CVEs published September 8, 2026
1,563 CVEs were published on September 8, 2026: 96 critical, 926 high. 3 are now in CISA KEV.
- Published
- 1,563
- Critical
- 96
- High
- 926
- Medium
- 512
- Low
- 29
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 1,129
Most affected products
- Microsoft Windows
- 701
- Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- 104
- Google Android
- 88
- Microsoft SQL Server
- 62
- Microsoft 365 Apps for Enterprise · Microsoft Office +1
- 43
- Adobe Acrobat
- 32
- Microsoft 365 Apps for Enterprise · Microsoft Excel +1
- 30
- Microsoft 365 Apps for Enterprise · Microsoft Office
- 26
- MongoDB Server
- 24
- n8n-io n8n · n8n
- 17
Critical 96
- CVE-2026-53939OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryptionOpenIDC cjose
- CVE-2026-53581ntp: write path traversalopnsense core
- CVE-2026-85982Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP ConnectorAuth0 AD/LDAP Connector
- CVE-2026-84197In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oEclipse Foundation Eclipse Ditto
- CVE-2026-19232Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-86464In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deploEclipse Foundation Eclipse aeriOS
- CVE-2026-75746ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe ColdFusion
- CVE-2026-48273ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)Adobe ColdFusion
- CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer ActionsConnectWise ScreenConnect
- CVE-2026-28659In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check.Google Android XR
- CVE-2026-49883In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permissioGoogle Android Wear
- CVE-2026-82004Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Campaign Classic
- CVE-2026-66302Skype for Business Remote Code Execution VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-76200Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-76201Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-58822In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting.Google Android
- CVE-2026-49921In multiple locations, there is a possible memory safety issue due to a heap buffer overflow.Google Android
- CVE-2026-28606In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code.Google Android
- CVE-2026-69595Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-78445Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-69854Spring Cloud Azure Elevation of Privilege VulnerabilityMicrosoft Spring Cloud Azure
- CVE-2026-73025Windows iSCSI Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-73010Microsoft Failover Cluster Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73009Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70296Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69590Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69910Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69769Windows HTTP Print Provider Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69829Windows Shell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69845Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69824Microsoft Standard XPS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69768Windows RNDIS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69715Windows Direct Show Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69586Microsoft Windows PDF Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69493Windows Event Logging Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68839Windows USB Mass Storage Class Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-81376Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-65669Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server Management Studio
- CVE-2026-67643Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67636Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-78509Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-67378Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-77493Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69579Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72982Windows Netlogon Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72983Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72979Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69641Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69356Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69730Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69819RPC Runtime Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69525Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69496Windows Compressed Folder Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69463Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69491Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69431Telnet Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69408Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69276Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-67631Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-83941Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2026-82533DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header SpoofingDeepSeek Harness · @deepseek-ai/dsh-client-connection
- CVE-2026-75156Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypassApache Software Foundation Apache Airflow FAB provider
- CVE-2026-82067Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at StartupMongoDB Server
- CVE-2026-86840Bifrost Unauthorized Channel Commission Attribution Allows Commission DiversionBitfrost.io Bifrost
- CVE-2026-86738Snipe-IT before 8.7.0 CSS Injection via Custom CSSgrokability snipe-it
- CVE-2026-86729WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorizeWWBN AVideo
- CVE-2026-12647A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary cIvanti Neurons for ITSM
- CVE-2026-12646A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary cIvanti Neurons for ITSM
- CVE-2026-12645A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary cIvanti Neurons for ITSM
- CVE-2026-12650A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to executeIvanti Neurons for ITSM
- CVE-2026-61516Netis NX10 Credential Disclosure via sysinfo Diagnostic EndpointNetis Systems NX10
- CVE-2026-12745A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execuIvanti Neurons for ITSM
- CVE-2026-12744A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execuIvanti Neurons for ITSM
- CVE-2026-73312XenForo < 2.3.13 Refresh Token Replay via Expired Access TokenXenForo
- CVE-2026-73311XenForo < 2.3.13 OAuth2 Authorization Code ReuseXenForo
- CVE-2026-73309XenForo < 2.3.13 Authentication Bypass via OAuth2 Token EndpointXenForo
- CVE-2026-77089Command Center API Authentication BypassCommvault Cloud
- CVE-2026-78234Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit usersRed Hat build of Apache Camel - HawtIO
- CVE-2026-71377Command Argument Injection Vulnerability in Cosminexus Component ContainerHitachi Cosminexus Component Container
- CVE-2026-62645A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-50093A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versionSiemens Siveillance Control Pro · Siemens Siveillance Contr…
- CVE-2026-71376OS Command Injection Vulnerability in Cosminexus Component ContainerHitachi Cosminexus Component Container
- CVE-2026-71374Deserialization of Untrusted Data Vulnerability in Cosminexus Component ContainerHitachi Cosminexus Component Container
- CVE-2026-86510D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds writeD-Link DIR-822A
- CVE-2026-86509D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflowD-Link DIR-895L
- CVE-2026-76969Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)SAP_SE SAP Cloud Application Programming Model · @sap/cds-m…
- CVE-2026-66768Improper Access Control in SAP NetWeaver (SAP GUI for Java)SAP_SE SAP NetWeaver
- CVE-2026-58240Missing Authentication check in SAP NetWeaver (Message Server)SAP_SE SAP NetWeaver
- CVE-2026-44756Memory Corruption vulnerability in SAP Extended Passport (EPP) ProcessingSAP_SE SAP Extended Passport (EPP) Processing
- CVE-2026-78997UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows
- CVE-2026-79569Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.
- CVE-2026-79570mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.
- CVE-2026-79571Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all
- CVE-2026-79574An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.
