CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-54997 Windows SMB Information Disclosure Vulnerability

...

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

...

CVE-2026-47282

Summary: CVE-2026-47282 concerns insufficiently protected credentials in GitHub Copilot and Visual Studio Code, leading to potential information disclosure over a network. Impact and scope (as per metrics): CVSS 3.1 base score 6.5 (Medium); attack vector: NETWORK; attack complexity: LOW; privileg...

CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability

...

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability

...

CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability

...

CVE-2026-49165

The CVE-2026-49165 entry concerns the Microsoft Windows App Store. The connected sources confirm that the vulnerability arises from use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact is information disclosure with local access; CVSS 3.1 factors...

CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

...

CVE-2026-34349 Windows Media Information Disclosure Vulnerability

...

CVE-2026-34349 Windows Media Information Disclosure Vulnerability

...

CVE-2026-34349

CVE-2026-34349 describes a local information disclosure in Windows Media where sensitive data is exposed to an unauthorized actor, potentially enabling a local attacker with low privileges and no user interaction to disclose information. The report notes a CVSSv3.1 base score of 5.5 (Medium), wit...

CVE-2026-34346

CVE-2026-34346 concerns the Windows Ancillary Function Driver for WinSock. The vulnerability enables an authorized, local attacker to disclose sensitive information due to cleartext transmission of data. The available records (NVD/NVD entry and CVE listing) describe the affected component and the...

CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

...

CVE-2026-54058

Pillow (Python imaging library) is affected up to version 12.2.x. In the mmap raw codec path for uncompressed McIdas AREA images, attacker-controlled header words can set a row stride smaller than the natural row width, making reads from Image.tobytes(), getpixel, convert, or save read beyond the...

CVE-2026-54058

Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes, getpixel,...

DEBIAN-CVE-2026-62643

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. NOTE: this issue exists because of insufficient fixes for...