CVE-2026-58925

The android.hardware.automotive.evs-default HAL service is vulnerable to a heap Use-After-Free (UAF) vulnerability. This flaw is caused by unsynchronized access to an std::unordered_map when an unprivileged application with access to the EVS manager makes concurrent calls to setExtendedInfo and g...

What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

In this article 1. Classifying the vulnerability landscape 2. Vulnerabilities exploited in the wild 3. Where defenders should focus 1. Patching is slow, while exploitation is fast 2. Impact, exposure and where to focus 3. Next in line 4. How Microsoft Security helps defenders act 5. References 6...

CVE-2026-91897

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service...

CVE-2026-91898

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Elevation of...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

CVE-2026-91894

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege, Arbitrary Code Execution and Denial of Service...

CVE-2026-58936

In pngsettRNS of pngset.c, there is a possible memory corruption due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58876

In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58868

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58857

In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49934

In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-102435

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

CVE-2026-120061

A flaw was found in postgresql-odbc. When processing Open Database Connectivity ODBC escape sequences in SQL statements, the parser fails to properly validate buffer boundaries. An attacker capable of submitting untrusted SQL text to an application using the driver can trigger a stack-based buffe...

CVE-2026-120058

A flaw was found in postgresql-odbc. An untrusted database server can exploit this vulnerability to execute arbitrary code or cause a denial of service DoS on the client system. When cursor-based fetching is enabled, the driver determines its row cache size using the column count from the initial...

CVE-2026-120057

A flaw was found in psqlODBC. When processing large-object read loread responses from a database, the driver copies returned data into the application buffer without checking whether the data exceeds the buffer size. A malicious server or a network attacker performing a man-in-the-middle MitM...

EUVD-2026-115454

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

CVE-2026-91899

Dell Alienware Command Center (AWCC) versions prior to 6.14.54.0 are vulnerable to an Improper Verification of Cryptographic Signature (CWE-347). A high privileged attacker with local access could exploit this flaw to achieve Elevation of Privilege and Arbitrary Code Execution . Remediation is av...

CVE-2026-91899

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Arbitrary Code Execution...

EUVD-2026-115453

Dell Alienware Command Center AWCC, versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution and Denial of Service...