- CVE-2026-79576An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the
- CVE-2026-79577An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sendi
High 926
- CVE-2026-53938OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)OpenIDC cjose
- CVE-2026-55250Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Cachesmacropay-solutions maravel-framework
- CVE-2026-86075n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpointn8n-io n8n · n8n
- CVE-2026-86076n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Executionn8n-io n8n · n8n
- CVE-2026-86081n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Pathn8n-io n8n · n8n
- CVE-2026-86082n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Noden8n-io n8n · n8n
- CVE-2026-86083n8n: Expression Sandbox Escape via Shared Builtin Tampering and Code-Printer Injection Leads to Code Executionn8n-io n8n · n8n
- CVE-2026-81989Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81980Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat
- CVE-2026-81990Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81987Acrobat Reader | Integer Overflow or Wraparound (CWE-190)Adobe Acrobat
- CVE-2026-79907Acrobat Reader | Double Free (CWE-415)Adobe Acrobat
- CVE-2026-79909Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81973Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81988Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81986Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81981Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat
- CVE-2026-80161Acrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)Adobe Acrobat
- CVE-2026-81976Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81994Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)Adobe Acrobat
- CVE-2026-81985Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81979Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat
- CVE-2026-81996Acrobat Reader | Incorrect Authorization (CWE-863)Adobe Acrobat
- CVE-2026-81992Acrobat Reader | Heap-based Buffer Overflow (CWE-122)Adobe Acrobat
- CVE-2026-81983Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat
- CVE-2026-81975Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-79908Acrobat Reader | Out-of-bounds Write (CWE-787)Adobe Acrobat
- CVE-2026-86819Waves Central local privilege escalation via Improper XPC Client Authentication in macOSWaves Audio Waves Central
- CVE-2026-77827Maono Link local privilege escalationMaono Link
- CVE-2026-85983Local Privilege Escalation in Auth0 AD/LDAP ConnectorAuth0 AD/LDAP Connector
- CVE-2026-81192OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOSopen-telemetry opentelemetry-dotnet-contrib · OpenTelemetry…
- CVE-2026-19651IBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesIBM Enterprise Build of Quarkus
- CVE-2026-78627Improper Credential Protection in Okta Hyperdrive Integration Installer LoggingOkta Hyperdrive Integration Plugin
- CVE-2026-78574Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry HandlingOkta Hyperdrive Integration Plugin
- CVE-2026-78626Improper Input Sanitization in Okta Access Gateway Protected RulesOkta Access Gateway
- CVE-2026-78623Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode DatastoresOkta Access Gateway
- CVE-2026-84942Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsAWS Amazon OpenSearch Service · OpenSearch Dashboards
- CVE-2026-75998ColdFusion | Improper Access Control (CWE-284)Adobe ColdFusion
- CVE-2026-76190ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)Adobe ColdFusion
- CVE-2026-75999ColdFusion | Improper Input Validation (CWE-20)Adobe ColdFusion
- CVE-2026-75993ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe ColdFusion
- CVE-2026-75771Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-75631Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-75862Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-76199Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)Adobe Photoshop
- CVE-2026-82005Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-82007Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-82006Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop
- CVE-2026-75863Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)Adobe Photoshop
- CVE-2026-75991Illustrator | Improper Input Validation (CWE-20)Adobe Illustrator Desktop
- CVE-2026-75990Illustrator | Incorrect Authorization (CWE-863)Adobe Illustrator Desktop
- CVE-2026-75992Illustrator | Out-of-bounds Write (CWE-787)Adobe Illustrator Desktop
- CVE-2026-85384Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration ImportTP-Link Systems RE210 AC750
- CVE-2026-66307Skype for Business and Lync Denial of Service VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-69646Skype for Business Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-66305Skype for Business Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-66304Skype for Business Information Disclosure VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-82537Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary MismatchRooCodeInc Roo-Code
- CVE-2026-82536Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe OperatorRooCodeInc Roo-Code
- CVE-2026-79721Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact tomlflow
- CVE-2026-77109Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-77110Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-77108Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-76202Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-77774Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-77111Adobe Commerce | Incorrect Authorization (CWE-863)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-58941In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation.Google Android
- CVE-2026-58874In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check.Google Android
- CVE-2026-58848In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition.Google Android
- CVE-2026-58846In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check.Google Android
- CVE-2026-58839In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow.Google Android
- CVE-2026-58823In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check.Google Android
- CVE-2026-58820In multiple locations, there is a possible memory safety issue due to integer overflow.Google Android
- CVE-2026-55294In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2026-55285In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55277In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2026-55273In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation.Google Android
- CVE-2026-49932In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow.Google Android
- CVE-2026-49927In multiple locations, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-49919In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow.Google Android
- CVE-2026-49918In multiple functions, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-49887In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass.Google Android
- CVE-2026-49884In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2026-49882In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow.Google Android
- CVE-2026-49881In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code.Google Android
- CVE-2026-49879In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-45531In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow.Google Android
- CVE-2026-45528In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent.Google Android
- CVE-2026-45520In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy.Google Android
- CVE-2026-45515In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overfGoogle Android
- CVE-2026-28668In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-28666In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering checkGoogle Android
- CVE-2026-28664In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error in the code.Google Android
- CVE-2026-28663In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL BypassGoogle Android
- CVE-2026-28662In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2026-28658In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code.Google Android
- CVE-2026-28657In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy.Google Android
- CVE-2026-28656In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack.Google Android
- CVE-2026-28655In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code.Google Android
- CVE-2026-28653In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2026-28650In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code.Google Android
- CVE-2026-28644In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-28642In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2026-28639In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code.Google Android
- CVE-2026-28636In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy.Google Android
- CVE-2026-28634In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error iGoogle Android
- CVE-2026-28631In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack.Google Android
- CVE-2026-28626In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection .Google Android
- CVE-2026-28624In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy.Google Android
- CVE-2026-28620In multiple locations, there is a possible unauthorized URI access due to a permissions bypass.Google Android
- CVE-2026-28618In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buffer overflow.Google Android
- CVE-2026-28616In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy.Google Android
- CVE-2026-28614In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-28613In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation.Google Android
- CVE-2026-28612In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code.Google Android
- CVE-2026-28611In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check.Google Android
- CVE-2026-28609In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting.Google Android
- CVE-2026-28607In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy.Google Android
- CVE-2026-28604In multiple locations, there is a possible use after free due to a race condition.Google Android
- CVE-2026-28603In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confusedGoogle Android
- CVE-2026-28602In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in Google Android
- CVE-2026-28600In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy.Google Android
- CVE-2026-28599In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code.Google Android
- CVE-2026-28594In multiple locations, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2026-28593In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI.Google Android
- CVE-2026-28590In multiple locations, there is a possible improper encryption key validation due to a logic error in the code.Google Android
- CVE-2026-28583In validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code.Google Android
- CVE-2026-28572In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack.Google Android
- CVE-2026-0084In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2026-0065In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in Google Android
- CVE-2026-81821AVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic keyAVEVA Pipeline Integrity Monitor
- CVE-2026-81822AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic AlgorithmAVEVA Pipeline Integrity Monitor
- CVE-2026-76196Photoshop Mobile | Session Fixation (CWE-384)Adobe Photoshop Android
- CVE-2026-62804Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365 fo…
- CVE-2026-84003Microsoft Authentication Library (MSAL) for Node.js Spoofing VulnerabilityMicrosoft Authentication Library
- CVE-2026-83498Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69806.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +2
- CVE-2026-84000Microsoft Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83997Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83995Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83992Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83990Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83989Windows Services for NFS ONCRPC XDR Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83985Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83983Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83987Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83980Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83982Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83978Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83977Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83981Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83973Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83968Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83972Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83970Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83967Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83954Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83971Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69598Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72965Windows WebClient Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69530Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-81963Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83948Microsoft Azure CLI Remote Code Execution VulnerabilityMicrosoft Azure CLI
- CVE-2026-77897Microsoft Power Automate Desktop Elevation of Privilege VulnerabilityMicrosoft Power Automate agent for virtual desktops · Micro…
- CVE-2026-57099ASP.NET Core Denial of Service VulnerabilityMicrosoft AspNetCore.OData
- CVE-2026-83939Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83940Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77906Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2026-81948Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81950Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81949Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81953Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81959Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81952Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-81951Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81955Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-81388Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81957Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81960Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81389Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81956Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81397Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81396Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81954Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81947Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81386Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81398Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81385Microsoft Office Publisher Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-81383Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81354Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-81353HEIF Image Extensions Remote Code Execution VulnerabilityMicrosoft HEIF Image Extension
- CVE-2026-81352Web Media Extensions Remote Code Execution VulnerabilityMicrosoft Web Media Extensions
