Aegis aegis-v0.14.1-alpha

AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...

EUVD-2026-56392

Microsoft QUIC: Remote Code Execution Vulnerability...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...

EUVD-2026-56408

Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability...

CVE-2026-75999 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative...

EUVD-2026-74067

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative...

CVE-2026-69646

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

CVE-2026-66307

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

CVE-2026-66306

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

CVE-2026-66305

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

CVE-2026-66308

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-66304

Server-side request forgery ssrf in Skype for Business allows an unauthorized attacker to disclose information over a network...

CVE-2026-66303

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-28616

In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73941

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

CVE-2026-66307

An integer underflow (wrap/wraparound) vulnerability in Skype for Business Server allows an unauthorized, network-based attacker to cause a denial of service (CVSS 3.1: 7.5 HIGH , high availability impact). The affected products are Skype for Business Server Subscription Edition , Server 2019 , a...

CVE-2026-66303

CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...

EUVD-2026-73940

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-69646

CVE-2026-69646 is an improper verification of cryptographic signature vulnerability in Skype for Business Server (Subscription Edition, 2015, and 2019). An unauthorized attacker on an adjacent network can perform spoofing without requiring privileges or user interaction. The CVSS 3.1 score is 8.3...