CVEs published November 10, 2026
2,000 CVEs were published on November 10, 2026: 84 critical, 1,098 high. 2 are now in CISA KEV. 12 early warnings were posted.
- Published
- 2,000
- Critical
- 84
- High
- 1,098
- Medium
- 530
- Low
- 49
- Unrated
- 239
- Now in CISA KEV
- 2
- Fix available
- 1,407
- Early warnings
- 12
Most affected products
- Microsoft Windows
- 675
- Google Android
- 158
- Mozilla Firefox · Mozilla Thunderbird
- 97
- Microsoft 365 Apps for Enterprise · Microsoft Office 365… +1
- 82
- Microsoft Windows Server
- 58
- Microsoft 365 Apps for Enterprise · Microsoft Office 365… +2
- 56
- Microsoft SQL Server
- 42
- Microsoft 365 Apps for Enterprise · Microsoft Office LTSC
- 36
- Intel(R) TDX Migration Trust Domain
- 30
- Microsoft SharePoint Server Subscription Edition
- 27
This page lists the newest 2,000. Browse every vulnerability.
Early warnings 12
- SZB-da10af64ceRailway says hackers stole customer auth secrets and ran $740,000 in fraudulent AI usageRailway cloud platform
- SZB-65bc1bddc8NEAR AI reports SGLang RCE let attacker run code on an inference serverNEAR AI · Cloud inference services
- SZB-a9c61ebfa0Microsoft patches record 1,235 flaws, including exploited Outlook zero-dayMicrosoft · Outlook
- SZB-8a90d04873Adobe patches 110 vulnerabilities across 9 productsAdobe · AEM, Premiere, Photoshop, After Effects, Connect, Audition, Dimension, Content C
- SZB-f71a910c08BleepingComputer reports critical Xen Orchestra auth bypass exploited in attacksXen Orchestra
- SZB-db01d072adAttackers exploit AhsayCBS flaws to deploy sandbox-evading Python backdoorAhsay · AhsayCBS
- SZB-fdab5e09d5Apple patches iMessage flaws that expose group chat messagesApple · iMessage
- SZB-40f3a46406Barracuda warns attackers are exploiting two patched ESG root-access flawsBarracuda · Email Security Gateway
- SZB-ea98c8be72SAP patches four CVSS 10.0 flaws in NetWeaver and Web DispatcherSAP Web Dispatcher and Internet Communication Manager
- SZB-c3df970f8eFireworks AI discloses breach of development machines after cloud provider hackFireworks AI
- SZB-4703b2a7b4CISA adds four flaws in GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex to KEVMultiple vendors (GPUStack, SignalWire, OpenBSD, IBM) · Aspera Faspex
- SZB-476799c76cGoogle patches Chrome XML zero-day reported as exploited in attacksGoogle · Chrome
Critical 84
- CVE-2026-126187React: Unauthenticated Remote Code Execution in React Server Componentsreact · react-server-dom-parcel +2
- CVE-2026-126261A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5…Fortinet FortiManager
- CVE-2026-82391Out-of-bounds write in Zephyr HTTP/2 server static-filesystem handler via corrupted receive-buffer lengthzephyrproject zephyr
- CVE-2026-119017Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager
- CVE-2026-114371Adobe Experience Manager | Incorrect Authorization (CWE-863)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-113580Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-113579Adobe Experience Manager | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-125298AsiaInfo Business Support System (BSS) Missing JWT Signature VerificationAsiaInfo International Business Support System · AsiaInfo I…
- CVE-2026-125297AsiaInfo Business Support System (BSS) Missing AuthenticationAsiaInfo International Business Support System · AsiaInfo I…
- CVE-2026-121898Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121896Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121908Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121352Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121887Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Connect
- CVE-2026-121349Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121355Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121351Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121889Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Connect
- CVE-2026-121894Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121356Adobe Connect | Server-Side Request Forgery (SSRF) (CWE-918)Adobe Connect
- CVE-2026-121906Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
- CVE-2026-121353Adobe Connect | Improper Neutralization of CRLF Sequences ('CRLF Injection') (CWE-93)Adobe Connect
- CVE-2026-121904Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2026-121902Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121354Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Connect
Show all 84 entriesShow fewer entries
- CVE-2026-121892Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Connect
- CVE-2026-89324Basel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback SaltXTemos Basel Post Types
- CVE-2026-125881Schema-hint SSRF via service import schema validationN-able N-central
- CVE-2026-125883Multiple XXE VulnerabilitiesN-able N-central
- CVE-2026-126082Active Storage: Possible arbitrary file write and read in Active Storage image analysisrails
- CVE-2026-118383Pre-authentication use-after-free in MongoDB Server replica set primary catch-upMongoDB Server
- CVE-2026-126065OpenObserve: Empty external password allows authentication bypassopenobserve
- CVE-2026-121529A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7…Fortinet FortiClientMac · Fortinet FortiClientWindows +1
- CVE-2026-121367Security Advisory 0220Arista Networks EOS
- CVE-2026-121289Security Advisory 0208Arista Networks EOS
- CVE-2026-120808Certificate Validation Bypass via IPv6 trust-result skip in macOS TLS clientMongoDB Server
- CVE-2026-125331HarnessRouter: Service-only routes that write an organization's provider connections could be reached through a multi-tenant console with…harnessrouter
- CVE-2026-120002Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-116945Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-118740Aspire Security Feature Bypass VulnerabilityMicrosoft Aspire Dashboard · Microsoft Aspire.Dashboard.Sdk…
- CVE-2026-119958Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-120779Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-116928Windows Search Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119990Azure OpenAI Elevation of Privilege VulnerabilityMicrosoft Azure Open AI
- CVE-2026-114162Microsoft Graph Elevation of Privilege VulnerabilityMicrosoft Azure Privileged Identity Management
- CVE-2026-114160Azure Managed Grafana Elevation of Privilege VulnerabilityMicrosoft Azure Managed Grafana
- CVE-2026-80095Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-85844Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-114146ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +12
- CVE-2026-112967Windows Xbox Live Networking Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96157Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96067Microsoft Color Management Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95962Windows Virtual Filtering Platform (VFP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88243Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-88234Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-96078Microsoft Color Management Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95901Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95882Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88218Windows DNS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-109454Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-66801Microsoft Xbox Remote Code Execution VulnerabilityMicrosoft GDK
- CVE-2026-109467Azure DevOps Server Remote Code Execution VulnerabilityMicrosoft Azure DevOps
- CVE-2026-61887Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within…Intel(R) TDX Migration Trust Domain
- CVE-2026-61473Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-44685Authentication bypass by spoofing in the MigTD rebinding protocol for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-125347Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging social engineering to…Google Chrome
- CVE-2026-63011GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labelsIntermesh groupoffice
- CVE-2026-61547rabbitmq-c: Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODYalanxz rabbitmq-c
- CVE-2026-121683Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete…Ivanti Cloud Services Application
- CVE-2026-108186Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via…Zoom Communications Zoom Workplace
- CVE-2026-121653SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote…ivanti Endpoint Manager
- CVE-2026-125758Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRETaptabase
- CVE-2026-125757mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footermailcow: dockerized
- CVE-2026-124900Sandbox escape due to use-after-free in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124917Sandbox escape due to use-after-free in the Widget: Gtk componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124903Sandbox escape due to use-after-free in the IPC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124864Sandbox escape due to use-after-free in the DOM: Service Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124861Sandbox escape due to use-after-free in the Audio/Video: cubeb componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124859Sandbox escape due to incorrect boundary conditions in the Storage: Cache API componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124853Sandbox escape due to incorrect boundary conditions in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-82509V Programming Language net.http TLS Certificate Validation Bypassvlang v
- CVE-2026-119446Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API tokennerves-hub nerves_hub_web
- CVE-2026-13312A vulnerability that could allow an attacker to compromise a system.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-115646Partial String Comparison Vulnerability in HiRDBHitachi HiRDB Server
High 1098
- CVE-2025-0008Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in…AMD EPYC™ 7003 Series Processors · AMD EPYC™ 7002 Series… +7
- CVE-2026-90833Signed offset bypasses bounds check in simulated EEPROM driver, allowing out-of-bounds kernel memory read and write from user modezephyrproject zephyr
- CVE-2026-77685Bluetooth Classic RFCOMM: integer underflow in the MCC TEST command handler leads to out-of-bounds read disclosed to the peer and…zephyrproject zephyr
- CVE-2026-107356U.S. Geological Survey Area Species Management Research Program unrestricted file uploadU.S. Geological Survey Area Species Management Research Pro…
- CVE-2026-123041The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client from its cache key…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-92441Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the X-Forwarded-Prefix header on…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-92439The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-96437The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the in-memory body buffer…Kong Gateway Enterprise
- CVE-2026-92443The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying an Authorization or…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-121913Adobe Connect | Incorrect Authorization (CWE-863)Adobe Connect
- CVE-2026-121350Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121900Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Connect
- CVE-2026-121890Adobe Connect | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)Adobe Connect
- CVE-2026-122102Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Connect
- CVE-2026-92442The graphql-proxy-cache-advanced plugin in Kong Gateway Enterprise omits the caller's identity from the cache key, allowing a response…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-125880Stored XSS via MMS3 patch metadata (admin context)N-able N-central
- CVE-2026-125882RCE via file repository upload path traversalN-able N-central
- CVE-2026-118483Dimension | Improper Input Validation (CWE-20)Adobe Dimension
- CVE-2026-92545The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway omit the request hostname from the cache…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-125879Local privilege escalation to root via nable-writable syslog-ng configN-able N-central
- CVE-2026-125878Multiple OGNL Injection vulnerabilitiesN-able N-central
- CVE-2026-125958Root RCE via unsigned NSP upgrade package uploadN-able N-central
- CVE-2026-91000Insecure IPC Channels lead to local privilege escalationN-able N-central
- CVE-2026-126186Active Storage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processingrails · activestorage
- CVE-2026-92544SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against…Kong Gateway Enterprise · Kong AI Gateway
Show all 1098 entriesShow fewer entries
- CVE-2026-126083Action Pack: Possible IP spoofing in Action Dispatch RemoteIprails · actionpack
- CVE-2026-126081Action Pack: Possible Strong Parameters bypass in Parameters#each_keyrails
- CVE-2026-126080Active Support: Possible DoS vulnerability in Active Support safe_constantizerails · activesupport
- CVE-2026-105986Incorrect authorization in the Admin API RBAC of Kong Gateway Enterprise allows a delegated administrator to elevate privileges via a…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2026-116003Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-113575Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop
- CVE-2026-117547Photoshop Desktop | Out-of-bounds Write (CWE-787)Adobe Photoshop
- CVE-2026-116480Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)Adobe Photoshop
- CVE-2026-117546Photoshop Desktop | Use After Free (CWE-416)Adobe Photoshop
- CVE-2026-113562Audition | Improper Input Validation (CWE-20)Adobe Audition
- CVE-2026-113558Audition | Improper Input Validation (CWE-20)Adobe Audition
- CVE-2026-113557Audition | Improper Input Validation (CWE-20)Adobe Audition
- CVE-2026-113565Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-113553Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-113560Audition | Incorrect Authorization (CWE-863)Adobe Audition
- CVE-2026-113551Audition | Violation of Secure Design Principles (CWE-657)Adobe Audition
- CVE-2026-113567Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-113555Audition | Out-of-bounds Write (CWE-787)Adobe Audition
- CVE-2026-113563Audition | Violation of Secure Design Principles (CWE-657)Adobe Audition
- CVE-2026-82002Media Encoder | Incorrect Authorization (CWE-863)Adobe Media Encoder
- CVE-2026-113547Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-113541Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-113545Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-113543Media Encoder | Out-of-bounds Write (CWE-787)Adobe Media Encoder
- CVE-2026-113523After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113534After Effects | Improper Input Validation (CWE-20)Adobe After Effects
- CVE-2026-113512After Effects | Stack-based Buffer Overflow (CWE-121)Adobe After Effects
- CVE-2026-113528After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113538After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113525After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113526After Effects | Violation of Secure Design Principles (CWE-657)Adobe After Effects
- CVE-2026-113517After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113536After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-113532After Effects | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe After Effects
- CVE-2026-113530After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-123263After Effects | Heap-based Buffer Overflow (CWE-122)Adobe After Effects
- CVE-2026-113516After Effects | Out-of-bounds Write (CWE-787)Adobe After Effects
- CVE-2026-110091Premiere Pro | Missing Authentication for Critical Function (CWE-306)Adobe Premiere
- CVE-2026-110089Premiere Pro | Buffer Underwrite ('Buffer Underflow') (CWE-124)Adobe Premiere
- CVE-2026-110085Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-110088Premiere Pro | Buffer Overflow (CWE-120)Adobe Premiere
- CVE-2026-82012Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-110086Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-104352Premiere Pro | Out-of-bounds Write (CWE-787)Adobe Premiere
- CVE-2026-110090Premiere Pro | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Premiere
- CVE-2026-48402Premiere Pro | Untrusted Search Path (CWE-426)Adobe Premiere
- CVE-2026-120828Memory exhaustion via abandoned far-future read-concern waiters in disaggregated storageMongoDB Server
- CVE-2026-120826Improper Authorization in MongoDB Server Sharded View Definition Handling Leads to Cross-Database Unauthorized AccessMongoDB Server
- CVE-2026-120825Improper Authorization in MongoDB Server Aggregation Framework View Definition Validation Leads to Unauthorized Collection AccessMongoDB Server
- CVE-2026-120824Post-authentication use-after-free in MongoDB Server time-series bucket validationMongoDB Server
- CVE-2026-120822Missing Authorization Check in MongoDB Server Replication-Related Administrative Command Leads to Unauthorized Data AccessMongoDB Server
- CVE-2026-120821Post-authentication use-after-free in MongoDB Server aggregation sub-pipelinesMongoDB Server
- CVE-2026-120818Use-After-Free in MongoDB Server JavaScript Support for Aggregation Leads to Information DisclosureMongoDB Server
- CVE-2026-120817Post-authentication race condition in MongoDB Server geospatial schema validationMongoDB Server
- CVE-2026-120815Incorrect Authorization Check in MongoDB Server Localhost Exception Leads to Unauthorized Administrative AccessMongoDB Server
- CVE-2026-120814MultiUpdateCoordinator state replay lets a shard administrator create a persistent cluster root userMongoDB Server
- CVE-2026-120813Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsingMongoDB Server
- CVE-2025-61625An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through…Fortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2026-26248A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0…Fortinet FortiSandbox
- CVE-2026-121371Security Advisory 0218Arista Networks EOS
- CVE-2026-121370Security Advisory 0224Arista Networks EOS
- CVE-2026-121368Security Advisory 0206Arista Networks EOS
- CVE-2026-121295Security Advisory 0223Arista Networks EOS
- CVE-2026-121292Security Advisory 0222Arista Networks EOS
- CVE-2026-121291Security Advisory 0222Arista Networks EOS
- CVE-2026-121290Security Advisory 0209Arista Networks EOS
- CVE-2026-121288Security Advisory 0221Arista Networks EOS
- CVE-2026-121287Security Advisory 0221Arista Networks EOS
- CVE-2026-120983Security Advisory 0215Arista Networks EOS
- CVE-2026-120982Security Advisory 0207Arista Networks EOS
- CVE-2026-120979Security Advisory 0212Arista Networks EOS
- CVE-2026-120977Security Advisory 0217Arista Networks EOS
- CVE-2026-102166Security Advisory 0227Arista Networks Wi-Fi Access Point
- CVE-2026-120810Uncontrolled Resource Consumption in MongoDB Server Aggregation Framework via Internal Expression Leads to Denial of ServiceMongoDB Server
- CVE-2026-95785Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted OperationsHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-95784System Component Vulnerability Could Cause Service UnavailabilityHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-95783Network Processing Vulnerability Could Cause Service DisruptionHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-95782Monitoring Interface Vulnerability Could Permit Unauthorized Access to Protected InformationHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-95781AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service IntegrityHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-95780Authentication and Session Management Vulnerability Could Permit Continued Unauthorized AccessHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-120807Privilege escalation via fail-open user lookup in X.509 cluster-membership guardMongoDB Server
- CVE-2026-120806Authorization role-graph corruption via no-op cleanup filters in dropAllRolesFromDatabaseMongoDB Server
- CVE-2026-120804Credential-handle retention via missing flag set in Windows Kerberos auth handlerMongoDB Server
- CVE-2026-120803MongoDB SBE $locf Window Accumulator Use-After-Free Enables Heap OOB Read and Server CrashMongoDB Server
- CVE-2026-125337Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gatewintercms winter · winter/wn-backend-module
- CVE-2026-115538Docker Engine overlay-network encryption rules are not restored after a firewalld reloadDocker Engine · Moby
- CVE-2026-115539Cluster-API proxy overwrites forwarded client identity with its ownmoby SwarmKit · Docker Engine +1
- CVE-2026-104060Worklenz < 3.3.0 SQL Injection via Reporting Members Endpointworklenz
- CVE-2026-115483Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_fileswpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-50077Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-59632In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via an undrained message queue…Google Android
- CVE-2026-59585In SetDisplayName of RegInfoContact.cpp, there is a possible denial of service due to a missing null check.Google Android
- CVE-2026-58789In s_gen_tile_param of multiple files, there is a possible way to trigger an out of bounds write in tile parameter arrays due to an…Google Android
- CVE-2026-40275Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-125336Forge: X.509 nameConstraints not enforced by verifyCertificateChain()digitalbazaar forge
- CVE-2026-14968AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state readsTianoCore EDK2
- CVE-2026-126087Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agentAWS openjd-sessions · AWS deadline-cloud-worker-agent
- CVE-2026-54436Vulnerabilities in the QNX io-char library Impacts QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2026-125330HarnessRouter: A workspace's API key could read and change sessions, files and responses of other workspaces in the same organizationharnessrouter
