Microsoft Office SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-109962 Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API

Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API read commands. Resellers can call MysqlServer.listing, MysqlServer.get, or Cronjobs.listing through api.php to obtain...

CVE-2026-90086

A flaw was found in the Linux kernel's xsk AFXDP subsystem. The zero-copy path incorrectly reads transmit TX metadata even when the XDPTXMETADATA option is not explicitly set. This can lead to the metadata union being overwritten with an unrequested timestamp, potentially causing data integrity...

CVE-2026-90131

A flaw was found in the Linux kernel's NTFS filesystem driver. A local attacker could exploit a data race condition between concurrent read and write operations on resident iomap data. This race allows a reader to observe inconsistent attribute length and offset fields, potentially leading to dat...

CVE-2026-90105

A flaw was found in the Linux kernel's vxlan implementation. When arp/neighreduce attempts to read the neighbor hardware address neigh ha directly while it is being updated, it can result in partial reads. This data inconsistency can lead to unreliable network operations and potentially disrupt...

CVE-2026-90096

A flaw was found in the Linux kernel's FUSE Filesystem in Userspace component. When performing direct writes with the OAPPEND flag, the fusedirectwriteiter function incorrectly invalidates the page cache. This can lead to data inconsistency, where concurrent readers may access stale data from the...

CVE-2026-65149

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering...

CVE-2026-65150

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service...

CVE-2026-65180

NVIDIA Megatron-LM contains a vulnerability within its checkpoint loading functionality, identified as CWE-502 (Deserialization of Untrusted Data). An attacker can achieve Remote Code Execution (RCE) by convincing a user to load a maliciously crafted file. Successful exploitation may result in co...

CVE-2026-65104

The NVIDIA Megatron-LM framework for all platforms contains a vulnerability within its inference component. The root cause is the use of weak hashes (CWE-328), which allows an attacker to trigger hash collisions in the cache used for inference requests. Exploitation of this flaw could result in d...

CVE-2026-65104

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure...

CVE-2026-65110

NVIDIA Megatron-LM is vulnerable to Remote Code Execution (RCE) due to a flaw in the checkpoint loading process. An attacker can trigger this vulnerability by convincing a user to load a maliciously crafted file . Successful exploitation may result in code execution, escalation of privileges, inf...

CVE-2026-65110

NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...

CVE-2026-65173

NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service...

CVE-2026-65173

NVIDIA AIStore for Linux is susceptible to a missing authentication vulnerability in its token-revocation endpoint . An unauthenticated remote attacker can exploit this by submitting crafted token-revocation lists. A successful attack may result in data tampering and denial of service . No specif...

CVE-2026-65162

NVIDIA AIStore for Linux is affected by a vulnerability within the legacy ETL Kubernetes PodSpec initialization API . A remote attacker can exploit this by supplying malicious Kubernetes host-namespace and container-security settings . Successful exploitation could lead to code execution , privil...

CVE-2026-65162

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, da...

CVE-2026-65148

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...

CVE-2026-65148

The NVIDIA DALI library contains a stack-based buffer overflow vulnerability. A successful exploit of this flaw could allow an attacker to achieve code execution , information disclosure , data tampering , and denial of service . The provided documents do not include specific details regarding th...