- CVE-2026-80096Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-80081Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2026-80085Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-80080Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78525Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78526Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78524Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78521Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78519Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-77481Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-78514Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78512Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78507Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-66819Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-78464Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-78462Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-78457Windows Security Health Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-78456SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-78448Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-78447Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-78450Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-78444Microsoft Failover Cluster Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-78449Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-78446Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-78442Windows OLE DB Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-77905Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77901Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-77486Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-77485SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-77487SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-77484Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-77483SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-77480SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-73028SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-71328.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +6
- CVE-2026-73017Graphics Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73016DirectWrite Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73013Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Windows
- CVE-2026-73023Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73006DirectWrite Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-73012Windows Management Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73026Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73007Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73024Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73005Windows Authentication Methods Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73014Data Sharing Service Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73011Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73022Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73003Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73015Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73021Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73001Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73000Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73020Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73002Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73018Graphic Fonts Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72997Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72996Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72994Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72993Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72992Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72991Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72990Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72988Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72995Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72987Windows DNS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72989Windows Failover Cluster Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69465Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-65772Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2026-72973Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-72972Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-70570Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70203Windows Media Player Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69906Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69441Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69805.NET Elevation of Privilege VulnerabilityMicrosoft Visual Studio · Microsoft.Diagnostics.Runtime
- CVE-2026-69439.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +6
- CVE-2026-69632Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69477Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-69629Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69614Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-69464Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69442Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69601Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69607Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69575Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69593Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69564Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69560Windows Work Folder Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69510Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69499Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-69489Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69426Windows VOLSNAP.SYS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69417Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69402Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69397Microsoft OpenSSH for Windows Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69392Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69352Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69311Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69298Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69323Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69334Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69291Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69290Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69309Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69287Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68896Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72967Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72961Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72960Windows Media Player Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72954Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72959Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72950Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72957Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72941Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72953Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72952Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72932Windows Message Queuing Queue Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72933Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72936Windows SMB Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72928Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-71352Windows Remote Access Connection Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-71342Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70583Windows Core Messaging Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70579Windows Mobile Broadband Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70578Windows Credential Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70577Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70581Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70572Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70573Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70569Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70568Windows Defender Firewall Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70567Windows Display Enhancement Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70574Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-70565Windows AF_UNIX Socket Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-47297Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-58599HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-69784Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69820Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69864Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69725Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69874Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69858Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-69710Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69813Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69799Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69786Windows Text Shaping Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69852Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69876Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69807PowerShell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69777Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69760Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69911Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69847Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69891Windows Media Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69900Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69818Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69907Windows Enterprise App Management Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69785Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69708Windows Web Platform Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69761Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69809Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69779Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69921Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69793Windows TCP/IP Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69706Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69773Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69731HID Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69814Windows Credential Providers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69692Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69801Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69738Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69826Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69727Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-76191Animate | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Animate
- CVE-2026-69841Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69688Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69866Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69844Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69709Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69714Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69816Windows Accounts Control Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69654Windows Accounts Control Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69834Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69652Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69707Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69791Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69687Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69643Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69685Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69682Windows Host Guardian Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69821Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69720Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-69620Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69619Windows exFAT File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69817Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69680Windows DNS Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-69881Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69669Windows Kernel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69613Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69610Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office LTSC for Mac
- CVE-2026-69630Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69617Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69611Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-69602Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69597Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69625Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69606Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69600Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69584Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69592Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69567Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69612Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69581Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69542Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69538Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69535Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69571Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69546Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69536Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69547Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69599Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69509Role: Windows Fax Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69508Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-69503Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69498Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69512Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69511Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69488Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69578Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69480Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69561Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69478Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69482Windows Error Reporting Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69467Microsoft Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69460Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69459Windows Power Dependency Coordinator Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69456Microsoft Windows Speech Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69462Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69445Windows Compressed Folder Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69466Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69444Microsoft Windows Speech Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69440Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-69434Windows URL Moniker Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69433Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69447Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69430Windows Embedded Mode Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69475Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69427Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69438Microsoft JScript Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69422Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69428Windows LDAP - Lightweight Directory Access Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69424Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69407Volume Manager Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69421Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69398Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69410Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69396Windows NDIS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69388Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69386Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69385Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69364Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69365Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69360Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69384Virtual Hard Disk (VHD) Miniport Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69357Windows NDIS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69358Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69348Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69346Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69342Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69340Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69335Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69332Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69331Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69328Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69329BranchCache Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69324Windows