CVE-2026-50299

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

PT-2026-58187

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound issue exists in Windows Storage Spaces Direct. This flaw allows an unauthorized attacker with physical access to the system to execute...

PT-2026-58280

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...

PT-2026-58165

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

PT-2026-58523

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the entire system. U...

PT-2026-58536

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-58311

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-57932

Name of the Vulnerable Software and Affected Versions SAProuter on Microsoft Windows affected versions not specified Description An issue in the DLL loading mechanism of the SAProuter proxy server involves an uncontrolled search path element. This allows an unauthenticated attacker to load librar...

hermes-agent has a sandbox issue

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function executecode of the file tools/codeexecutiontool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The...

Malicious code in terminal-mascot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fdf1ac60d0060cb78970c884bcfa7bb5360d9f700c0f8992b66af09cce22ae [email protected] ships a postinstall script install-check.cjs that resolves a bundle URL from a remote JSON config at...

PT-2026-59196

Impact A stored Cross-Site Scripting XSS vulnerability in Jupyter Notebook allows attackers to steal authentication tokens from users who open malicious notebook files and interact with elements that the attacker can make look indistinguishable from legitimate controls single click interaction. T...

PT-2026-57088

Name of the Vulnerable Software and Affected Versions fabricKeymaster trustlet versions prior to SMR Jul-2026 Release 1 Description A Time-of-check time-of-use TOCTOU race condition exists in the fabricKeymaster trustlet. This occurs when a program checks the state of a resource before using it,...

CVE-2026-61343 LibreBooking path traversal

LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0...

Malicious code in chai-as-buffered (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d136202d96267459c4bf3aaaf6c903d7bd2c491901b61dcf2f391a4612f951a [email protected] is a typosquat lure name resembles chai-as-promised; README and module exports impersonate the pino logger whose actual...

vTiger CRM Import Module Unauthenticated RCE

The vulnerability of the module for importing customer relationship management files in vTiger CRM involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information, load arbitrary files...

EUVD-2026-42211

A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...

PT-2026-56534

An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging ADB and Android Debug Bridge components...