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2026-58235Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)SAP_SE SAP NetWeaver AS Java
- CVE-2026-44762Security Misconfiguration in SAP Data Services Management ConsoleSAP_SE SAP Data Services Management Console
- CVE-2026-40130Memory Corruption vulnerability in SAPSPrint ServiceSAP_SE SAPSPrint Service