- CVE-2026-105437Heap-based Buffer Overflow in GitGit
- CVE-2026-125329Kaneo: Gitea integration access token and webhook secret exposed to any workspace memberusekaneo kaneo
- CVE-2026-120003Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-120001Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-120000Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-119997Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-119996Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-119995Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-118732Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118731Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118730Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118729Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118726Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118725Microsoft Office Excel Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118724Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118723Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118722Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118721Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118720Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118719Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118718Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118717Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118716Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118715Microsoft Office Excel Elevation of Privilege VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118714Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118713Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118712Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118711Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118710Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118709Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118708Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118707Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118706Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118705Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118704Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118703Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118702Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-118701Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118700Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118302Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118301Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118299Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118298Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118297Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118296Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118295Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118294Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118293Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118292Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118148Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118120Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118119Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118118Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118117Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118116Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118115Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118114Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118113Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118112Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118111Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118110Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118109Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118108Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118106Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-118105Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-116947Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116946Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116944Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-116943Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-116942Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2017 for x64-based Systems · Microsoft…
- CVE-2026-116941Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116938Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2017 for x64-based Systems · Microsoft…
- CVE-2026-116937Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2017 for x64-based Systems · Microsoft…
- CVE-2026-116936Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116934Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2017 for x64-based Systems · Microsoft…
- CVE-2026-116933Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116931Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116930Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-116929Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-116927Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-116926Microsoft Teams Spoofing VulnerabilityMicrosoft Teams for Android
- CVE-2026-116923Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116722Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116720Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116719Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116718Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116717Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-119382Windows TPM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118741ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft.dotnet-scaffold · Microsoft.dotnet-scaffold-as… +5
- CVE-2026-118288Microsoft Azure File Sync Elevation of Privilege VulnerabilityMicrosoft Azure File Sync
- CVE-2026-122475Windows Storage Spaces Controller Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-122183Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122182Windows Maps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122177Windows iSCSI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122176Windows SMB Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-122175Windows Autopilot Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122174Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122171Microsoft XPS Document Converter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-122170Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122169Windows IKE Extension Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-122168Microsoft Windows Media Foundation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122166Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122165Windows Client for NFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122164Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122163Windows Image Acquisition Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-121681Microsoft Trace Data Helper Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-121680Windows NTLM Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-121673Windows Filter Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-121671Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-121670Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-121664Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-121663Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-121662Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-121661Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-121660Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-119983Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-120778Aspire Elevation of Privilege VulnerabilityMicrosoft Aspire.Cli
- CVE-2026-119989Azure Pipelines Remote Code Execution VulnerabilityMicrosoft Azure Web Apps
- CVE-2026-119988Windows SMB Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119974Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119969Graphic Fonts Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119967Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119966Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119964Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119963Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119962Windows CredSSP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119961Windows Internet Information Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119960Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119957Windows Remote Desktop Services Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-119954Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119953Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119952Windows Schannel Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119951Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-119950Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119948Windows Active Directory Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119947Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119945Windows Modern Device Management (MDM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119944Windows Mobile Device Management Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119943Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119941Volume Shadow Copy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119939Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119938Windows Shell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119934Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119933Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119932Windows Remote Desktop Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119931Windows Text Services Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119929Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119928Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119925Windows Text Services Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119921Windows Microsoft Account Sign-in Assistant Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119919Windows Distributed Transaction Coordinator Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119917Windows Distributed Transaction Coordinator Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119916Windows Input System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119913Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119908Windows Storage Spaces Controller Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119906Windows Sandbox Elevation of Privilege VulnerabilityMicrosoft Windows Sandbox
- CVE-2026-119907Windows Function Discovery Resource Publication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119904Microsoft Windows Speech Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119899Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119900Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119898Windows PrintWorkflowUserSvc Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119903Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119895Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119894Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119893Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119892Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119888Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119886Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119881Microsoft XPS Document Converter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119880Microsoft XPS Document Converter Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119876Windows USB Scanner Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119874Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119873Windows NetBIOS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119870Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119868Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-119866Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119865Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119862Windows Input System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119861Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119860Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119859Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119858Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119853Remote Access API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119851Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119849Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119847Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119846Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119844Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119839Windows Remote Desktop Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119837Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119835Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119834Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119833Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119831Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119827Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119826Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119824Remote Desktop Client Tampering VulnerabilityMicrosoft Windows
- CVE-2026-119822Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119821Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119818Windows Text Services Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119817Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119816Windows Microsoft Account Sign-in Assistant Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119405Windows Backup Engine Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119403Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119402Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119401Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119399Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119398Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119397Windows Kernel Transaction Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119393Windows Credential Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119392Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119391Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119390Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119389Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119388Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119387Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119386Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-114171Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-123391Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-123390Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-122988Windows Admin Center Elevation of Privilege VulnerabilityMicrosoft Windows Admin Center
- CVE-2026-124187Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-124185Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-124176Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-124174Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-124170Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-123394Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123385Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123384Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123383Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123382Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123381Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123380Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123379Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123378Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123377Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123376Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-123375Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-120791Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120790Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120789Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120788Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120786Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120785Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-120005Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-119986Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-119981Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-119975Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-116925Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116714Windows AppX Deployment Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-124228Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-124227Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-122986Microsoft Azure Kubernetes Service Elevation of Privilege VulnerabilityMicrosoft kernel-mshv-6.6.137.mshv2-2.azl3.x86_64
- CVE-2026-122194Microsoft Defender Remote Code Execution VulnerabilityMicrosoft Malware Protection Engine
- CVE-2026-121668Azure Confidential Clean Rooms Tampering VulnerabilityMicrosoft Azure Confidential Clean Room
- CVE-2026-121665Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-120792Aspire Information Disclosure VulnerabilityMicrosoft Aspire.Cli
- CVE-2026-119985Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-120780Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-119992Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119987Microsoft Windows App Store Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118750ASP.NET Core Denial of Service VulnerabilityMicrosoft.AspNetCore.WebUtilities
- CVE-2026-118749ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +14
- CVE-2026-118748ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +2
- CVE-2026-118747.NET Denial of Service VulnerabilityMicrosoft System.Formats.Cbor · System.Formats.Cbor
- CVE-2026-118745Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-84010Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-118208Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118207Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118157Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118154Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118153Microsoft Exchange Server Denial of Service VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118151Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118150Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-118149Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-125137Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-125136Windows Network Connected Devices Auto-Setup Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-124226Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-124225Windows PowerShell Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-124224PowerShell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122984Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-80094Remote Desktop Gateway Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-120782Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-120006Aspire Elevation of Privilege VulnerabilityMicrosoft Aspire.Hosting · Microsoft Aspire.Hosting.AppH… +2
- CVE-2026-105494Azure NFS mount helper (aznfs) Elevation of Privilege VulnerabilityMicrosoft aznfs
- CVE-2026-112741Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112739Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112737Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112735Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112734Microsoft Office PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112733Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112730Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112729Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112728Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112726Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112724Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112723Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112722Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112721Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112719Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112718Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112717Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112716Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112715Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112714Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111310Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111309Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111308Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111307Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111306Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111305Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111304Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111303Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-111302Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111301Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111300Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-111299Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111298Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111297Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-111296Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-111295Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111294Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111290Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111289Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111287Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111286Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111285Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110068Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110067Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110065Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-110064Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110062Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110061Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110060Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-110059Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-110058Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-110056Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110055Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110054Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110053Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110052Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110050Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110049Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110048Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110047Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110045Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-110044Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-110043Microsoft Office Outlook Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-109505Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109504Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109503Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109502Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109501Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109500Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109499Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109498Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-109497Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109496Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-109494Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-109493Microsoft Office Access Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-112727Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-114161Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-123389Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-123388Windows Program Compatibility Assistant Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-123387Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122979Microsoft Teams for Android Spoofing VulnerabilityMicrosoft Teams for Android
