CVE-2026-49179

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

CVE-2026-49179

CVE-2026-49179 describes a remote code execution vulnerability in Windows Active Directory Domain Services caused by improper neutralization of special elements used in a command (command injection). The issue allows an unauthenticated attacker to run code over the network with high impact (confi...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56298

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-63520

CVE-2026-63520 is an RCE in Microsoft SharePoint via an unsafe ".NET type instantiation" in Business Connectivity Services. Affected products include SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016, Project Server 2013 SP1, and Office Web Apps 2013 SP1. The ...

EUVD-2026-56295

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63514 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63514

Summary: CVE-2026-63514 involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to execute code remotely over a network. Affected component: SharePoint Server (deserialization path in untrusted data handling). Impact: Remote code execution with H...

EUVD-2026-56290

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...

CVE-2026-65768

CVE-2026-65768 is a Microsoft Teams for Android path traversal leading to remote code execution over a network. The root cause is an improper limitation of a pathname to a restricted directory, enabling an unauthenticated, network-based attacker to run code. Public CVSS data assigns a high/critic...

CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability

...

CVE-2026-65768 Microsoft Teams Remote Code Execution Vulnerability

...

2026-08 .NET 10.0.11 Security Update for x64 Client (KB5122106)

2026-08 .NET 10.0.11 Security Update for x64 Client KB5122106...

2026-08 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5121649)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MAL-2026-13758 Malicious code in bs58-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29bcf6fea2d386f8beb757fa38bac5f1cc6dbae984795f5fd1f4356afd83f7 Package bs58-11 is published under a name that resembles the popular bs58 module. Its README self-identifies as bs58 and instructs npm i --save bs58,...

Malicious code in base65-12x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b553d84d7f4dc5347840ddb97f16738eed2e52ac9757b48d2cb31ba1af7122 The package name base65-12x typosquats the popular base-x base-encoding library and reuses base-x's repository as its homepage. Both the CJS entry...