CVE-2026-6726 An information leakage vulnerability in the TCG TPM 2.0 reference code.

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...

CVE-2026-6727

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-19143

A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...

Microsoft PowerShell Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...

Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Word Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Word Remote Code Execution Vulnerability

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft PowerShell Security Feature Bypass Vulnerability

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68386

A flaw was found in the Linux kernel. A local attacker with BPF program capabilities could exploit a vulnerability in the BPF sockmap feature. This occurs when a BPF program increments the reference count of an unbound UDP socket, and the socket is subsequently bound. This sequence of events caus...

CVE-2026-68103

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests IRQs and incorrect cleanup processes,...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

CVE-2026-68177

A flaw was found in the Linux kernel's tracing module. When a module with an active enable/disable event is removed, its data can be accessed after it has been freed, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service or potentially escalate...

CVE-2026-68344

A flaw was found in the Linux kernel's USB ATM Asynchronous Transfer Mode driver, specifically in the ueagle-atm module. A local attacker with physical access to a crafted USB device could exploit this vulnerability. By presenting inconsistent USB descriptors that confuse the driver's probe and...