- CVE-2026-122198Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-118742Azure Front Door Elevation of Privilege VulnerabilityMicrosoft Azure Front Door
- CVE-2026-118737Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-118735Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118283Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118280Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118279Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118278Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118277Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118232Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118229Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118228Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118227Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118226Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118225Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118224Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118223Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118222Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118221Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118220Windows Multiple Provider Router Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118219Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118218Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118217Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118216Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118215Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118146Windows Active Directory Domain Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-118145Windows Function Discovery SSDP Provider Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-118142Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118141Windows Client for NFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-118138Windows Client for NFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118137Windows FTP Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118126Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118125Windows Message Queuing Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118124Windows Internet Connection Sharing (ICS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118123Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-116710Windows Message Queuing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-116707Windows Link Layer Topology Discovery Protocol Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-116706Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-116698Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88222Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88212Windows Network Address Translation (NAT) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-125134Windows Function Discovery Resource Publication Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-70003JDBC Driver for SQL Server Security Feature Bypass VulnerabilityMicrosoft JDBC Driver for SQL Server
- CVE-2026-88111SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2022 for x64-based Systems · Microsoft…
- CVE-2026-109459Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-102219Windows Modern Device Management (MDM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96845Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70182Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83563Winlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108407Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108405Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-103571Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85942Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-109473Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108413Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108412Windows Redirected Drive Buffering System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105581Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105580Windows Management Instrumentation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105579Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-105578Microsoft JScript Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105575Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105574Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-105569Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105566Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105565Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-105560Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-105558Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105553Windows Filtering Platform (WFP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105551Windows NetBIOS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105547Windows Setup and Deployment Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105546Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105545Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105543Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105542Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105541Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105540Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105533Windows COM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105532Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105529Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105528Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105526Winsock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105525Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105524Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105522Winlogon Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105520Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-105518Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105515Windows Message Queuing Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105513Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105512Microsoft QUIC Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105510Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105507Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105505Microsoft Input Method Editor (IME) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105504Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105503Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105501Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105499Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105498Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105497Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105496Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105495Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105493Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105491Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105490Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105028Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105026Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105025Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105024Windows Storage Spaces Controller Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105023Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105022Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105021Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105020Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105017Volume Shadow Copy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-102230Visual Studio Code Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-108421Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-108406Windows Network Connection Broker Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-69901Microsoft Teams for Android Spoofing VulnerabilityMicrosoft Teams for Android
- CVE-2026-114159Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114158Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114157ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114155.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +3
- CVE-2026-114154ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114152Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114151Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET 10.0 installed on Windows · Microsoft .NE… +3
- CVE-2026-114149ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +23
- CVE-2026-114147ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +12
- CVE-2026-113865Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113863Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113862Windows Network Address Translation (NAT) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113861Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113860Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113859Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113856Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113855Windows DNS Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-113848Windows NTFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113847Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113843Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113842Windows Security Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108401Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-105561Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105554Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105534Windows Storage Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-105511Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105509Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113825Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113820Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113819Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113814Windows Storage Spaces Controller Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113770Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113769Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113768Windows Performance Counters Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113767Windows COM+ Event System Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113765Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-113762Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113761Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113760Windows XWizard Framework Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113758Windows Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113755Windows Filter Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113753Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113752Windows Print Spooler Components Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113751Windows Fast FAT Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113750Windows Device Inventory Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113749Microsoft Windows Codecs Library Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-113748Software Protection Platform (SPP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112989Windows Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112987Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112986Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112985Windows JScript Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-112981Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112978Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112976Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112973Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-112972Windows SMBv3 Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-112971Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112970Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112968Windows COM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112966Windows Security Account Manager Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-112812Windows SMB Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112811Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112810Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112805Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112804Windows exFAT File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112802Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112801Windows eSCL Scanner Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112800Windows Diagnostic Policy Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112799Windows Projected File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112798Windows NetBIOS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112797Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112796Windows Event Collector Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112794Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112793Windows Event Collector Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112792Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112791Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112790Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112766Windows exFAT File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112765Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112764Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105567Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112763Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112762Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112761Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112760Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112759Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112758Windows Defender Firewall Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112756Windows Filtering Platform (WFP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112753Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112752Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112751Windows Remote Assistance Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112743Windows Device Association Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113823Azure CycleCloud Information Disclosure VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-113759Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-96969Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96971Windows NetBIOS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97002Microsoft Windows VMSwitch Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96973Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97000Windows USM Communication Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96994Winsock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-67375Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server 2025 for x64-based Systems
- CVE-2026-67374Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-85929Microsoft Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96175Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96172Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96168Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96162Windows Clipboard Virtual Channel Extension Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96160Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96155Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96153Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96139Windows Kernel-Mode Drivers Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96127Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96124Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96122Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96107Windows Phone Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96103Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96097Windows Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96092Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-96088Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96076Windows DIAL Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96075Windows Feedback Hub Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96074Windows AppX Package Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96073Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96061Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96060Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96057Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96055Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96051Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96042Windows Connection Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96038Windows Audio Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96036Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96035Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96028Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96027Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96037Windows User Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96029Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96023Windows Push Notification Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96019Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96016Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96020Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-96007Connected Devices Platform Service (Cdpsvc) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96004Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96002Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-95997Windows Event Logging Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95996Windows Bluetooth Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95991Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95988Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95987Windows User Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95983Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95976Windows Diagnostic Policy Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95974Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95968Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95966Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95965Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95956Windows eSCL Scanner Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95951Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95948Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95934Windows Diagnostic Policy Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95932Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95920Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95909Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95896Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95895Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95891Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95888Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95881Windows Push Notifications Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95879Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95877Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95876Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95871Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94531Windows COM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94529Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94525Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94514Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94507DirectX Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88245Windows Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-88242Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88240Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88239Windows Biometric Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88238Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88237Windows Subsystem for Linux Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88229Windows Media Player Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88224Windows AppX Deployment Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88213Windows Bluetooth Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88187Windows Bluetooth A2DP driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70094Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-85923Azure DevOps Server Elevation of Privilege VulnerabilityMicrosoft Azure DevOps Server
