EUVD-2026-56495

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

CVE-2026-20776

CVE-2026-20776 concerns Intel PROSet/Wireless WiFi Software, Ring 2: Device Drivers. The issue is an improper conditions check that may allow a denial of service. Exploitation requires a network-adjacent, unauthenticated attacker with low complexity and no user interaction. Reported impact is hig...

CVE-2026-53413

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53414 Zoom Clients - Buffer Over-read

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

EUVD-2026-56244

Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...

CVE-2026-53414

The CVE-2026-53414 entry concerns Zoom Clients with a missing bounds check in the annotator function, leading to a buffer over-read. The vulnerability is exploitable by a meeting participant over the network and can cause a denial of service to another participant. Documents confirm the vulnerabl...

EUVD-2026-56239

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53413

CVE-2026-53413 involves missing bounds checks in the annotator function of Zoom Clients, leading to a buffer overwrite vulnerability. The underlying issue is a lack of input validation in the annotator component, which can potentially allow a meeting participant to perform remote code execution o...

CVE-2026-53413 Zoom Clients - Buffer Over-write

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-53413 Zoom Clients - Buffer Over-write

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...

CVE-2026-72921

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filerserverhandlers.go allowedprefixes authorization check used strings.HasPrefix on raw path strings, so a filer JWT scoped to /tenant1 also authorized sibling paths such as /tenant1234, /tenant1-old, and /tenant1backup,...

CVE-2026-18860 Velociraptor incorrect Org deletion permissions check

Velociraptor allows multi-tenant deployments named "Orgs". By default Velociraptor, uses the ROOT org, but users can create child orgs for other tenants within the same deployment. Users can have different permissions in each org. To manage Orgs, Velociraptor usually examines the ORGADMIN...

CVE-2026-18860

CVE-2026-18860 affects Velociraptor in multi-tenant deployments using Orgs. Root-level ORG_ADMIN checks are bypassed when a caller from a child Org with that permission can delete other Orgs because the system validates ORG_ADMIN in the calling Org instead of the ROOT Org. This allows an administ...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...

CVE-2026-72774

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution...

CVE-2026-72774

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution...

CVE-2026-72774 n8n before 1.123.67 Authentication Bypass via HTTP Request Node

n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node. An authenticated member with edit access to a shared workflow can reference another user's credential while specifying the credential type via an expression. Because the pre-execution...

CVE-2026-72774

The CVE CVE-2026-72774 affects n8n before 1.123.67, 2.31.5, and 2.32.1. It is a credential authorization bypass in the HTTP Request node. The root cause is that the pre-execution permission check compares the unresolved expression, skipping the ownership check and loading the credential at execut...

CVE-2026-68088

A flaw was found in the Linux kernel's RNDIS Remote Network Driver Interface Specification gadget function. A missing length check for BufLength and BufOffset parameters within the rndisqueryresponse function could allow a malicious actor to provide specially crafted input. This could lead to...

CVE-2026-72556

ZoneMinder 1.39.17 exposes a remote code execution vulnerability via a broken permission check in the Filter class. The canEdit() and canDelete() methods call non-existent methods on the ZM\User class, causing PHP magic __call() to return a truthy value and bypass the permission check for all use...