Performance Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69322Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69319Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69312Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69313Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69301Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69300Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69314Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69289Windows Setup Files Cleanup Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69283Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69295Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69299Microsoft COM for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69275Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69284Windows DCOM Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69305Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69277Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69270Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69269Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69280Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68894Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69266Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69274Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69272Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68889Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68888Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68885Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69265Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68850Microsoft Account Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68876Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68880Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-68848Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68840Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68838Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68834Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68827Windows GDI+ Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68828Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68775Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67642Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67639Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67638Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67388Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67385Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67381Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-67380Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-66820SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-66818Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-66814Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-56172Windows VHD miniport driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62697Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62813Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62759Windows Netlogon Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-62810Active Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-58611Xbox Gaming Services Elevation of Privilege VulnerabilityMicrosoft Xbox Gaming Services
- CVE-2026-56198Microsoft Trace Data Helper Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-56177Windows Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85877Windows Print Spooler Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-84001Windows Key Distribution Center Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83999Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83998Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83996Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83976Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83975Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83974Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83979Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83988Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83969Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83986Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83955Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69492Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69573Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72940Windows Schannel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72949Windows SMB Server Network Transport Driver (srvnet.sys) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69827Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69989Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-83952Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83942Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70065Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-81379Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81378Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81357Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81356Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81355Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-81349Azure HDInsight Ambari Elevation of Privilege VulnerabilityMicrosoft Azure HDInsight
- CVE-2026-80097Microsoft Authenticator Elevation of Privilege VulnerabilityMicrosoft Authenticator for Android
- CVE-2026-80093Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-80083Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-80075Windows Work Folders Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-80077Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop
- CVE-2026-80074Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop
- CVE-2026-68786Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-78518Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-78517Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78504Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78510Microsoft Outlook and Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78505Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78511Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-67384Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67379Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67376Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-78463Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop
- CVE-2026-78461Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-78439Microsoft Office Graphics Component Remote Code Execution VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-77909Azure CycleCloud Information Disclosure VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-77908Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 Customer Engagement
- CVE-2026-77907Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2026-77904Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77899Windows Security Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77898Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69282Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69273Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69285Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69268Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-77895Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77894Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77893Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77889Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77890Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77886Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77888Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77505Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77504Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77503Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77502Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77501Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77499Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77500Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77498Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77494Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77489Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72986Graphic Fonts Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69787Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69476Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72981IP Helper Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77495Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70283Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69846Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69804Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69797Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69767Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69778Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-69764Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69759Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69529Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Access +1
- CVE-2026-69724Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69742Microsoft Office Publisher Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69716Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69722Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69686Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69678Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69671Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69649Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2026-69603Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69604Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69576Graphic Fonts Elevation of Privilege VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-69580Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69589Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69583Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69556Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69544Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69518Windows Remote Desktop Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69501Windows Secure Kernel Mode Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69443Windows Device Health Attestation (DHA) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69394Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69383Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69380Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69378Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69355Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69293Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68887Windows Message Queuing Queue Manager Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-68877Windows Storage Spaces Controller Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68844Windows Storage Spaces Controller Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68837Windows File History Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68825Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72963Windows Modern Execution Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72962Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72958Windows Credential Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72943Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72946Microsoft Storage Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72944Role: Windows Fax Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72930Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-71351Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72929Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71345Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-71353Windows Routing and Remote Access Service (RRAS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71343Windows Remote Access Connection Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-72926Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71340Windows File History Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71334Windows NFS Portmapper Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71332Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71337Windows Storage Management Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71333Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71330Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-71336Windows Work Folder Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70587Windows Remote Desktop Protocol Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70586Windows Paint Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70585Windows Services for NFS ONCRPC XDR Driver Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70584Windows Core Messaging Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70564Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70563Windows Shell Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-72923Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionmicrosoft OpenAPI.NET · Microsoft.OpenApi.YamlReader +1
- CVE-2026-70562Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70351Microsoft WebP Image Extension Remote Code Execution VulnerabilityMicrosoft WebP Image Extension
- CVE-2026-58600HEVC Video Extensions Elevation of Privilege VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-70342Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70289Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70334Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-69890Windows Virtual Trusted Platform Module Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69740Windows Hello Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69676Windows Kerberos Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69712Windows Key Distribution Center Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-69860Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69732Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69822Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69758Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69775Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69772Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69838Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69691Windows Spaceport.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69744Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69762Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69735Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69896Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69681Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-69757Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69889Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69875Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69694Windows IP Address Management (IPAM) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69711Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69717Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69729Windows Credential Providers Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69693Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69859Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69638Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69631Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69790Windows Credential Providers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69628Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69689Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69623Windows HTTP Print Provider Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69648Windows Notification Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69645Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69605Microsoft Install Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69594Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69587Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69588Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69608Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69585Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69553Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69563Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69541Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-69549Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege VulernabilityMicrosoft Windows
- CVE-2026-69540Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69574Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69534Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69528Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69524Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69582Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69539Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69621Role: Windows Fax Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69516Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69514Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69551Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69505Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69500Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69517Windows Wireless Networking Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69495Windows Event Logging Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69494Windows Event Logging Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69481Windows Enterprise App Management Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69479Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69473Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69470Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69468Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69472Windows Devices Human Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69461Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69485Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69450Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69451Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69532Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69455Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69513Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69432Volume Manager Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69448Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69458Windows BitLocker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69429Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69423Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69436Windows State Repository Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69420Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69412Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69418Volume Manager Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69413Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69401Audio Video Control Transport Protocol Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69404Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69391Windows Broker Infrastructure Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69379Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69371Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69368Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69389Windows Storage Management Provider Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69359Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69362Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69377Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69347Windows Fast FAT Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69338Remote Desktop Gateway Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69333Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69337Windows Registry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69366Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69310Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69336Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69325Microsoft JScript Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69296Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69279Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69307Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69292Remote Desktop Gateway Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69281Windows License Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68893Remote Desktop Licensing Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68892Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69271Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68890Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68884Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68878Windows Fast FAT Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68897Microsoft Standard XPS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68875Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68846Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68845Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68847Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68841Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68835Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68832Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68824Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68787Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67373Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-67370Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-67368Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-50349Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-55007Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2026-57098Microsoft Remote Desktop App for Windows Information Disclosure VulnerabilityMicrosoft Remote Desktop client for Windows Desktop
- CVE-2026-77482Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-85360Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69782Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69522.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +8
- CVE-2026-69341Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62895Azure Arc SQL Server Extension Elevation of Privilege VulnerabilityMicrosoft Azure Arc SQL Server Extension
- CVE-2026-62744Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62694Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-62706Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-84393A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.Fortinet FortiOS · Fortinet FortiProxy
- CVE-2026-26084A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5Fortinet FortiSandbox PaaS · Fortinet FortiSandbox
- CVE-2026-82076Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB ServerMongoDB Server
- CVE-2026-82075Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of ServiceMongoDB Server
- CVE-2026-82074Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection DataMongoDB Server
- CVE-2026-82073Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas SearchMongoDB Server
- CVE-2026-82071Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds WriteMongoDB Server
- CVE-2026-82070Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting InterfaceMongoDB Server
- CVE-2026-82068Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of ServiceMongoDB Server
- CVE-2026-82065Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted MetadataMongoDB Server
- CVE-2026-82064Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set MembersMongoDB Server
- CVE-2026-82062Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate BypassMongoDB Server
- CVE-2026-82061Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of ServiceMongoDB Server
- CVE-2026-82058Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of ServiceMongoDB Server
- CVE-2026-82057Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of ServiceMongoDB Server
- CVE-2026-82055Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of ServiceMongoDB Server
- CVE-2026-82054Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of ServiceMongoDB Server
- CVE-2026-82053Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role AssignmentMongoDB Server
- CVE-2026-82052$regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 charsMongoDB Server
- CVE-2026-47625NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization.NVIDIA Triton Inference Server
- CVE-2026-16497NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration.NVIDIA Triton Inference Server
- CVE-2026-20293Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass VulnerabilityCisco Enterprise NFV Infrastructure Software · Cisco Unifie…
- CVE-2026-16769RS9116W/SiWx917 plaintext pause encryption request causes DOSsilabs.com WiseCnnect
- CVE-2026-86600Workload identity attestation generated before login host validation in Snowflake driversSnowflake Connector for Python · Snowflake Go Driver +6
- CVE-2026-86734Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Fieldgrokability snipe-it
- CVE-2026-86733Snipe-IT before 8.7.0 Remote Code Execution via Backup Restoregrokability snipe-it
- CVE-2026-86732Craft CMS before 5.10.12 Remote Code Execution via element-indexcraftcms cms
- CVE-2026-86731Craft CMS 5.0.0-RC1 before 5.10.12 Permission Escalation via UsersControllercraftcms cms
- CVE-2026-86730Craft CMS 5.0.0-RC1 before 5.10.12 Behavior Injection RCEcraftcms cms
- CVE-2026-86728AVideo through 29.0 Unauthenticated Disclosure via epg.json.phpWWBN AVideo
- CVE-2026-86727AVideo through 29.0 Information Disclosure via stats.json.phpWWBN AVideo
- CVE-2026-86726AVideo through 29.0 Information Disclosure via restreamsActive.json.phpWWBN AVideo
- CVE-2026-86725AVideo SocialMediaPublisher Missing Authorization via add.json.phpWWBN AVideo
- CVE-2026-86724AVideo YPTWallet saveBalance.php Cross-Site Request ForgeryWWBN AVideo
- CVE-2026-86723AVideo LoginControl PGP Authentication Bypass via verifyChallengeWWBN AVideo
- CVE-2026-86722AVideo Authentication Bypass via SQL Cache InvalidationWWBN AVideo
- CVE-2026-86721AVideo through c3edcc274c Authorization Bypass via Session CookieWWBN AVideo
- CVE-2026-86720WWBN AVideo Missing Authorization via resendRestreamer.json.phpWWBN AVideo
- CVE-2026-86718WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.phpWWBN AVideo
- CVE-2026-16037Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS ModulePayTR Payment and Electronic Money Institution PayTR Virtua…
- CVE-2026-16025Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API WHMCS ModulePayTR Payment and Electronic Money Institution PayTR Virtua…
- CVE-2026-83527An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain adminiIvanti Sentry
- CVE-2026-12648A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to executeIvanti Neurons for ITSM
- CVE-2026-61517Netis NX10 OS Command Injection via Ping Diagnostic HandlerNetis Systems NX10
- CVE-2026-12651A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to executeIvanti Neurons for ITSM
- CVE-2026-9040Mali GPU Kernel Driver allows denial of service or disclosure of sensitive informationArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-9034Mali GPU Userspace Driver allows access to already freed memoryArm Bifrost GPU Userspace Driver · Arm Valhall GPU Users… +1
- CVE-2026-7477Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-7476Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-5729Mali GPU Kernel Driver allows access to already freed memoryArm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…
- CVE-2026-0860Mali GPU Kernel Driver allows access to sensitive kernel informationArm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…
- CVE-2026-18851Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacIvanti Endpoint Manager Mobile
- CVE-2026-33197BDS Module Bypass Secure Boot AdvisoryAMI AptioV
- CVE-2026-86135Dimension CSRF Vulnerability in Database Snapshot Creation Allows Denial of ServiceWatchGuard Dimension
- CVE-2026-74239XenForo < 2.3.13 Path Traversal via Style Archive Importer on WindowsXenForo
- CVE-2026-73321XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode ParserXenForo
- CVE-2026-73316XenForo < 2.3.13 Payment Replay via PayPal REST Payment ProviderXenForo
- CVE-2026-73315XenForo < 2.3.13 SSRF via PayPal REST Webhook HandlerXenForo
- CVE-2026-73314XenForo < 2.3.13 Signature Verification Bypass via PayPal REST WebhookXenForo
- CVE-2026-73313XenForo < 2.3.13 MFA Bypass via Passkey TFA ProviderXenForo
- CVE-2026-73310XenForo < 2.3.13 OAuth2 Authorization Code Token Theft via redirect_uri BypassXenForo
- CVE-2026-75021fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind addressfastify-cli
- CVE-2026-12611A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threadsEclipse Foundation Eclipse Jetty
- CVE-2026-77106Cvlaunchd Code ExecutionCommvault Cloud
- CVE-2026-77105CommServe Privilege EscalationCommvault Cloud
- CVE-2026-77104CommServe Path TraversalCommvault Cloud
- CVE-2026-77103CommServe Information DisclosureCommvault Cloud
- CVE-2026-77102CommServe Denial of ServiceCommvault Cloud
- CVE-2026-77101CommServe Stack-based Buffer OverflowCommvault Cloud
- CVE-2026-77098Private Metrics Server SQL InjectionCommvault Cloud
- CVE-2026-77097Private Metrics Server Denial of ServiceCommvault Cloud
- CVE-2026-77092Content Extractor Privilege EscalationCommvault Cloud
- CVE-2026-77091DataCube Security Feature BypassCommvault Cloud
- CVE-2026-79602x86: improper handling of HVM emulation return codesXen
- CVE-2026-19203A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret difEclipse Foundation Eclipse Jetty
- CVE-2026-11573Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)qt
- CVE-2026-3174Event Tickets and Registration <= 5.27.4 - Missing Authorization to Unauthenticated Stripe Credentials Updatestellarwp Event Tickets and Registration
- CVE-2026-16502Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcodelivecomposer Live Composer – Free WordPress Website Builder
- CVE-2026-77968Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccountRed Hat build of Apache Camel - HawtIO
- CVE-2026-74860Libxml2: double-free/uaf in libxml2 python bindingsRed Hat Enterprise Linux · Cert Manager support for Red… +5
- CVE-2026-86713PX4 Autopilot through 1.17.0 Use-After-Free in load_monPX4-Autopilot
- CVE-2026-86712SiYuan before 3.8.2 Remote Code Execution via Clipboardsiyuan-note siyuan
- CVE-2026-86711electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridgeelecterm
- CVE-2026-9331EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' ParameterEDD Product Catalog Feed by PixelYourSite
- CVE-2026-85400TYPO3 CMS - Missing Authorization in lowlevel commandsTYPO3 CMS
- CVE-2026-67367A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), Siemens SIMOVE Fleetmanager · Siemens SIPLANT
- CVE-2026-62650A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62649A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62648A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62647A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62646A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-34223A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CCSiemens Desigo CC ClickOnce Client · Siemens Desigo CC f… +2
- CVE-2026-71375XXE Vulnerability in Cosminexus Component ContainerHitachi Cosminexus Component Container
- CVE-2026-76561Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint)Red Hat Enterprise Linux · Red Hat Certificate System
- CVE-2026-81806WordPress Hide My WP Ghost plugin <= 7.0.09 - Server Side Request Forgery (SSRF) vulnerabilityJohn Darrel Hide My WP Ghost
- CVE-2026-48888WordPress WooCommerce plugin < 11.1.0 - Denial of Service Attack vulnerabilityAutomattic WooCommerce
- CVE-2026-81781WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Access Control vulnerabilityUnbounce Landing Pages
- CVE-2026-81790WordPress Csomagpontok és szállítási címkék WooCommerce-hez plugin < 4.2.8 - Broken Access Control vulnerabilityViszt Péter Csomagpontok és szállítási címkék WooCommerce-h…
- CVE-2026-81798WordPress Easy Appointments plugin <= 4.0.2.1 - Cross Site Scripting (XSS) vulnerabilityEasy Appointments
- CVE-2026-84818WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability100plugins Open User Map
- CVE-2026-84817WordPress JetFormBuilder plugin <= 3.6.5.1 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetFormBuilder
- CVE-2026-84820WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerabilityUnlimited Elements For Elementor
- CVE-2026-19397Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the hosASUS Control Center Express Agent
- CVE-2026-76967Insecure Deserialization in SAP NetWeaver Business ClientSAP_SE SAP NetWeaver Business Client
- CVE-2026-76958XML External Entity (XXE) Vulnerability in SAP Integration SuiteSAP_SE SAP Integration Suite
- CVE-2026-66767Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2026-30754A memory corruption vulnerability exists in FFmpeg before 8.1.
- CVE-2026-78834A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.