- CVE-2026-72998Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-67632Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-66813Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-67637Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-96972Windows DNS Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96993Windows Performance Monitor Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-97013Windows Shell Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96978Windows Credential User Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-67387Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-67646Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…
- CVE-2026-67372Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…
- CVE-2026-96184Windows Modern Device Management (MDM) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96177Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-96176Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96174Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96171Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96164Windows Imaging Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96158Microsoft ActiveX Installer Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96152Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96134Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-96129Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96126Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96117Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96115Windows DHCP Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96102Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96085Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96084Graphic Fonts Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96081Windows Rich Text Edit Control Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96077Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96072Windows Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96066Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96064Windows Domain Name Service Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-96062Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96056Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96053Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96052Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96054Microsoft Color Management Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-96047Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96046Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96043Windows Connection Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96031Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96026Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96008Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96010HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96005Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95999Windows USB Hub Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95989vhdmp.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95979Windows Brokering File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95975Windows Performance Counters Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95973Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95971Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95964Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-95963Data Sharing Service Client Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95961Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95960Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95953Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95950Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95947Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95942Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95938Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95935Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95933Windows OLE Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95923Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95922Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95906Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95902Windows USB Hub Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95898Windows iSCSI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95894Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95885Windows Client for NFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95874Xbox Gaming Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95872Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94527Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94522Windows Kernel Transaction Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94519Windows Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94515Windows Advanced Rasterization Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88249Windows Client for NFS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88244Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-88241Windows Sensor Data Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88236Microsoft QUIC Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-88235Servicing Stack Updates Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88233Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88232Windows Camera Frame Server Monitor Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88230Windows LUA File Virtualization Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88228Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88227Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88221Windows Broadcast DVR User Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88216Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-70240Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-70120Microsoft Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-70231Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85862Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-81384Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-69327Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-67391Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-69565Windows Remote Desktop Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2026-109487Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109492Microsoft MCP Gateway Elevation of Privilege VulnerabilityMicrosoft mcp-gateway
- CVE-2026-109491Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109481ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +13
- CVE-2026-109472Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109466Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109464Microsoft Office SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109457Azure CLI Remote Code Execution VulnerabilityMicrosoft Azure Machine Learning
- CVE-2026-108414Windows Projected File System Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85839Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-85838Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-62903Microsoft.Data.SqlClient Information Disclosure VulnerabilityMicrosoft.Data.SqlClient
- CVE-2026-100223Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83684Windows iSCSI Target Service Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-85801Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-94513Microsoft SQL Server Elevation of Privilege VulnerabilityMicrosoft SQL Server
- CVE-2026-94511SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2026-109478ASP.NET Core Denial of Service VulnerabilityMicrosoft .NET 8.0 installed on Linux · Microsoft .NET 8… +5
- CVE-2026-109475.NET Denial of Service VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +14
- CVE-2026-105734Azure Local Elevation of Privilege VulnerabilityMicrosoft Azure Local
- CVE-2026-102224Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-102236Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-88176Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-83894RPC Runtime Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-114170Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-114169Windows Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2026-114167HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-114165HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-114164HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extensions
- CVE-2026-105544.NET Elevation of Privilege VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +12
- CVE-2026-109463Windows DNS Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108411Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108403Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-100204HEIF Image Extensions Remote Code Execution VulnerabilityMicrosoft HEIF Image Extension
- CVE-2026-105589Windows Wireless Networking Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105587Windows OLE DB Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105586Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105583Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-105582Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-125327pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requestspgedge-rag-server
- CVE-2026-125323pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connectionspgEdge control-plane
- CVE-2026-62929Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-60142Write-what-where condition in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an…Intel(R) TDX Migration Trust Domain
- CVE-2026-60138Use of out-of-range pointer offset in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within…Intel(R) TDX Migration Trust Domain
- CVE-2026-57892Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD)…Intel(R) TDX Migration Trust Domain
- CVE-2026-57891Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may…Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…
- CVE-2026-57890Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-57882Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may…Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…
- CVE-2026-56435Out-of-bounds write in the XmlCliCommonDxe for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may…Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…
- CVE-2026-56432Unintended proxy or intermediary ('confused deputy') in the MigTD signing for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring…Intel(R) TDX Migration Trust Domain
- CVE-2026-50175Untrusted pointer dereference in the FirmwareWakingVector for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an…Intel(R) Slim Bootloader
- CVE-2026-44382Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-42956Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-41224Out-of-bounds write in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.Intel(R) Slim Bootloader
- CVE-2026-41221Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of privilege.Intel(R) Slim Bootloader
- CVE-2026-40433Heap-based buffer overflow for some Intel(R) PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service.Intel(R) PROSet Wireless Wi-Fi Software for Windows
- CVE-2026-35500Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of…Intel(R) Slim Bootloader
- CVE-2026-125350Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125346Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125344Type confusion in V8 in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a…Google Chrome
- CVE-2026-125348Out of bounds write in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to potentially execute arbitrary code outside…Google Chrome
- CVE-2026-125343Buffer overflow in Compositing in Google Chrome prior to 157.0.8103.50 allowed a remote attacker who had compromised the renderer process…Google Chrome
- CVE-2026-111729In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ZIP archive…Eclipse Foundation Eclipse Kura
- CVE-2026-97401In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied directory inside the…Eclipse Foundation Eclipse Kura
- CVE-2026-112186In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no…Eclipse Foundation Eclipse Kura
- CVE-2026-112185In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not…Eclipse Foundation Eclipse Kura
- CVE-2026-126050apitrace 2.0 through 14.0 Heap Buffer Overflow via SnappyFile::flushReadCache()apitrace
- CVE-2026-97891In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authentication…Eclipse Foundation Eclipse Kura
- CVE-2026-92684Aggregation queries can bypass authentication restrictions in @neo4j/graphql@neo4j/graphql
- CVE-2026-57907WatchGuard Endpoint Protection Local Privilege Escalation in Console-Service Communication Allows SYSTEM Code ExecutionWatchGuard Endpoint Security
- CVE-2026-126042VNote 3.11.0 before 4.12.0 OS Command Injection via Tasks Magic Variablesvnotex VNote
- CVE-2026-63010Group-Office: Stored XSS via Manual RemindersIntermesh groupoffice
- CVE-2026-125271AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalizationaws-api-mcp-server
- CVE-2026-82518Akamai CLI before 2.0.6 Path Traversal via cli.json Command NamesAkamai CLI
- CVE-2026-50109Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may allow a denial of…Intel(R) Performance Counter Monitor (Intel(R) PCM)
- CVE-2026-34016Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device…Intel(R) VTune(TM) Profiler software
- CVE-2026-32670Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an…Intel(R) VTune(TM) Profiler software
- CVE-2026-32667Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation of privilege.Intel(R) VTune(TM) Profiler software
- CVE-2026-63651LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirectsPsychQuant livedocs
- CVE-2026-59986rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)alanxz rabbitmq-c
- CVE-2026-124251WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityXplodedThemes WPIDE – File Manager & Code Editor
- CVE-2026-124037Information exposure in Flock Safety Platform public access-list sign-upFlock Safety Platform
- CVE-2026-105425OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0…Ivanti Sentry · Ivanti Endpoint Manager Mobile
- CVE-2026-124036Cross-organization access to saved-search alerts in FlockOSFlockOS
- CVE-2026-112191In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by…Eclipse Foundation Eclipse Kura
- CVE-2026-108187Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network…Zoom Communications Zoom Workplace
- CVE-2026-11316A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5).mackron dr_libs
- CVE-2026-125759Nango before 0.71.3 SQL Injection via Orchestrator Task Group KeyNangoHQ nango
- CVE-2026-125756postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncationpostalsys postal-mime
- CVE-2026-125755Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparsernodemailer
- CVE-2026-125754Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment APIdolibarr
- CVE-2026-125753ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpointsabpframework abp
- CVE-2026-125750Firekylin through 2.18.1 Improper Authorization via Admin REST API GET ActionsFirekylin
- CVE-2026-113422In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1…Eclipse Foundation Eclipse Kura
- CVE-2026-114359Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives.Eclipse Foundation Eclipse Kura
- CVE-2026-120399Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connectionsRed Hat Edge Manager
- CVE-2026-124952Use-after-free in the Audio/Video componentMozilla Firefox
- CVE-2026-124947Incorrect boundary conditions in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124943Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124908Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124904Use-after-free in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124878Use-after-free in the Layout: Positioned componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124871Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124867Use-after-free in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124852Incorrect boundary conditions in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124948Incorrect boundary conditions, use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124932Use-after-free in the Graphics componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124926Incorrect boundary conditions in the WebRTC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124924Incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124922Use-after-free in the CSS Transitions and Animations componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124919Privilege escalation due to use-after-free in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124918Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124915Incorrect boundary conditions in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124907Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124906Use-after-free in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124899Use-after-free in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124898Use-after-free in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124897Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124895Use-after-free in the Storage: localStorage & sessionStorage componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124894Use-after-free in the Networking: Cookies componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124893Use-after-free in the DOM: Workers componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124892Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124891Incorrect boundary conditions in the DOM: Selection componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124890Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124889Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124888Incorrect boundary conditions in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124887Incorrect boundary conditions in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124885Use-after-free in the Graphics: Text componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124884Use-after-free in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124883Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124882Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124881Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124880Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124877Use-after-free in the Layout: Positioned componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124876Use-after-free in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124875Incorrect boundary conditions in the DOM: CSS Object Model componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124872Use-after-free in the Cycle Collector componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124870Incorrect boundary conditions in the JavaScript: GC componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124869Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124868Incorrect boundary conditions in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124866Use-after-free in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124865Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124863Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124862Use-after-free in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124860Use-after-free in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124858Use-after-free in the DOM: HTML Parser componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124857Use-after-free in the Graphics: Canvas2D componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124856Incorrect boundary conditions in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-12708Unbounded HTTP/3 Datagram flow map growth in tokio-quicheCloudflare tokio-quiche
- CVE-2026-124747Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file sizeRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-16478Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installerTÜBİTAK BİLGEM Software Technologies Research Institute par…
- CVE-2026-121267Incorrect Default Permissions Vulnerability in TÜBİTAK BİLGEM's eta-remoteTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-1257427-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction7-Zip
- CVE-2026-12266Authenticated Broken Access ControlZohocorp DDI Central
- CVE-2026-112136A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions…Siemens Mendix Studio Pro
- CVE-2026-109830A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01).Siemens meta-iot2050
- CVE-2026-109097A vulnerability has been identified in ROS# (All versions < V2.3.1).Siemens ROS#
- CVE-2026-59082A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All…Siemens SIMATIC WinCC
- CVE-2026-58114A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC…Siemens SIMATIC BATCH · Siemens SIMATIC Information Serv… +4
- CVE-2026-12574Server-Side HTML InjectionZohocorp DDI Central
- CVE-2026-125712Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsingRed Hat Enterprise Linux
