CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-48375

The CVE-2026-48375 entry concerns Adobe ColdFusion with an Incorrect Authorization (CWE-863) vulnerability that can crash the application, causing a denial-of-service. According to provided details, a low-privileged attacker over the network can exploit this without user interaction to trigger a ...

CVE-2026-48375

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...

CVE-2026-21269 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)

is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...

EUVD-2026-56544

is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...

CVE-2026-21269

is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...

CVE-2026-21269

CVE-2026-21269 (Adobe ColdFusion) describes a stored cross-site scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript could execute in a victim’s browser when visiting the page containing th...

CVE-2026-25652

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2026-28757

Protection mechanism failure for some IntelR Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...

EUVD-2026-56523

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

EUVD-2026-56520

Stack-based buffer overflow for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-24911

Intel PROSet/Wireless WiFi Software for Windows suffers a stack-based buffer overflow in Ring 0 that may allow a denial of service by an unprivileged, unauthenticated attacker with low complexity and adjacent access, requiring no user interaction. The vulnerability impacts availability (high) wit...

CVE-2026-22887

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-20906

Protection mechanism failure for some IntelR Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This...

CVE-2026-20778

CVE-2026-20778: Out-of-bounds read in Intel PROSet/Wireless WiFi Software for Windows operating in Ring 0 may permit denial of service. An unprivileged, unauthenticated attacker with high attack complexity and adjacent access, requiring no user interaction, could trigger a DoS with high impact on...

CVE-2026-20731

CVE-2026-20731 describes an issue in the Intel(R) NPU Driver affecting all versions within Ring 3: User Applications may allow a denial of service. A low-privilege, authenticated user (local attacker) could trigger a DoS with a low-complexity attack and no user interaction. The advisory indicates...

CVE-2026-20727

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occu...

CVE-2026-20727

CVE-2026-20727 describes a null pointer dereference in some Intel PROSet/Wireless WiFi Software for Windows operating in Ring 0. The underlying flaw can allow a denial of service via an unprivileged, unauthenticated user with low attack complexity, potentially through adjacent access and without ...

EUVD-2026-56470

Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...

DEBIAN-CVE-2026-6726

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...