- CVE-2026-78837A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database informati
- CVE-2026-79376An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers t
- CVE-2026-79377A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows at
- CVE-2026-79378An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to c
- CVE-2026-79572An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive fil
- CVE-2026-79575The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making th
Medium, low and unrated 541
- CVE-2026-19201Denial of Service via Unbounded Recursion in go-attestation Windows SIPA ParserGoogle go-attestation
- CVE-2026-53937MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)io.modelcontextprotocol:kotlin-sdk · io.modelcontextprot… +2
- CVE-2026-86564Dpdk: dpdk: missing length validation before reading command_data in virtio-net control queue handlerRed Hat Fast Datapath for RHEL · Red Hat Enterprise Linux +1
- CVE-2026-47680Source controller: Improper path handling allows traversalfluxcd source-controller · github.com/fluxcd/source-control…
- CVE-2026-18090Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle blockRed Hat Enterprise Linux
- CVE-2026-53637Sylius: Cart FormComponent allows modification or deletion of an already-completed orderSylius · sylius/sylius
- CVE-2026-53638Sylius: Channel-based payment method restriction bypass on shop account orders API endpointSylius · sylius/sylius
- CVE-2026-53639Sylius: IDOR on Shop Payment Request API endpointsSylius · sylius/sylius
- CVE-2026-53933Maravel-Framework Vulnerable to Side-Channel Information Disclosure (Error Oracle) via Dynamic Route Fuzzingmacropay-solutions maravel-framework
- CVE-2026-81904Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset RegistrationConcrete CMS
- CVE-2026-86077n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocketn8n-io n8n · n8n
- CVE-2026-86078n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Servicen8n-io n8n · n8n
- CVE-2026-86079n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiersn8n-io n8n · n8n
- CVE-2026-86080n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Openn8n-io n8n · n8n
- CVE-2026-86084n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessionsn8n-io n8n · n8n
- CVE-2026-86085n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpointsn8n-io n8n · n8n
- CVE-2026-86993n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Checkn8n-io n8n · n8n
- CVE-2026-86994n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filtern8n-io n8n · n8n
- CVE-2026-86995n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Readn8n-io n8n · n8n
- CVE-2026-86996n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policyn8n-io n8n · n8n
- CVE-2026-81984Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81991Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat
- CVE-2026-79910Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat
- CVE-2026-81993Acrobat Reader | Heap-based Buffer Overflow (CWE-122)Adobe Acrobat
- CVE-2026-80159Acrobat Reader | Untrusted Search Path (CWE-426)Adobe Acrobat
- CVE-2026-81977Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191)Adobe Acrobat
- CVE-2026-80162Acrobat Reader | Use After Free (CWE-416)Adobe Acrobat
- CVE-2026-81997Acrobat Reader | Incorrect Authorization (CWE-863)Adobe Acrobat
- CVE-2026-80160Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat
- CVE-2026-81982Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat
- CVE-2026-82001Acrobat Reader | Uncontrolled Resource Consumption (CWE-400)Adobe Acrobat
- CVE-2026-81978Acrobat Reader | Out-of-bounds Read (CWE-125)Adobe Acrobat
- CVE-2026-19625IBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesIBM Enterprise Build of Quarkus
- CVE-2026-84685Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Managementreact-native-auth0
- CVE-2026-85981Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP ConnectorAuth0 AD/LDAP Connector
- CVE-2026-78622Improper Link Resolution in Okta Verify for Windows Uninstaller Data RemovalOkta Verify for Windows
- CVE-2026-78631Improper Restriction of Sensitive Information in Okta Hyperdrive Agent LoggingOkta Hyperdrive Agent
- CVE-2026-78630Improper Input Neutralization in Okta Access Gateway SNMP Configuration ProcessingOkta Access Gateway
- CVE-2026-78629Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response HandlingOkta Hyperdrive Agent
- CVE-2026-78635Improper Input Validation in the Okta Privileged Access SSH Client URL Handler ArgumentOkta Privileged Access Client
- CVE-2026-78620Improper Path Validation in Okta Access Gateway Kerberos Configuration HandlingOkta Access Gateway
- CVE-2026-78579Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter InterpolationOkta Access Gateway
- CVE-2026-78625Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site ConfigurationOkta Access Gateway
- CVE-2026-78624Improper Path Validation in Okta Access Gateway Backup and Restore FunctionalityOkta Access Gateway
- CVE-2026-78560Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication SourceOkta Access Gateway
- CVE-2026-85630HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs methodHTML-FormHandler
- CVE-2026-85485HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escapingHTML-FormHandler
- CVE-2026-78552Validation Bypass in Okta Access Gateway Custom DirectivesOkta Access Gateway
- CVE-2026-85484HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escapingHTML-FormHandler
- CVE-2026-19872HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error messageHTML-FormHandler
- CVE-2026-78550Improper Input Handling in Okta Access Gateway Management Console Exception HandlerOkta Access Gateway
- CVE-2026-78545Improper Input Sanitization in Okta Access Gateway Application Label ConfigurationOkta Access Gateway
- CVE-2026-86810Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authenticationOpen-Web-Analytics
- CVE-2026-71357Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75678Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-71565Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75687Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75672Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75734Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75706Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75730Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75719Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75707Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75690Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75715Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64838Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75646Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75640Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75643Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75726Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-19612Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75660Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-19479Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75735Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75637Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75705Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75694Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75741Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75679Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64830Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75729Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75685Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75677Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75642Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75671Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75667Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75636Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75644Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75704Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75708Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64854Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64866Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64589Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75635Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75742Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75713Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75739Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75666Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-72627Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-19644Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75674Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75709Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75652Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64610Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75733Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75661Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75691Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75725Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75647Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64584Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75740Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75669Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75710Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75668Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75716Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-71388Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75683Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-72626Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75639Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75731Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-19713Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75738Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64618Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75629Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75659Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75722Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75651Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75718Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75695Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75727Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75680Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-27227Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75675Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75712Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75702Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75700Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-71440Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75711Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64868Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75737Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75681Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-71356Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75696Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75701Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75724Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64542Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75692Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75714Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75657Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2025-64588Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75736Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75693Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75670Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75717Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-79905Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-75720Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Expe… +1
- CVE-2026-76002ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe ColdFusion
- CVE-2026-76000ColdFusion | Uncontrolled Resource Consumption (CWE-400)Adobe ColdFusion
- CVE-2026-86808moltis-org moltis vault.rs vault_recovery_handler missing authenticationmoltis-org moltis
- CVE-2026-86806opengeos GeoLibre _is_within_roots server-side request forgeryopengeos GeoLibre
- CVE-2026-86804seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorizationseakee CPA-Manager-Plus
- CVE-2026-86716Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflowCesanta mJS
- CVE-2026-66303Skype for Business and Lync Denial of Service VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-69642Skype for Business Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-63523Skype for Business Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-66308Skype for Business and Lync Denial of Service VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-66306Skype for Business Information Disclosure VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsof… +1
- CVE-2026-86675itsourcecode Sales and Inventory System us_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86674ningzichun Student Management System login.php session_start session fixiationningzichun Student Management System
- CVE-2026-55290In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check.Google Android
- CVE-2026-55256In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation.Google Android
- CVE-2026-49895In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect bounds check.Google Android
- CVE-2026-45527In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer oveGoogle Android
- CVE-2026-45525In multiple locations, there is a possible improper data sanitization due to a logic error in the code.Google Android
- CVE-2026-45521In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check.Google Android
- CVE-2026-45519In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy.Google Android
- CVE-2026-28671In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition.Google Android
- CVE-2026-28660In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code.Google Android
- CVE-2026-28652In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check.Google Android