- CVE-2026-12573Authenticated Command InjectionZohocorp DDI Central
- CVE-2026-123717[Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code ExecutionEclipse CSI otterdog
- CVE-2026-12572SQL InjectionZohocorp DDI Central
- CVE-2026-95651Authentication BypassZohocorp DDI Central
- CVE-2026-95646Authenticated Command InjectionZohocorp DDI Central
- CVE-2026-120730Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmwarenerves-hub nerves_hub_web
- CVE-2026-120999Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by…nerves-hub nerves_hub_web
- CVE-2026-120295Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its…nerves-hub nerves_hub_web
- CVE-2026-125704Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserializationRed Hat Enterprise Linux
- CVE-2026-104619PackageKit ZYpp rollback vulnerabilityPackageKit
- CVE-2026-60046DoS via password resetMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60044Static backup passwordMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60040DoS in backup creationMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60039Command injection in backup restoreMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60038OpenSSL command injection in ImportPKCS12MB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60037OpenSSL command injection in device importerMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60036Command injection in patch activateMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60035Command injection in network authMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-120013Path Traversal in Agent Memory Module of SAP Cloud SDK for PythonSAP_SE SAP Cloud SDK for Python
- CVE-2026-120012Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript)SAP_SE SAP Cloud SDK for AI
- CVE-2026-84938Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hookthemefusion Avada (Fusion) Builder
- CVE-2026-93427ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom FieldARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2026-100386Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parserthemefic Ultra Addons for Contact Form
- CVE-2026-120513Everest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' Parameterwpeverest Everest Forms – Contact Form, Payment Form, Quiz,…
- CVE-2026-76877WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' ParameterWPML Multilingual CMS
- CVE-2026-12964A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-12963A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-12389A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-8372A vulnerability that could allow an attacker to gain unauthorized access.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-4762A vulnerability to perform a privilege escalation attack on the server as a non-admin user.Axis Communications AB AXIS Camera Station Pro
- CVE-2026-63288A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.Axis Communications AB AXIS A1210 - Secure Entry · Axis… +3
- CVE-2026-91758Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91759Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91760Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91764Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91761Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91762Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-91763Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for LinuxHitachi Dynamic Link Manager for Linux
- CVE-2026-92864Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager…Hitachi Dynamic Link Manager for AIX · Hitachi Dynamic Link…
- CVE-2026-112125Incorrect Permission Assignment for Critical Resource Vulnerability in HA MonitorHitachi HA Monitor
- CVE-2026-92863Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)Hitachi Dynamic Link Manager for AIX
- CVE-2026-91754Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMwareHitachi Dynamic Link Manager for VMware
- CVE-2026-91755Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMwareHitachi Dynamic Link Manager for VMware
- CVE-2026-91756OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMwareHitachi Dynamic Link Manager for VMware
- CVE-2026-91757OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMwareHitachi Dynamic Link Manager for VMware
- CVE-2026-86578Link Following Vulnerability in Hitachi Dynamic Link Manager for WindowsHitachi Dynamic Link Manager for Windows
- CVE-2026-86579Binary Planting Vulnerability in Hitachi Dynamic Link Manager for WindowsHitachi Dynamic Link Manager for Windows
Medium, low and unrated 818
- CVE-2026-126188Active Storage: Possible local file disclosure in Active Storage video previews and analysisrails
- CVE-2026-20183ISE Authorization Bypass vulnerabilityCisco Identity Services Engine Software
- CVE-2024-36309Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Serie… +48
- CVE-2025-48504Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7
- CVE-2025-29941Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7
- CVE-2026-0003Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +4
- CVE-2026-0435Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-123084Python-pulpcore: pulpcore: header content guard jq filter exposes the content-app environmentRed Hat Ansible Automation Platform · Red Hat Satellite +2
- CVE-2026-0454An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-0480Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…AMD EPYC™ 9005 Series Processors · AMD EPYC™ 8005 Series… +1
- CVE-2026-28248Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-28247Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-28249Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV)…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5
- CVE-2026-40668Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-40669An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +5
- CVE-2026-40670Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +8
- CVE-2026-90834UART wide-data syscall verifiers check the 8-bit driver op, allowing a user-mode thread to trigger a NULL function-pointer call in kernel…zephyrproject zephyr
- CVE-2026-87042Zephyr PTP: unvalidated Delay_Resp message interval lets an on-link peer wedge the PTP thread and flood the networkzephyrproject zephyr
- CVE-2026-90832Out-of-bounds read in Bluetooth Host periodic advertising report reassembly due to unvalidated report lengthzephyrproject zephyr
- CVE-2026-67177Chargemap stored XSSChargemap
- CVE-2026-67176Chargemap open redirectChargemap
- CVE-2026-67175Chargemap stored XSSChargemap
- CVE-2026-123259Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-123258Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-118482Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
Show all 818 entriesShow fewer entries
- CVE-2026-118481Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-118480Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-118479Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2026-118478Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-118197Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-114372Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager as a Cloud Service · Adobe Experie…
- CVE-2026-123341Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager as a Cloud Service
- CVE-2026-126123BeeS ERP administrative console IDORBeeS Software Solutions ERP
- CVE-2026-92558The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator characters when…Kong Gateway Enterprise · Kong AI Gateway
- CVE-2025-0027Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +6
- CVE-2025-29940Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-52537Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-52535Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +6
- CVE-2025-54506A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-54503Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-54508Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-54504Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2025-62620Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status…AMD EPYC™ 9004 Series Processors · AMD EPYC™ 7003 Series… +7
- CVE-2025-62621Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map…AMD EPYC™ 9005 Series Processors · AMD EPYC™ Embedded 9005…
- CVE-2026-121912Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe Connect
- CVE-2026-121910Adobe Connect | Cross-site Scripting (XSS) (CWE-79)Adobe Connect
- CVE-2026-105150Product Filter for WooCommerce by WBW <= 3.4.5 - Reflected Cross-Site Scripting via 'text_no_products' Parameterwoobewoo Product Filter for WooCommerce by WBW
- CVE-2026-122100CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-118484CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113573CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122097CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113572CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122098CAI Content Credentials | Improper Certificate Validation (CWE-295)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123262CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123261CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123267CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-113574CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-123260CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122101CAI Content Credentials | Improper Input Validation (CWE-20)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-122099CAI Content Credentials | Incorrect Authorization (CWE-863)Adobe Content Credentials Rust SDK · Adobe C2PA Tool
- CVE-2026-126129The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a…Auth0 ASP.NET Core Authentication
- CVE-2026-126085Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storagerails · activestorage
- CVE-2026-126084Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_controlrails
- CVE-2026-126128The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its attached management…Auth0 Node JS
- CVE-2026-108167The auth0-ai-python FGA retriever does not distinguish between authorization checks under different users, relations, or conditions when…auth0-ai-langchain · auth0-ai-llamaindex
- CVE-2026-107372The auth0-ai-js FGA retriever does not distinguish between authorization checks under different conditions when filtering documents during…Auth0 AI JS
- CVE-2026-126079Action View: Possible XSS vulnerability in Action View text helpersrails
- CVE-2026-126078Action View: Possible XSS vulnerability in Action View highlight helperrails
- CVE-2026-126077Action Pack: Possible sensitive session information leak in Active Storage proxy moderails
- CVE-2026-126076Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStorerails · actionpack
- CVE-2026-118198Photoshop Desktop | NULL Pointer Dereference (CWE-476)Adobe Photoshop
- CVE-2026-118199Photoshop Desktop | Out-of-bounds Read (CWE-125)Adobe Photoshop
- CVE-2026-113578Photoshop Desktop | Uncontrolled Recursion (CWE-674)Adobe Photoshop
- CVE-2026-114373Photoshop Desktop | Divide By Zero (CWE-369)Adobe Photoshop
- CVE-2026-113571Photoshop Desktop | NULL Pointer Dereference (CWE-476)Adobe Photoshop
- CVE-2026-118200Photoshop Desktop | Out-of-bounds Read (CWE-125)Adobe Photoshop
- CVE-2026-113569Photoshop Desktop | NULL Pointer Dereference (CWE-476)Adobe Photoshop
- CVE-2026-115345Photoshop Desktop | Out-of-bounds Read (CWE-125)Adobe Photoshop
- CVE-2026-126075Active Support: Possible XSS vulnerability in Active Support MessagePack serializerrails · activesupport
- CVE-2026-126074Active Storage: Possible DoS vulnerability in Active Storage filename handlingrails · activestorage
- CVE-2026-113549Audition | NULL Pointer Dereference (CWE-476)Adobe Audition
- CVE-2026-126073Action Pack: Possible cache poisoning in Action Pack content negotiationrails · actionpack
- CVE-2026-126072Action Pack: Possible DoS vulnerability in Action Controller Live streamingrails
- CVE-2026-113539Media Encoder | NULL Pointer Dereference (CWE-476)Adobe Media Encoder
- CVE-2026-126071Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streamingrails · activestorage
- CVE-2026-126070Action View: Possible XSS vulnerability in Action View strip_tagsrails
- CVE-2026-126069Action View: Possible XSS vulnerability in Action View tag helpersrails
- CVE-2026-110093After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2026-113521After Effects | NULL Pointer Dereference (CWE-476)Adobe After Effects
- CVE-2026-113519After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2026-113514After Effects | Out-of-bounds Read (CWE-125)Adobe After Effects
- CVE-2026-126068Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingressrails · actionmailbox
- CVE-2026-126067Action Pack: Missing SameSite attribute on session cookies from Action Pack session storesrails · actionpack
- CVE-2026-113577Premiere Pro | NULL Pointer Dereference (CWE-476)Adobe Premiere
- CVE-2026-110087Premiere Pro | Buffer Overflow (CWE-120)Adobe Premiere
- CVE-2026-120819Use-after-free in Wasm JS-BSON bridge lets read-only users read 24 KiB via $accumulatorMongoDB Server
- CVE-2026-126066fast-xml-parser: Quadratic CPU consumption scanning unterminated stop-node tagsNaturalIntelligence fast-xml-parser · fast-xml-parser
- CVE-2026-120823Missing Authorization Check in MongoDB Server Aggregation Framework Leads to Unauthorized Access to Deployment-Wide Configuration DataMongoDB Server
- CVE-2026-126064Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`sparklemotion nokogiri · nokogiri
- CVE-2026-120820Uncontrolled Resource Consumption in MongoDB Server Per-Namespace Encrypted-Field Statistics Table Leads to Denial of ServiceMongoDB Server
- CVE-2026-126063Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializersparklemotion nokogiri · nokogiri
- CVE-2026-120816System collection contents readable through a database change stream with showSystemEventsMongoDB Server
- CVE-2026-126062Nokogiri : Possible SSRF on JRuby when resolving external DTDs or entities with `NONET` setsparklemotion nokogiri · nokogiri
- CVE-2026-120812Full server crash via unbounded per-operand recursion in time-series query vectorizationMongoDB Server
- CVE-2026-121530A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper…Fortinet FortiOS
- CVE-2026-120811Use-After-Free in MongoDB Server Classic Query Engine Plan Cache Leads to Information Disclosure and Denial of ServiceMongoDB Server
- CVE-2026-121369Security Advisory 0225Arista Networks EOS
- CVE-2026-121294Security Advisory 0223Arista Networks EOS
- CVE-2026-121293Security Advisory 0210Arista Networks EOS
- CVE-2026-121286Security Advisory 0213Arista Networks EOS
- CVE-2026-120981Security Advisory 0214Arista Networks EOS
- CVE-2026-120980Security Advisory 0214Arista Networks EOS
- CVE-2026-120978Security Advisory 0211Arista Networks EOS
- CVE-2026-120976Security Advisory 0216Arista Networks EOS
- CVE-2026-120975Security Advisory 0205Arista Networks EOS
- CVE-2026-120974Security Advisory 0219Arista Networks EOS
- CVE-2026-126061Winter CMS: My Account preview exposes another backend user's profile by record IDwintercms winter · winter/wn-backend-module
- CVE-2026-125341Winter CMS: Stored XSS through Backend List widget image columnswintercms winter · winter/wn-backend-module
- CVE-2026-120809Heap use-after-free read via yield-time state save in time-series block unpackingMongoDB Server
- CVE-2026-125340Winter CMS: Reflected XSS through the search query parameter in the backend Table widgetwintercms winter · winter/wn-backend-module
- CVE-2026-95786Access Control Vulnerability Could Permit Unauthorized Interaction with Protected ServicesHewlett Packard Enterprise (HPE) Private 5G Core
- CVE-2026-125339Winter CMS: CSRF through AJAX handler names reachable as backend page actionswintercms winter · winter/wn-backend-module
- CVE-2026-120805Authorization bypass via redirected FLE2 state-collection writes in encrypted CRUD pathMongoDB Server
- CVE-2026-124848Incorrect default permissions on session transcripts and prompt history in Kiro CLIAmazon Kiro CLI
- CVE-2026-125338Winter CMS: Stored XSS through cached Brand Settings and Editor Settings custom styleswintercms winter · winter/wn-backend-module
- CVE-2026-50078Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-95405In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size underflow due to an…Google Android
- CVE-2026-95404In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an…Google Android
- CVE-2026-95403In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap due to a missing…Google Android
- CVE-2026-95402In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-95401In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-95400In StNfc_hal_write of hal_st21nfc.cc, there is a possible way to trigger an out of bounds write into global memory due to an incorrect…Google Android
- CVE-2026-95399In multiple functions of face_status.h, there is a possible way to modify verified biometric enrollment data in shared memory due to a…Google Android
- CVE-2026-95397In sub_layer_hrd_parameters of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59637In userdata_report of hwcodec_firmware, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-59636In has_booted_successfully of sys_state_setup_otp_ta.c, there is a possible way to trigger a permanent denial of service via premature…Google Android
- CVE-2026-59635In cpb_cnt of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59631In s_inter_rps_pred of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59630In check_constraint_monotonicity of lib.rs, there is a possible way to downgrade stored security policies and bypass rollback protection…Google Android
- CVE-2026-59628In s_copy_host_apb_param of multiple files, there is a possible way to trigger an out of bounds read in the video decoder command queue…Google Android
- CVE-2026-59626In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after…Google Android
- CVE-2026-59625In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error.Google Android
- CVE-2026-124016postal-mime < 4.2.1 Algorithmic Complexity DoS via processLinepostalsys postal-mime
- CVE-2026-59624In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to…Google Android
- CVE-2026-59623In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an…Google Android
- CVE-2026-59619In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing…Google Android
- CVE-2026-59618In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory…Google Android
- CVE-2026-59616In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59614In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a…Google Android
- CVE-2026-59613In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input…Google Android
- CVE-2026-59612In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59611In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input…Google Android
- CVE-2026-50079Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-59609In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use…Google Android
- CVE-2026-59608In tone_mapping_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59607In TzPipelineInputExtractor of TzPipelineInputExtractor.cpp, there is a possible Logic check bypass due to a logic error in the code.Google Android
- CVE-2026-59606In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify global reset registers from non-secure software due to a…Google Android
- CVE-2026-59604In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error.Google Android
- CVE-2026-59603In RespondReceivedMessage of MtsMessageController.cpp, there is a possible way to trigger a double free and process abort during message…Google Android
- CVE-2026-59601In CalculateSampleRate of cldma_alcedo.cc, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-59599Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in…Google Android
- CVE-2026-59598In platform_rio_ncp_wdt_handler of edgetpu_rio.c, there is a possible Use After Free due to a use after free.Google Android
- CVE-2026-59597In bindDataService of DataServiceManager.java, there is a possible way to retain privileged tunnel management permissions across…Google Android
- CVE-2026-59596In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an…Google Android
- CVE-2026-59595In DecodeHeaderComponent of SipStack.cpp, there is a possible way to trigger stack exhaustion via unbounded mutual recursion due to a…Google Android
- CVE-2026-59594In spm_alloc of encoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.Google Android
- CVE-2026-59593In tile_info of av1_decoder, there is a possible Heap Buffer Overflow due to a heap buffer overflow.Google Android
- CVE-2026-59589In s_av1_dec_metadata_scalability of av1_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59587In stpropnci_prop_st_build_set_custom_polling_cmd of stpropnci_prop_st.cc, there is a possible way to trigger an out of bounds write into…Google Android
- CVE-2026-59586In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto.Google Android
- CVE-2026-59583In FormCredentials of SipAuHelper.cpp, there is a possible way to disclose authentication credentials in cleartext via a scheme downgrade…Google Android
- CVE-2026-59582In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer…Google Android
- CVE-2026-59580In trusty_context_switch of services/spd/trusty/trusty.c, there is a possible Secure world register state leak due to a logic error in the…Google Android
- CVE-2026-59579In getUserDataPayload of GC2UserData.cpp, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-59578In s_check_valid_tile_param_custom_tile of av1_encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-59575In stpropnci_cb_observe_mode_suspend of stpropnci_prop_android.cc, there is a possible way to trigger an out of bounds write into global…Google Android
- CVE-2026-59574In notifyPollingLoopFrames of hal_fwlog.cc, there is a possible way to trigger an out of bounds read and write when formatting firmware…Google Android
- CVE-2026-59573In max_num_ref_frames of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-58813In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect…Google Android
- CVE-2026-58812In decode of fw_vp9_dec_pic.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-58811In smmu_get_mair_idx of smmu.c, there is a possible way to apply incorrect memory attributes to direct memory access mappings due to a…Google Android
- CVE-2026-58810In multiple functions of simd_ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers…Google Android
- CVE-2026-58809In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible OOB Write due to a missing bounds check.Google Android
- CVE-2026-58808In multiple locations, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a missing permission…Google Android
- CVE-2026-58807In Retry_MtsMessageInPending of MtsMessageController.cpp, there is a possible way to trigger memory exhaustion via leaked message objects…Google Android
- CVE-2026-58806In get_sswrp_state of cpm_mbox_srv/main.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-58805In multiple locations, there is a possible way to zero arbitrary secure memory via unvalidated image body addresses due to a missing…Google Android
- CVE-2026-58804In ExecuteGraphCommand of multiple files, there is a possible way to trigger an out of bounds write via an oversized scratch memory…Google Android
- CVE-2026-58803In bytes_are_equal of lib.rs, there is a possible way to recover authentication keys due to side channel information disclosure.Google Android
- CVE-2026-58801In smmu_domain_config_s1 of arm-smmu-v3.c, there is a possible way to access stale stream table entries across reassigned stream…Google Android
- CVE-2026-58800In IMG_vkCreateImageView of image_view.c, there is a possible way to trigger a use after free due to memory corruption.Google Android
- CVE-2026-58799In multiple functions of rmmi_utility.c, there is a possible way to trigger an out of bounds write due to a missing bounds check.Google Android
- CVE-2026-58798In multiple functions of cn_Tai.cpp, there is a possible way to trigger an out of bounds write due to memory corruption.Google Android
- CVE-2026-58797In register_dump_dpa of sswrp_pcie.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-58796In multiple functions of AndroidManifest.xml, there is a possible way to trigger unauthorized firmware updates via exported broadcast…Google Android
- CVE-2026-58791In pic_timing of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-58790In CMD_ENC_SET_PARAM of encoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-58788In stpropnci_process_std of stpropnci_std.cc, there is a possible way to trigger an out of bounds write into global state due to a missing…Google Android
- CVE-2026-58787In chppWifiRangingEventNotification of clients/wifi.c, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-58786In cnm_memset of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-58785In update_user_consent of main.rs, there is a possible elevation of privilege due to uninitialized data.Google Android
- CVE-2026-58783In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-58782In multiple locations, there is a possible denial of service due to a logic error in the code.Google Android
- CVE-2026-58781In HostLinkBase::chreIpiHandler of host_link.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58780In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check.Google Android
- CVE-2026-58779In multiple locations, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58778In multiple locations, there is a possible use-after-free due to a race condition.Google Android
- CVE-2026-58769In multiple locations, there is a possible out-of-bounds read due to a missing bounds check.Google Android
- CVE-2026-58762In ac_get_prot_config of plat_trusty.c, there is a possible memory corruption due to improper input validation.Google Android
- CVE-2026-58757In mfc_alloc_enc_roi_buffer of mfc_buf.c, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58752In aoc_unlocked_ioctl_handle_ion_fd of aoc.c, there is a possible type confusion due to improper input validation.Google Android
- CVE-2026-58740In BitmapImageBuffer of bitmap_image_buffer.h, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-58736In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response…Google Android
- CVE-2026-58729In multiple files, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-58722In chppProcessDiscoverAllResponse of system/chre/chpp/clients/discovery.c, there is a possible Heap Buffer Overflow due to a logic error…Google Android
- CVE-2026-58705In handleEvent of gscan.cpp, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds check.Google Android
- CVE-2026-58702In createIntent of TimerAgent.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-58697In codec3p_secure of codec3p_secure, there is a possible Heap Buffer Overflow due to a missing bounds check.Google Android
- CVE-2026-58696In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow.Google Android
- CVE-2026-58690In multiple functions of bitmap_image_buffer.h, there is a possible way to trigger an out of bounds write on the trusted execution…Google Android
- CVE-2026-58684In smmu_config_l3tt of smmu.c, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-58681In multiple locations, there is a possible out-of-bounds write due to an integer overflow.Google Android
- CVE-2026-58680In cpm_mbox_power_ctrl_sswrp of cpm_mbox.c, there is a possible permission bypass due to a precondition check failure.Google Android
- CVE-2026-58677In get_secure_boot_mode of auth.rs, there is a possible way to bypass root signature verification via fault injection due to a logic error.Google Android
- CVE-2026-57048In authenticate of verify_image, there is a possible Signature verification logic bypass due to a logic error in the code.Google Android
- CVE-2026-57047In __mfc_core_nal_q_get_dec_metadata_sei_nal of mfc_core_nal_q.c, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-57043In tipc_dev_probe of tipc_virtio_dev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a…Google Android
- CVE-2026-57037In getChppAppState of chpp_init.cc, there is a possible way to trigger an out of bounds read and corrupt task control structures due to a…Google Android
- CVE-2026-57036In send_vdu_directive of gdmc/gsp/dev/bmsm/plat/lga/vdu.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-57013In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall…Google Android
- CVE-2026-57010In EncodeLastScanBufferElement of data_manager.cc, there is a possible out-of-bounds write due to a logic error in the code.Google Android
- CVE-2026-57009In GC2AvcDec of GC2AvcDec.cpp, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-57005In EuiccPort.buildUiccAccessRule of EuiccPort.java, there is a possible Confused Deputy due to a confused deputy.Google Android
- CVE-2026-57004In PresenceDecoderV1::DecodeDataElements of presence_decoder_v1.cc, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-56995In multiple locations, there is a possible way to corrupt host allocator metadata in shared memory due to memory corruption.Google Android
- CVE-2026-56980In createDataFlowAsync of data_flow_manager.cc, there is a possible way to trigger an out of bounds write in shared memory due to an…Google Android
- CVE-2026-56971In AudioSession::SendInternalEvent of AudioSession.cpp, there is a possible Double Free due to a logic error in the code.Google Android
- CVE-2026-56969In edgetpu_group_clear_responses of edgetpu_group.c, there is a possible Use After Free due to a logic error in the code.Google Android
- CVE-2026-56966In CommitToBuffer of hal_override_options.bundle.cc, there is a possible way to retain stale direct memory access mappings to secure…Google Android
- CVE-2026-56956In EncodeT140 of TextRtpPayloadEncoderNode.cpp, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-56951In on_vkUpdateDescriptorSetWithTemplateSized2GOOGLE of vk_decoder_global_state.cpp, there is a possible way to leak host code pointers to…Google Android
- CVE-2026-56949In multiple locations, there is a possible way to modify authenticated coprocessor firmware in shared memory before loading due to a race…Google Android
- CVE-2026-56947In getCarrierRestrictionStatus of PhoneInterfaceManager.java, there is a possible permission bypass due to a confused deputy.Google Android
- CVE-2026-56946In smmu_unmap_visit_leaf of arm-smmu-v3.c, there is a possible way to release active direct memory access page references during unmapping…Google Android
- CVE-2026-56944In smmu_detach_dev of private/google-modules/iommu/arm-smmu-v3/drivers/iommu/arm/arm-smmu-v3/pkvm/arm-smmu-v3.c, there is a possible Use…Google Android
- CVE-2026-56943In multiple locations, there is a possible way to trigger an out of bounds read via an attestation comparison oracle due to an incorrect…Google Android
- CVE-2026-56938In port_shutdown of ipc.c, there is a possible Use After Free due to a race condition.Google Android
- CVE-2026-56935In km_os_regen_salt of storage.c, there is a possible way to recover deleted keys due to a logic error.Google Android
- CVE-2026-56934In arm_lpae_split_blk_unmap of drivers/iommu/io-pgtable-arm-common.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-56933In RecordApTx of efw_ap_transport.c, there is a possible Non-Heap Buffer Overflow due to a buffer overflow.Google Android
- CVE-2026-56930In smmu_find_ste of smmu.c, there is a possible way to retain stale translation lookaside buffer entries across stream identifiers due to…Google Android
- CVE-2026-56929In TrustyKeyMintManager::VerifyHat of trusty_keymint_manager.cc, there is a possible Security check bypass due to a logic error in the code.Google Android
- CVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device…Google Android
- CVE-2026-56919In PackageSignatureChecker of SystemUIGoogleModule.java, there is a possible background activity launch due to a confused deputy.Google Android
- CVE-2026-56916In _vqueue_get_avail_buf_locked of trusty/kernel/lib/trusty/vqueue.c, there is a possible Double-read / TOCTOU due to a race condition.Google Android
- CVE-2026-56912In ac_remove_smmu_prot_internal of acfw_smmu.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-56911In handle_fips_hmac_req of hwcrypto_proxy.c, there is a possible heap buffer overflow due to missing bounds check.Google Android
- CVE-2026-56910In multiple locations, there is a possible way to trigger an out of bounds read and write in shared memory due to an incorrect bounds check.Google Android
- CVE-2026-56909In multiple functions of sswrp_cpm.dtsi, there is a possible way to modify voltage control registers from non-secure software due to a…Google Android
- CVE-2026-56902In multiple locations, there is a possible information disclosure due to a logic error in the code.Google Android
- CVE-2026-56898In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly…Google Android
- CVE-2026-56897In multiple functions of attestation_object.c, there is a possible way to disclose uninitialized secure element stack memory in key…Google Android
- CVE-2026-56884In ac_set_ns_ipa_tbl of plat_trusty.c, there is a possible way to corrupt stream table entry configurations via unvalidated parameters due…Google Android
- CVE-2026-55362In multiple files, there is a possible out-of-bounds write due to a missing bounds check.Google Android
- CVE-2026-55360In secure_transport_usecase_handshake of secure_transport.c, there is a possible way to bypass secure transport channel encryption due to…Google Android
- CVE-2026-55348In GetSharedMemory of trusty_shared_memory_manager.cc, there is a possible way to trigger an out of bounds read via sign extension of a…Google Android
- CVE-2026-55346In km_read_data_response of keymaster.c, there is a possible way to trigger an out of bounds write on the heap due to a missing bounds…Google Android
- CVE-2026-55344In TzSharedMemory of TzSharedMemory.c, there is a possible Heap buffer overflow due to a logic error in the code.Google Android
- CVE-2026-55335In multiple locations, there is a possible use-after-free due to a logic error in the code.Google Android
- CVE-2026-55321In parse_prime256v1 of keymint_asn1.c, there is a possible Heap Buffer Overflow due to a logic error in the code.Google Android
- CVE-2026-55319In thread_free of thread.c, there is a possible way to corrupt kernel heap metadata on thread creation failure due to memory corruption.Google Android
- CVE-2026-55316In handle_dpm_image of seclib.rs, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-55312In insert_node of remap.c, there is a possible way to trigger an out of bounds write in the address remapping table due to a non-heap…Google Android
- CVE-2026-55311In N/A of gdmc/gsp/project/gdmc.mk, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-55309In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault injection due to a…Google Android
- CVE-2026-55297In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent shared memory…Google Android
- CVE-2026-14447In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an off-by-one check due to…Google Android
- CVE-2026-0195In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error.Google Android
- CVE-2026-0193In handle_rx_msg of tipc_virtio_dev, there is a possible Double Fetch TOCTOU due to Double Fetch.Google Android
- CVE-2026-0191In event_set_sub of acropora_event.c, there is a possible Logic error due to a logic error in the code.Google Android
- CVE-2026-0178In multiple functions of arm-smmu-v3.c, there is a possible way to bypass direct memory access isolation via stale stream table entries…Google Android
- CVE-2026-0175In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a logic error.Google Android
- CVE-2026-0169In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test or debugging code.Google Android
- CVE-2026-50080Vulnerabilities in the QNX Virtual Machine (QVM) affect QNX Hypervisor and QNX Hypervisor for SafetyBlackBerry QNX Hypervisor
- CVE-2026-40273Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-40274Vulnerabilities in the QNX Neutrino kernel affect QNX Software Development Platform and QNX OS for SafetyBlackBerry QNX Software Development Platform · BlackBerr… +1
- CVE-2026-126136OAuth2 access token could be sent over an unencrypted connection with Exchange accountsMozilla Thunderbird
- CVE-2026-126135SMTP and POP3 response injection when using STARTTLSMozilla Thunderbird
- CVE-2026-126134Feed subscriptions could leak NTLM credentials on WindowsMozilla Thunderbird
- CVE-2026-126133Calendar server credentials could be sent to an HTTP proxyMozilla Thunderbird
- CVE-2026-126132Attachments could be replaced with local file content when forwardingMozilla Thunderbird
- CVE-2026-125335Forge: Ed25519 signature verification accepts small-order public keysdigitalbazaar forge · node-forge
- CVE-2026-125334Forge: TLS client crash on a handshake record received without a sessiondigitalbazaar forge · node-forge
- CVE-2026-125333Forge: ReDoS in forge.http response header and cookie trimmingdigitalbazaar forge · node-forge
- CVE-2026-125332Forge: TLS client crash on an unsupported ServerHello compression methoddigitalbazaar forge · node-forge
- CVE-2026-115559imaplib STARTTLS serves plaintext bytes buffered before the handshake as if they came over TLSPython Software Foundation CPython
- CVE-2026-18448Leak SMM RAM from the kernel (Simply TSA after an SMI)TianoCore EDK2
- CVE-2026-54437Vulnerabilities in the QNX io-char library Impacts QNX Software Development PlatformBlackBerry QNX Software Development Platform
- CVE-2026-119999Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-119998Microsoft Office Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-119993Microsoft Office Outlook Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-118728Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118727Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118300Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-118104Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-118103Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-118102Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-116940Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-116939Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-116935Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server 2017 for x64-based Systems · Microsoft…
- CVE-2026-116932Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-116922Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-116721Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-122173HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122167Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-122162Windows Update Stack Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-121678Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows App Client for Windows Desktop
- CVE-2026-121677Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows App Client for Windows Desktop
- CVE-2026-121675PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell
- CVE-2026-121674PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell
- CVE-2026-121669PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell
- CVE-2026-120796.NET Denial of Service VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +14
- CVE-2026-119972Remote Procedure Call Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119971Windows DNS Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-119970Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-119965Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119955Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119946HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119942HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119940Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119937Kernel Streaming Service Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119936Windows Internet Information Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119935Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119918Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119914Windows Setup and Deployment Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119912Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119910Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119909Windows Internet Information Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119901Windows MIDI Service Module Elevation of Privileges VulnerabilityMicrosoft Windows
- CVE-2026-119905Windows DNS Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2026-119890Windows DHCP Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-119889ActiveSyncProvider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119887Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119885Windows Storport Miniport Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119884Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119883Data Deduplication Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2026-119882Windows Remote Desktop Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119875Windows Storport Miniport Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119872Windows USB Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119871Windows IP Translation Configuration Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119869Windows Failover Cluster Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-119867Windows Installer Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-119857Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119856Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119855Windows COM+ Event System Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119852Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119848Windows Message Queuing Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119841Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119840Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119838Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119836Windows Management Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119832Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-119830Windows Storport Miniport Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119829Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-119825Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119823Windows Storport Miniport Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119404Windows Client for NFS Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-119396Windows Remote Access API Tampering VulnerabilityMicrosoft Windows
- CVE-2026-119395Storport.sys Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-119394Windows Enhanced Storage Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-119385Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-119383Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-124210Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-124194Microsoft Outlook Spoofing VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-124183Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-124179Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-124178Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +2
- CVE-2026-123395Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-120783Azure DevOps Server Elevation of Privilege VulnerabilityMicrosoft Azure DevOps Server
- CVE-2026-119982Visual Studio Code Security Feature Bypass VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-119976Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure VulnerabilityMicrosoft Visual Studio Code
- CVE-2026-124233Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-124229Microsoft Office Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-122987Microsoft High Performance Computing (HPC) Pack Elevation of Privilege VulnerabilityMicrosoft HPC Pack