- CVE-2026-28638In multiple functions of XmpDataParser.java, there is a possible improper data sanitization due to a logic error in the code.Google Android
- CVE-2026-28633In initForUserNoTracing of VoiceInteractionManagerService.java, there is a possible persistent denial of service due to resource exhaustion.Google Android
- CVE-2026-28630In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack.Google Android
- CVE-2026-28627In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack due to a logic error in the code.Google Android
- CVE-2026-28623In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way to obtain the Bluetooth MAC address due to a missing permissionGoogle Android
- CVE-2026-28622In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass.Google Android
- CVE-2026-28617In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion.Google Android
- CVE-2026-28596In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion.Google Android
- CVE-2026-28584In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the Google Android
- CVE-2026-28582In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due tGoogle Android
- CVE-2026-0054In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission cheGoogle Android
- CVE-2026-86673ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentialsningzichun Student Management System
- CVE-2026-86672ningzichun Student Management System Backup example.7z information disclosureningzichun Student Management System
- CVE-2026-86074n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Contentn8n-io n8n · n8n
- CVE-2026-81823AVEVA Pipeline Integrity Monitor Missing AuthorizationAVEVA Pipeline Integrity Monitor
- CVE-2026-81824AVEVA Pipeline Integrity Monitor cross-site scriptingAVEVA Pipeline Integrity Monitor
- CVE-2026-86670aircheng-org iWebShop-5 Authentication Storage admin.php weak password hashaircheng-org iWebShop-5
- CVE-2026-79904Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Photoshop Android
- CVE-2026-48707InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanninginstantsoft icms2
- CVE-2026-83501Windows Virtualization-Based Security (VBS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85875Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-70145Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69381Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-83949Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-83951Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-81395Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81394Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81400Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81393Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81392Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81958Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81401Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81391Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81399Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81390Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-81387Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel +1
- CVE-2026-80082Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80090Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-80089Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80091Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80088Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80087Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80086Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80084Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80076Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-80078Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78520Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78522Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-80073Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-80079Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-67645Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67624Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-78516Windows Storage Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78503Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78506Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-67369Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-78454Windows CD-ROM Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78452Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78455Xbox Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78453Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78451Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-78441Windows OLE DB Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-69562Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-77911Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-77488Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-73004Windows Autopilot Tampering VulnerabilityMicrosoft Windows
- CVE-2026-73008Windows Biometric Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72999Windows USB Hub Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-73019Windows URL Moniker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69304ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 8.0 runtime +7
- CVE-2026-65812Microsoft Teams for Android Information Disclosure VulnerabilityMicrosoft Teams for Android
- CVE-2026-72985Volume Shadow Copy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72976Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-72975Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-72977Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-72974Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-72938Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-72956Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69904Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-58649.NET Information Disclosure VulnerabilityMicrosoft .NET 10.0 runtime · Microsoft .NET 11.0 runtime +3
- CVE-2026-69626Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69636Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69615Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69568Storage Spaces Controller Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69559Microsoft Teams for Android Information Disclosure VulnerabilityMicrosoft Teams for Android
- CVE-2026-69490Windows USB Mass Storage Class Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69409Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69395Active Directory Certificate Services (AD CS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72966Windows Remote Access Connection Manager Tampering VulnerabilityMicrosoft Windows
- CVE-2026-72964Windows Internet Connection Sharing (ICS) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-72942Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72931Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-72927Winsock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71349Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70575Windows Schannel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-64918Microsoft Office Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2026-69781Windows DHCP Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69878Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69853Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69792Windows Win32K Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69672Windows DNS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69895Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69713Windows Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69794Windows Encrypting File System (EFS) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69674Windows Modern Device Management (MDM) Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69679Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69803Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69637Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-54611InstantCMS has Remote Code Execution in package installerinstantsoft icms2
- CVE-2026-69616Windows Remote Desktop Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69624Active Directory Certificate Services (AD CS) Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69618Windows SMB Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69566Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69569Windows Print Spooler Components Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69591Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69497Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69483Windows Image Acquisition Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69474Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69453Microsoft Windows Search Component Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69449Windows BitLocker Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-69425Windows NTFS Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69416Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69405Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69393Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69374Windows SMB Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69373Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69403Windows SMB Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69369Windows DNS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69372Windows Network File System Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69376Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69353Windows Text Shaping Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69350Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69344Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69343Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69351Windows Universal Plug and Play (UPnP) Device Host Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69316Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69317Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69318Windows Imaging Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-86669aircheng-org iWebShop-5 systemseller.php login improper authenticationaircheng-org iWebShop-5
- CVE-2026-69308Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69315Windows License Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69303Push Message Routing Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69321Windows Power Dependency Coordinator Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69294Microsoft COM for Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69297Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69286Windows USB Audio Class Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68895Internet Storage Name Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69288Windows GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68891Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68886Windows Network Connection Broker Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68898Windows iSCSI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-68873Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68852Microsoft Account Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68874Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68842Windows MIDI Service Module Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68843Microsoft Office Word Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68831Windows Defender Firewall Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68780Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-68779Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-68778Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-68777Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-68776Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67648Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67641Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-67393Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67390Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67386Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-66816Microsoft SQL Server Security Feature Bypass VulnerabilityMicrosoft SQL Server
- CVE-2026-62762Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-83991Windows Cloud Files Mini Filter Driver Tampering VulnerabilityMicrosoft Windows
- CVE-2026-70290Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72937Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-70019Windows Compressed Folder Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72947Windows File History Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-81381GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81380GitHub Copilot and Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-81377Visual Studio Code Tampering VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-78523Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-73029Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67389Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-78513Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-78508Windows CD-ROM Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-78515Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-78502Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-67383Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-77896Windows Remote Desktop Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-77892Windows Boot Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-77891Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77887Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-77492Windows Storage Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-77491Windows GDI Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +2
- CVE-2026-72980Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-72978Active Directory Federation Services (AD FS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70124Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69930Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69929Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69683Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69739Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2026-69690Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-69719Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69734Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +1