- CVE-2026-122518Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2026-118746.NET Security Feature Bypass VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET 11.…
- CVE-2026-118739Windows DHCP Client Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-118152Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server Subscription Edition RTM
- CVE-2026-125135HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112745Azure DevOps Server Information Disclosure VulnerabilityMicrosoft Azure DevOps
- CVE-2026-112738Microsoft Office PowerPoint Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112736Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-112731Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-112720Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111293Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111292Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-111291Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2026-111288Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110066Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110057Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-110051Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-110046Microsoft Office Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 365… +1
- CVE-2026-109495Microsoft Office SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-119959Windows Hyper-V Spoofing VulnerabilityMicrosoft Windows
- CVE-2026-122985Microsoft PowerShell Information Disclosure VulnerabilityMicrosoft PowerShell
- CVE-2026-122196Microsoft Dynamics 365 (on-premises) Information Disclosure VulnerabilityMicrosoft Power Apps
- CVE-2026-119991Microsoft Configuration Manager Information Disclosure VulnerabilityMicrosoft Configuration Manager
- CVE-2026-118736Windows Network File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-118214Windows Advanced Rasterization Platform Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-118213Windows Deployment Services Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-118144Windows Smart Card Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118143Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-118140Server for NFS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-116700Windows Telephony Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-116699Microsoft WDAC OLE DB provider for SQL Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-116697Reliable Multicast Transport Driver (RMCAST) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-108423Windows WinHTTP Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108404Windows CD-ROM Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-108470Microsoft Authentication Library (MSAL) for Node.js Information Disclosure VulnerabilityMicrosoft @azure/msal-node
- CVE-2026-108469Microsoft Authentication Library for JavaScript Spoofing VulnerabilityMicrosoft Authentication Library for JavaScript
- CVE-2026-105559Windows Active Directory Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105557Windows DHCP Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-105552Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105549Windows Smart Card Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105537Mailslot File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105531Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105530Windows System Events Broker Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105527Windows Encrypting File System (EFS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105506Windows Shell Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105492Microsoft Remote Registry Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105018Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-108410Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108408Windows Telephony Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-114156ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +2
- CVE-2026-114150ASP.NET Core Information Disclosure VulnerabilityMicrosoft .NET 11.0 installed on Linux · Microsoft .NET… +2
- CVE-2026-113864Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-99288inet: reject unhashed sockets during established lookupsLinux
- CVE-2026-113844Windows NTFS Tampering VulnerabilityMicrosoft Windows
- CVE-2026-105568Windows Active Directory Domain Services Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-105562Windows Container Manager Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113821Microsoft Windows SCSI Class System File Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113818Windows Deployment Services Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-113817Windows Devices Human Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113816Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113815Microsoft PowerShell Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-113773Windows DHCP Server Spoofing VulnerabilityMicrosoft Windows Server
- CVE-2026-113772Windows Redirected Drive Buffering Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113771Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113766Windows Language Experience Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-113764Windows Projected File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113763Windows DPAPI (Data Protection Application Programming Interface) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-113757Windows FileCrypt Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113756Windows FileCrypt Driver Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-113754Windows FileCrypt Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112990Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112988Windows Desktop Window Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112984Windows USB Video Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112982Microsoft Account Tampering VulnerabilityMicrosoft Windows
- CVE-2026-112980Windows Print Spooler Components Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112979Windows State Repository Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-112977Windows Deployment Services Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-112975Windows Link-Layer Discovery Protocol (LLDP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-112974Microsoft Account Tampering VulnerabilityMicrosoft Windows
- CVE-2026-112969Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112965Windows Management Instrumentation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112814Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112813Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112809Windows Composite Image File System Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112808Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112807Windows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-112806Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112803Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112795Windows Security Account Manager Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-112789Windows Installer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112757Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112755Windows RNDIS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-112754Microsoft Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-112750Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-113822Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2026-96985Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96984Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-97006Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96980Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96975Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-96983Windows DNS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96979HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96989Secondary Logon Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96982HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96974HID Parser Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-68783Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server 2025 CU10 · Microsoft SQL Server 2025…
- CVE-2026-96156Windows Broker Infrastructure Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96110Windows OLE Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96093Windows Internet (wininet.dll) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96086Windows WLAN Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96041Windows USB Hub Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96022Windows Text Services Framework Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96017Role: DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2026-95910Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-95908Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95893Win32k Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95889Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-88217Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88215Windows Filtering Platform (WFP) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-99287xen-netback: Zero out sring pointers on unmapLinux
- CVE-2026-99286xen-netback: Fix XenBus connection failure cleanupLinux
- CVE-2026-88211Graphic Fonts Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-85907Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-83953GitHub Copilot for Jetbrains Information Disclosure VulnerabilityMicrosoft GitHub Copilot Plugin for JetBrains IDEs
- CVE-2026-67382Microsoft SQL Server Information Disclosure VulnerabilityMicrosoft SQL Server
- CVE-2026-96988Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96987Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96986Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96970Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96976Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96992Windows PCI Bus Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-96981Windows PCI Bus Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-97015Windows BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2026-96965Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96179Windows DNS Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-96150Microsoft Windows Codecs Library Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96144Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96137Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96133Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96112Windows DNS Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-96101Windows Connected User Experiences and Telemetry Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96082Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-96059HID class driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96058Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95692Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIVOpenSSL
- CVE-2026-96048Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96018Windows AppContainer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-96001Windows Bluetooth Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95998Windows StateRepository API Tampering VulnerabilityMicrosoft Windows
- CVE-2026-95977Windows Event Viewer Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95946Windows Graphics Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-95691Retransmitted QUIC CRYPTO Frames Can Cause DoS or One-byte DisclosureOpenSSL
- CVE-2026-95944Windows App Readiness Service Tampering VulnerabilityMicrosoft Windows
- CVE-2026-95913Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-95905Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-95884Windows Active Directory Certificate Services Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-94517Windows Kernel Transaction Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88247Windows Program Compatibility Assistant Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88823AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD UpdateOpenSSL
- CVE-2026-88231Windows iSCSI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88220Windows Performance Counters Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-88822QUIC Uses Uninitialized Stack Bytes During Automated Peer DetectionOpenSSL
- CVE-2026-109485Microsoft 365 Agents SDK Information Disclosure VulnerabilityMicrosoft Agent Framework SDK
- CVE-2026-108425Windows DNS Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2026-109460Microsoft Entra Private Network Connector Information Disclosure VulnerabilityMicrosoft Entra Private Network Connector
- CVE-2026-109456Microsoft Office SharePoint Spoofing VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-109455Microsoft Office SharePoint Information Disclosure VulnerabilityMicrosoft SharePoint Server Subscription Edition
- CVE-2026-102200Windows NTFS Tampering VulnerabilityMicrosoft Windows
- CVE-2026-109476ASP.NET Core Information Disclosure VulnerabilityMicrosoft .NET 10.0 installed on Linux · Microsoft .NET… +22
- CVE-2026-108419Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108418Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108402Windows Layer-2 Bridge Network Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2026-109462Azure Firmware Security Feature Bypass VulnerabilityMicrosoft Azure Virtual Machines
- CVE-2026-84004AMD Zen Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-84005AMD Zen Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-114166Microsoft Raw Image Extension Information Disclosure VulnerabilityMicrosoft Raw Image Extension
- CVE-2026-108416Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-108415Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-108424Windows GDI Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108417Windows Remote Desktop Client Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-108409Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-105590Windows Active Directory Certificate Services Security Feature BypassMicrosoft Windows Server
- CVE-2026-105588Windows DHCP Server Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2026-105584Windows Inventory Backup Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-102868Windows Shell Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2026-107496Infinite Loop in CMS_encrypt() With an EC Group Order of 1OpenSSL
- CVE-2026-125328pgEdge Go LLM Library discloses provider API key fragments in error messagespgedge-go-llm-lib
- CVE-2026-125326pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the…pgedge-rag-server
- CVE-2026-125325pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requestspgedge-rag-server
- CVE-2026-79914NocoBase: SSRF in customRequests:send via runtime options.url overridenocobase · @nocobase/plugin-action-custom-request
- CVE-2026-63540Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-63028Improper initialization in the MigTD virtio-vsock stream handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-63027Incorrect behavior order in the get_tcb_level_by_svn for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-63018Integer underflow (wrap or wraparound) for some Intel(R) Metrics Discovery Application Programming Interface software before version…Intel(R) Metrics Discovery Application Programming Interfac…
- CVE-2026-62930Unchecked return value in the MigTD's TLS implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-62920Unchecked return value in the MigTD error handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow…Intel(R) TDX Migration Trust Domain
- CVE-2026-62275Detection of error condition without action in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within…Intel(R) TDX Migration Trust Domain
- CVE-2026-61470Improper control of a resource through its lifetime in the MigTD's TLS client for the Intel(R) TDX Migration Trust Domain (MigTD) within…Intel(R) TDX Migration Trust Domain
- CVE-2026-61469Off-by-one error in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-61468Improper privilege management in the MigTD logging for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow…Intel(R) TDX Migration Trust Domain
- CVE-2026-61467Use after free in the MigTD virtio driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an…Intel(R) TDX Migration Trust Domain
- CVE-2026-61383Incorrect calculation of buffer size in the MigTD's servtd_get_quote for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-61377Sensitive information uncleared in resource before release for reuse in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD)…Intel(R) TDX Migration Trust Domain
- CVE-2026-60141Improper null termination for some Intel(R) Metrics Discovery Application Programming Interface before version 1.16.189 within Ring 3…Intel(R) Metrics Discovery Application Programming Interface
- CVE-2026-60139Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-60133Integer overflow in the MigTD vsock for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of…Intel(R) TDX Migration Trust Domain
- CVE-2026-60071Improper validation of specified quantity in input in the MigTD vsock packet handling for the Intel(R) TDX Migration Trust Domain (MigTD)…Intel(R) TDX Migration Trust Domain
- CVE-2026-60059Use of uninitialized resource in the MigTD memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow…Intel(R) TDX Migration Trust Domain
- CVE-2026-60020Missing release of memory after effective lifetime in the MigTD virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD)…Intel(R) TDX Migration Trust Domain
- CVE-2026-59771Improper validation of array index in the MigTD's virtio-serial driver for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-57893Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-56759Improper input validation in the MigTD PCI BAR handling for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may…Intel(R) TDX Migration Trust Domain
- CVE-2026-56440Improper input validation for some BigDL before version 2.5.0b1 within Ring 3: User Applications may allow an escalation of privilege.BigDL
- CVE-2026-55716Out-of-bounds read in the CheckUefiVgaMode for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may…Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…
- CVE-2026-55709Loop with unreachable exit condition ('infinite loop') in the MigTD's GetQuote for the Intel(R) TDX Migration Trust Domain (MigTD) within…Intel(R) TDX Migration Trust Domain
- CVE-2026-52899Deserialization of untrusted data for some BigDL software before version 2.5.0b1 within Ring 3: User Applications may allow an escalation…BigDL software
- CVE-2026-50249Out-of-bounds read in the GenerationSetup for the Intel(R) Server Board D50DNP and Intel(R) Server Board M50FCP within Ring 0 UEFI may…Intel(R) Server Board D50DNP and Intel(R) Server Board M50F…
- CVE-2026-49036Time-of-check time-of-use race condition in the MigTD shared memory for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0…Intel(R) TDX Migration Trust Domain
- CVE-2026-44625Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-44624Incorrect comparison in the Ext2 parser for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service.Intel(R) Slim Bootloader
- CVE-2026-44606Out-of-bounds write for some Intel(R) Intelligent Storage Acceleration Library within Ring 3: User Applications may allow an escalation of…Intel(R) Intelligent Storage Acceleration Library
- CVE-2026-42056Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-40697Use after free for some Intel(R) Wireless Software for Windows within Ring 3: User Applications may allow denial of service.Intel(R) Wireless Software for Windows
- CVE-2026-40695Null pointer dereference for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service.Intel(R) Wireless Bluetooth
- CVE-2026-40694Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40626Uncontrolled search path for some Intel(R) Wireless Bluetooth(R) software for Windows within Ring 3: User Applications may allow an…Intel(R) Wireless Bluetooth(R) software for Windows
- CVE-2026-40424Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40216Out-of-bounds read for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-40064Improper input validation for some Intel(R) oneAPI CLI Tool software within Ring 3: User Applications may allow a denial of service.Intel(R) oneAPI CLI Tool software
- CVE-2026-34489Untrusted pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-34017Heap-based buffer overflow for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-33275Improper resource shutdown or release for some Intel(R) PROSet/Wireless Wi-Fi Software for Windows within Ring 3: User Applications may…Intel(R) PROSet/Wireless Wi-Fi Software for Windows
- CVE-2026-33094Out-of-bounds write for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-28746Out-of-bounds read in the AuthenticateComponent for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow a denial of service.Intel(R) Slim Bootloader
- CVE-2026-28730Null pointer dereference for some Hyperscan before version v5.4.2.1 within Ring 3: User Applications may allow a denial of service.Hyperscan
- CVE-2026-20703Protection mechanism failure for some BigDL before version 2.4.0 within Ring 3: User Applications may allow an escalation of privilege.BigDL
- CVE-2026-120212Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags outputWeb-Simple
- CVE-2026-125322pgEdge Postgres MCP Server SQL injection in the count_rows where parameterpgedge-postgres-mcp
- CVE-2026-99285netfilter: nft_byteorder: remove multi-register supportLinux
- CVE-2026-125321pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied headerpgedge-postgres-mcp
- CVE-2026-125729Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never…Plack-Middleware-CSP
- CVE-2026-121691Unbounded decompression in the whatstk ZIP loader exhausts memory and disklucasrodes whatstk