- CVE-2026-69548Windows RNDIS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69469Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69382Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69375Microsoft Exchange Server Tampering VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-69361Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2026-72948Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-72945Windows Task Scheduler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-72939Windows Routing and Remote Access Service (RRAS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-72935Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71341Windows Partition Management Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-71348Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-71350Windows Spaceport.sys Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-71339Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71338Windows Failover Cluster Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-71329Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70582Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69770Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69771Windows Container Manager Service Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-69839Windows iSCSI Target Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-69808Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69832Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69862Windows Wireless Wide Area Network Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69741Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69723Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69627Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69684Windows Error Reporting Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69609Win32k Information Disclosure VulnerabilityMicrosoft Office 365 for Mac · Microsoft Office for Andr… +1
- CVE-2026-69572Windows SMB Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69554Microsoft Windows Search Component Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69552Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69527Windows USB Mass Storage Class Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69507Microsoft Windows Search Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69504Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69531Microsoft Windows Speech Tampering VulnerabilityMicrosoft Windows
- CVE-2026-69415Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69457Windows USB Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69406Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69390Windows Spaceport.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69367Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69349Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69345Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69339Windows MIDI Service Module Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-69267Windows Connected User Experiences and Telemetry Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68881Microsoft Standard XPS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68851Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68849Windows Bluetooth Port Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68833Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-68830Windows Universal Plug and Play (UPnP) Device Host Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-68785Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-68784Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-68781Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67633Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server
- CVE-2026-67630Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-67629Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-62801Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-70091Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-9216Insufficient input validation vulnerability exists in certain NETGEAR RAX ModelsNETGEAR RAX30 · NETGEAR RAX35 +3
- CVE-2026-9215A CSRF vulnerability exists in certain NETGEAR XR series devicesNETGEAR XR1000v2 · NETGEAR XR500
- CVE-2026-86073n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitutionn8n-io n8n · n8n
- CVE-2026-81531Unauthenticated Account Information Disclosure in Multiple Omada ControllersTP-Link System Omada Software Controller · TP-Link Syste… +4
- CVE-2026-86668aircheng-org iWebShop-5 pic.php uploadFile cross site scriptingaircheng-org iWebShop-5
- CVE-2026-78216AshLua eval read operations can read field-policy-protected fields via aggregatesash-project ash_lua
- CVE-2026-84392A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0Fortinet FortiOS · Fortinet FortiProxy +1
- CVE-2026-22575An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 aFortinet FortiManager
- CVE-2026-84391A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insFortinet FortiAnalyzer
- CVE-2026-84385A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS
- CVE-2026-78230AshAi aggregate tool can read field-policy-protected fieldsash-project ash_ai
- CVE-2026-84389A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2Fortinet FortiSIEM
- CVE-2026-84387An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortFortinet FortiSandbox
- CVE-2026-84386A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacFortinet FortiClientWindows
- CVE-2026-86667aircheng-org iWebShop-5 member.php member_list sql injectionaircheng-org iWebShop-5
- CVE-2026-82069Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster RouterMongoDB Server
- CVE-2026-82066Heap Out-of-Bounds Read in MongoDB Server Query Planning ComponentMongoDB Server
- CVE-2026-82063Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of ServiceMongoDB Server
- CVE-2026-82060Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image LookupsMongoDB Server
- CVE-2026-82059Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of ServiceMongoDB Server
- CVE-2026-82056Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of ServiceMongoDB Server
- CVE-2026-56101OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoSOpenBSD
- CVE-2026-86666aircheng-org iWebShop-5 pic.php uploadFile unrestricted uploadaircheng-org iWebShop-5
- CVE-2026-86853Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOSMozilla Firefox for iOS
- CVE-2026-86737snipe-it before 8.7.0 Missing Authorization via barcode endpointgrokability snipe-it
- CVE-2026-86736snipe-it before 8.7.0 Checkout Request Counter Integrity Failuregrokability snipe-it
- CVE-2026-86735snipe-it before 8.7.0 SSRF via IPv6 transition address bypassgrokability snipe-it
- CVE-2026-86719WWBN AVideo CustomizeUser Cross-Site Request Forgery Session HijackingWWBN AVideo
- CVE-2026-86665aircheng-org iWebShop-5 update.php index authorizationaircheng-org iWebShop-5
- CVE-2026-84282A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin (version 9.12)Ascensio System SIA / OnlyOffice ONLYOFFICE ownCloud integr…
- CVE-2026-12387Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-12285Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-11891Mali GPU Userspace Driver allows access to already freed memoryArm Valhall GPU Userspace Driver · Arm 5th Gen GPU Architec…
- CVE-2026-0001Mali GPU Kernel Driver allows access to already freed memoryArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1
- CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0Nozomi Networks Guardian · Nozomi Networks CMC +1
- CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2026-86644star7th showdoc API Page Save Endpoint editormd.js cross site scriptingstar7th showdoc
- CVE-2026-73320XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl EndpointXenForo
- CVE-2026-73319XenForo < 2.3.13 XSS via Dynamic Redirect HandlerXenForo
- CVE-2026-73318XenForo < 2.3.13 Missing Authorization via force-agreement ControllerXenForo
- CVE-2026-73317XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild DispatcherXenForo
- CVE-2026-79603Unconditionally do TLB flushing ahead of page scrubbingXen
- CVE-2026-62437x86: DMs may cause mem leak by IRQ bindingXen
- CVE-2026-2520Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Updateladela Online Scheduling and Appointment Booking System – B…
- CVE-2026-12230LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout_custom_css'thimpress LearnPress – WordPress LMS Plugin for Create and…
- CVE-2026-18021Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode Executionbeaverbuilder Beaver Builder Page Builder – Drag and Drop W…
- CVE-2026-17509WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’WPML Multilingual CMS
- CVE-2026-76931Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameterdylanjkotze Zephyr Project Manager
- CVE-2026-86714PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netmanPX4-Autopilot
- CVE-2026-77654Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Security AnalyzerAlgosec Horizon Security Analyzer
- CVE-2026-19614XML External Entity (XXE) Injection in CyberELF NanoXMLCyberELF NanoXML
- CVE-2026-77132TYPO3 CMS - Information Disclosure via Backend Localization WizardTYPO3 CMS
- CVE-2026-86590In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied Eclipse Foundation Eclipse Che
- CVE-2026-74859Gnome-tweaks: path traversal in theme installerRed Hat Enterprise Linux
- CVE-2026-86597Sensitive information written to logs by Snowflake driversSnowflake Connector for Python · Snowflake Go Driver +11
- CVE-2026-86550UXSS vulnerability in ZTE browser productsZTE NebulaOS
- CVE-2026-62654A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62653A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-62652A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).Siemens Reyrolle 7SR5
- CVE-2026-58113A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), TeamcenteSiemens Teamcenter
- CVE-2026-81802WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerabilityMagepeople WpEvently
- CVE-2026-81792WordPress Product Catalog Enquiry for WooCommerce by MultiVendorX plugin <= 6.1.5 - Privilege Escalation vulnerabilityProduct Catalog Enquiry for WooCommerce by MultiVendorX
- CVE-2026-86519code-projects Student Crud Operation Backup File card_activation.sql information disclosurecode-projects Student Crud Operation
- CVE-2026-86518code-projects Student Crud Operation edit.php sql injectioncode-projects Student Crud Operation
- CVE-2026-86517itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86516elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges managementelenavanengelenmaslova mocknest-serverless
- CVE-2026-86515vgmstream txtp txtp_parser.c add_entry resource consumptionvgmstream
- CVE-2026-86514vgmstream txth-txtp txth.c sscanf stack-based overflowvgmstream
- CVE-2026-86513java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resourcesjava-json-tools jackson-coreutils
- CVE-2026-86512java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access controljava-json-tools json-patch
- CVE-2026-12962A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash byASUS Armoury Crate
- CVE-2026-18023Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive informatioASUS Armoury Crate
- CVE-2026-16003Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driASUS Armoury Crate
- CVE-2026-16004Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuratioASUS Armoury Crate
- CVE-2026-16005Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by ASUS Armoury Crate
- CVE-2026-16006Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtASUS Armoury Crate
- CVE-2026-75808Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition througASUS Armoury Crate
- CVE-2026-75809Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device funcASUS Armoury Crate
- CVE-2026-75810Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authenticatiASUS Armoury Crate
- CVE-2026-86511java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumptionjava-json-tools jackson-coreutils
- CVE-2026-75811Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration ASUS Armoury Crate
- CVE-2026-82710Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadataash-project usage_rules
- CVE-2026-76977Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)SAP_SE SAPUI5
- CVE-2026-76971Server-Side Request Forgery in SAP Manufacturing Integration and IntelligenceSAP_SE SAP Manufacturing Integration and Intelligence
- CVE-2026-76968Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content ServerSAP_SE SAP Web Dispatcher, Internet Communication Manager a…
- CVE-2026-76963Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP PlatformSAP_SE SAP NetWeaver and ABAP Platform
- CVE-2026-76962Missing Authorization check in SAP S/4HANA (Manage Bank Chains app)SAP_SE SAP S/4HANA
- CVE-2026-76961Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA
- CVE-2026-76960Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA
- CVE-2026-76959Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)SAP_SE SAP S/4HANA
- CVE-2026-58234Denial of Service vulnerability in SAP Process Integration (SOAP Adapter)SAP_SE SAP Process Integration
- CVE-2026-44766SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)SAP_SE SAP S/4HANA
- CVE-2026-52307An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers t
- CVE-2026-52486An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module
- CVE-2026-78738Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.
- CVE-2026-78741Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wysiwyg-CKEditor image upload feature.
- CVE-2026-78742Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction.
- CVE-2026-78838A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.php component of AppNitro MachForm v30 allows attackers to execu
- CVE-2026-78971In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any com
- CVE-2026-79379A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed
- CVE-2026-79573L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the bus
- CVE-2026-79588U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.