- CVE-2026-125320pgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebindingpgedge-postgres-mcp
- CVE-2026-125342Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-125349Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had compromised the…Google Chrome
- CVE-2026-125345Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside the sandbox via a…Google Chrome
- CVE-2026-126049Gwenhywfar 5.14.2 Use-After-Free via GWEN_TLV_Buffer_To_DB() Nested BER-TLV ParsingMartin Preuss Gwenhywfar
- CVE-2026-126048Gwenhywfar 4.99.8beta before 5.14.2 Stack Buffer Overflow via GWEN_TLV_Buffer_To_DB()Martin Preuss Gwenhywfar
- CVE-2026-125125compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error messagetmatens compose-lint
- CVE-2026-125124compose-lint: Text in a pull request can reach Azure Pipelines as logging commands through compose-lint 0.31.0's outputtmatens compose-lint
- CVE-2026-125123compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messagestmatens compose-lint · compose-lint
- CVE-2026-125122compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdouttmatens compose-lint · compose-lint
- CVE-2026-125121compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's outputtmatens compose-lint · compose-lint
- CVE-2026-63653Group-Office: SSRF via Bookmark/description JMAP action — server makes arbitrary HTTP(S) requests to user-controlled URL and reflects part…Intermesh groupoffice
- CVE-2026-115791Prevent shadowing stdlib in gzip/tarfile/zipfile CLI during extractionPython Software Foundation CPython
- CVE-2026-57884Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an…Intel(R) Graphics Software
- CVE-2026-56438Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege.libva software
- CVE-2026-50177Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…Intel(R) Neural Compressor software
- CVE-2026-49028Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…Intel(R) Neural Compressor software
- CVE-2026-46632Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may allow an…Intel(R) Application Optimization User Interface
- CVE-2026-44627Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before version v2026.0.0 within…Intel(R) oneAPI Deep Neural Network Library (oneDNN) softwa…
- CVE-2026-42966Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may allow an…Intel(R) Neural Compressor software
- CVE-2026-42917Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…Intel(R) Neural Compressor software
- CVE-2026-42067Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow an…Intel(R) TDX Workload Attestation software
- CVE-2026-41214Improper input validation for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may allow a…Intel(R) Neural Compressor software
- CVE-2026-40705Improper resource locking for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of…Intel(R) NPU Drivers
- CVE-2026-40704Protection mechanism failure for some Intel Neural Compressor software before version master within Ring 3: User Applications may allow an…Intel Neural Compressor software
- CVE-2026-102803Joomla Extension - j2commerce.com - Gift voucher and single-use coupon could pay for more than one order in J2Store 6.0.0 - 6.6.5j2commerce.com J2Store extension for Joomla
- CVE-2026-40693Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allow a denial of…Intel(R) TDX Workload Attestation software
- CVE-2026-40427Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a denial of service.Intel(R) QuickAssist Technology Driver for Windows
- CVE-2026-40426Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User Applications may…Intel(R) NPU Driver software
- CVE-2026-40065Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an…Intel(R) Neural Compressor software
- CVE-2026-39456Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applications may allow a…Media Transcode Accelerator
- CVE-2026-35683Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial of service.Intel(R) Multi-Buffer Crypto for IPSec
- CVE-2026-35060Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within Ring 3: User Applications…AI Playground software
- CVE-2026-33571Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial…Intel(R) VTune(TM) Profiler software
- CVE-2026-33567Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of…Intel(R) VTune(TM) Profiler software
- CVE-2026-33563Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) PMT) software before…Intel(R) Platform Monitoring Technology (Intel(R) PMT) soft…
- CVE-2026-33279Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial…Intel(R) VTune(TM) Profiler software
- CVE-2026-33270Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of service.Intel(R) Graphics Software
- CVE-2026-33089Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of service.Intel(R) CIP software
- CVE-2026-32672Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may allow a denial of…Intel(R) NPU Drivers
- CVE-2026-28765Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a…Intel(R) VTune(TM) Profiler software
- CVE-2026-28743Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers may allow a denial…Intel(R) VTune(TM) Profiler software
- CVE-2026-28702Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an escalation of…Intel(R) VTune(TM) Profiler software
- CVE-2026-26052Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an…Intel(R) Graphics Driver software installers
- CVE-2026-21407Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service.Intel(R) Arc(TM) B-series graphics cards
- CVE-2026-20880Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an…Intel(R) Graphics Driver software installers
- CVE-2026-20798Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of…Intel(R) Graphics Driver software installers
- CVE-2026-20756Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an…Intel(R) Graphics Driver software installers
- CVE-2026-66335Heap Overflow in SmiVariable SMM HandlerAMI AptioV
- CVE-2026-66334OFBD SMM Write Validation IssuesAMI AptioV
- CVE-2026-66333OFBD SMM Read Validation IssuesAMI AptioV
- CVE-2026-66332OOB-Read in FmpCapsuleUpdateAMI AptioV
- CVE-2026-83528Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin…Ivanti Endpoint Manager Mobile
- CVE-2026-123180Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 modelsNETGEAR RAX30
- CVE-2026-123178Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350NETGEAR RBR350 · NETGEAR RBS350
- CVE-2026-107405An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to…Ivanti Endpoint Manager Mobile
- CVE-2026-107404Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin…Ivanti Endpoint Manager Mobile
- CVE-2026-105427Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with…Ivanti Endpoint Manager Mobile
- CVE-2026-97402In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure length field of…Eclipse Foundation Eclipse Kura
- CVE-2026-105426Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with…Ivanti Endpoint Manager Mobile
- CVE-2026-123181A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with…Ivanti Sentry
- CVE-2026-123179An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4…Ivanti Sentry
- CVE-2026-124038Uncontrolled XML entity expansion in the Flock Installer app for AndroidFlock Installer app
- CVE-2026-105669Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges…Ivanti Sentry
- CVE-2026-86336Apache TomEE: EJB method authorization is silently skipped on JDK 21+Apache Software Foundation org.apache.tomee:openejb-core
- CVE-2026-86531Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-87758Apache TomEE: Missing TLS hostname verification in ejbds client connectionsApache Software Foundation org.apache.openejb:openejb-clien…
- CVE-2026-97849Apache TomEE: Derby network service listens on all interfacesApache Software Foundation org.apache.openejb:openejb-derby…
- CVE-2026-97867Apache TomEE: Database credential disclosure via remote JNDI lookupApache Software Foundation org.apache.openejb:openejb-ejbd…
- CVE-2026-97870Apache TomEE: Missing authentication for Hessian endpoints in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-97872Apache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settingsApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-97874Apache TomEE: Authentication bypass for Hessian endpoints in non-root web applicationsApache Software Foundation org.apache.openejb:openejb-hessi…
- CVE-2026-97880Apache TomEE: Authentication bypass in the embedded HTTP server for endpoints protected by HTTP Basic authenticationApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-97881Apache TomEE: Path traversal in embedded HTTP server static resource handlingApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-97888Apache TomEE: Caller identity leaks across requests in embedded HTTP serverApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-97890Apache TomEE: Session fixation in embedded HTTP serverApache Software Foundation org.apache.tomee:openejb-http
- CVE-2026-111239Apache TomEE: Code execution by any authenticated user via the SSH administration shellApache Software Foundation org.apache.openejb:openejb-ss… +2
- CVE-2026-111240Apache TomEE: Authentication bypass for accounts without a stored password in SQL login moduleApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-18128Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote…ivanti Endpoint Manager
- CVE-2026-111241Apache TomEE: Local code execution via predictable passivation files in the shared temporary directoryApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-11315A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3).mackron dr_libs
- CVE-2026-111242Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identityApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-111243Apache TomEE: Expired MicroProfile JWT tokens accepted with negative clock skewApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-111244Apache TomEE: Authorization bypass in MicroProfile JWT role checks for JAX-RS resourcesApache Software Foundation org.apache.tomee:mp-jwt
- CVE-2026-105813Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another…Ivanti User Workspace Manager
- CVE-2026-111245Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requestsApache Software Foundation org.apache.openejb:openejb-cxf ·…
- CVE-2026-111246Apache TomEE: HTTP sessions shared across web applications in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-111247Apache TomEE: Privilege escalation via user name matching a role nameApache Software Foundation org.apache.tomee:tomee-catalina
- CVE-2026-111248Apache TomEE: Authentication with the stored password digest in Tomcat user identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-125752Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatusmeteroid-oss Meteroid
- CVE-2026-125751Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenByIdmeteroid-oss Meteroid
- CVE-2026-125749TaxHacker through 0.8.5 IDOR via Settings Server Actions userIdvas3k TaxHacker
- CVE-2026-125748Parabol before 15.21.2 Missing Authorization via addReactjiToReactable MutationParabol
- CVE-2026-125747ZenTao PMS through 22.7 IDOR via Build Module Mutation Methodseasysoft zentaopms
- CVE-2026-111249Apache TomEE: Unauthenticated LiveReload endpoint reachable from the networkApache Software Foundation org.apache.tomee:livereload-tomee
- CVE-2026-111250Apache TomEE: Authentication bypass via programmatic authentication in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-111251Apache TomEE: Unauthenticated server shutdown via the admin portApache Software Foundation org.apache.openejb:openejb-serve…
- CVE-2026-111256Apache TomEE: Missing authentication for web service endpoints in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-we… +2
- CVE-2026-111257Apache TomEE: Well-known administrative credentials created at startupApache Software Foundation org.apache.openejb:tomee-catalin…
- CVE-2026-111258Apache TomEE: Security constraint bypass via request routingApache Software Foundation org.apache.openejb:tomee-catalin…
- CVE-2026-111259Apache TomEE: Predictable HTTP session identifiers in embedded serverApache Software Foundation org.apache.tomee:tomee-embedded
- CVE-2026-111260Apache TomEE: Predictable OpenID Connect state and nonce valuesApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111261Apache TomEE: Authentication bypass with empty password in LDAP identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111262Apache TomEE: LDAP injection in LDAP identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111263Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web applicationApache Software Foundation org.apache.openejb:tomee-webserv…
- CVE-2026-111264Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP methodApache Software Foundation org.apache.openejb:tomee-webserv…
- CVE-2026-87756Apache TomEE: Missing authorization on internal deployer EJBs in default profileApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-87755Apache TomEE: Stateful session bean hijacking via predictable session identifiersApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-86811Apache TomEE: Path traversal via stateful EJB passivationApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-86532Apache TomEE: Username enumeration and timing side channel in JAAS login modulesApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-123082Docker Desktop logs can expose the Docker Hub access tokenDocker Desktop
- CVE-2026-121885Podman: untrusted image labels allow auto-update to restart arbitrary systemd unitsRed Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-124950Same-origin policy bypass in the CSS Parsing and Computation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124949Other issue in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124946Invalid pointer in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124945Invalid pointer in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124944Information disclosure in the Marionette componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124937Other issue in the Media component in Firefox for AndroidMozilla Firefox
- CVE-2026-124936Spoofing issue in the Address Bar componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124928Mitigation bypass in the SVG componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124925Information disclosure in the Layout componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124923Sandbox escape in the Agent componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124921Sandbox escape in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124920Uninitialized memory in the Graphics: WebGPU componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124911Clickjacking issue in the Autofill component in Firefox for AndroidMozilla Firefox
- CVE-2026-124951Privilege escalation in the Nimbus Desktop Client componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124942Invalid pointer in the DOM: Streams componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124941Information disclosure in the Security: RLBox componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124940Mitigation bypass in the File Handling componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124939JIT miscompilation in the JavaScript Engine: JIT componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124938Mitigation bypass in the Add-ons Manager componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124935Undefined behavior in the WebRTC: Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124934Spoofing issue in the Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124933Sandbox escape in the Console componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124931Same-origin policy bypass in the DOM: Core & HTML componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124930Information disclosure in the Address Bar componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124929Information disclosure in the Layout: Form Controls componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124927Site isolation issue in the Graphics: WebRender componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124914Site isolation issue in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124913Site isolation issue in the Networking componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124912Spoofing issue in the DOM: Security componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124910Mitigation bypass in the WebExtensions componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124909Information disclosure in the Private Browsing componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124905Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124902Same-origin policy bypass due to race condition in the Audio/Video componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124901Other issue in the Networking: JAR componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124896Invalid pointer in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124886Invalid pointer in the Layout: Text and Fonts componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124879Invalid pointer in the Networking: Cache componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124874Same-origin policy bypass in the Networking: HTTP componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124873Invalid pointer in the DOM: Editor componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124855Sandbox escape in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-124854Privilege escalation in the DOM: Navigation componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-125744Missing permission check in ticket layout APIpretix
- CVE-2026-100962NVIDIA NeMo Export-Deploy for all platforms contains a vulnerability in multimodal deployment where an attacker could cause a server-side…NVIDIA Nemo Deploy
- CVE-2026-125871MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichmentmisp-modules
- CVE-2026-125745WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAXmadalinungureanu Custom Post Types and Custom Fields creato…
- CVE-2026-101275Insufficient validation of payment status in pretix-adyenpretix-adyen
- CVE-2026-121191Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remoteTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-120350Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embedcom.vaadin:vaadin · com.vaadin:vaadin-core +2
- CVE-2026-120326Unescaped Download File Name Allows Content-Disposition Parameter Injection in Vaadin Flowcom.vaadin:vaadin · com.vaadin:vaadin-core +1
- CVE-2026-112137A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions…Siemens Mendix Studio Pro
- CVE-2026-125709Libstdc++: overflow leaves streambuf in inconsistent state on i/o error.Red Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-125707Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset tableRed Hat Enterprise Linux
- CVE-2026-125706Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsingRed Hat Enterprise Linux
- CVE-2026-125715Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or…Samsung Opensource mTower
- CVE-2026-120286Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groupsnerves-hub nerves_hub_web
- CVE-2026-120997Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old rolenerves-hub nerves_hub_web
- CVE-2026-125703Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handlingRed Hat Enterprise Linux
- CVE-2026-125672Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an optionRed Hat Enterprise Linux
- CVE-2026-124503sooperset mcp-atlassian io.py validate_safe_path path traversalsooperset mcp-atlassian
- CVE-2026-60045Arbitrary file uploadMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60043XSS in backendMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60042Authentication bypass in com_checkMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-60041CSRF in backendMB connect line mbCONNECT24 · MB connect line mymbCONNEC… +2
- CVE-2026-106025Cargo Shipping Location for WooCommerce 4.0.0 - 5.7.1 - Unauthenticated Order Status ManipulationCargo Shipping Location for WooCommerce
- CVE-2026-106007FraudLabs Pro SMS Verification <= 1.12.1 - Unauthenticated Unrestricted SMS Sending via wp_sms_action_sendFraudLabs Pro SMS Verification
- CVE-2026-125652Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry pointRed Hat Build of Keycloak · Red Hat Single Sign-On
- CVE-2026-119273BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security LogBulletProof Security
- CVE-2026-110516All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode AttributeAll in One Addons For WPBakery Page Builder
- CVE-2026-104676Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG UploadZion Builder
- CVE-2026-63287It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could…Axis Communications AB AXIS Camera Station Pro · Axis Commu…
- CVE-2026-13387A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended…Axis Communications AB AXIS Camera Station Pro
- CVE-2026-14918The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this…Axis Communications AB Signed Video Framework · Axis Com… +1
- CVE-2026-63282Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege…Axis Communications AB AXIS OS
- CVE-2026-14543The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access…Axis Communications AB AXIS OS
- CVE-2026-14542The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.Axis Communications AB AXIS OS
- CVE-2026-13409The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality.Axis Communications AB AXIS OS
- CVE-2026-9063A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution.Axis Communications AB AXIS OS
- CVE-2026-96769Extend B2B - Companies and Users Management for WooCommerce <= 2.1.4 - Unauthenticated Sensitive Information Exposure in…Codup Extend B2B - Companies and Users Management for WooCo…