EUVD-2026-56288

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

EUVD-2026-56287

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-71389 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-68202

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2026-48440

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-48362

Technical details for CVE-2026-48362 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2025-31936

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-11736

A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality...

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

EUVD-2026-56236

CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference IDOR that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confusion flaw between the authorization filter and action...

CVE-2026-68288

A flaw was found in the Linux kernel's dropmonitor module. This vulnerability allows for information disclosure due to uninitialized padding bytes in the NETDMATTRPAYLOAD attribute. When the packet payload length is not a multiple of four, these uninitialized bytes are leaked to user space. A loc...

CVE-2026-66484

A flaw was found in GNU cpio. This vulnerability, known as Path Traversal, occurs during the extraction of tar archives in copy-in mode when the --no-absolute-filenames option is used. A remote attacker could craft a malicious tar archive containing a hard-link entry with an absolute path. This...

CVE-2026-68206

A flaw was found in the Linux kernel's V4L2 controls for High Efficiency Video Coding HEVC. The common validation path for HEVC slice parameters does not properly verify the active L0/L1 reference counts before driver-specific code processes them. This lack of validation could allow a local user ...

CVE-2026-19139

A flaw was found in Google Chrome's CredentialProvider on Windows. This race condition vulnerability allows a local attacker to execute code with elevated operating system OS privileges. The attacker can achieve this by exploiting the flaw with a specially crafted malicious file, leading to...

CVE-2026-19146

A flaw was found in Google Chrome on Android, specifically within its Graphics Processing Unit GPU component. A remote attacker, after compromising the browser's renderer process, could exploit an uninitialized memory vulnerability by tricking a user into visiting a specially crafted HTML page...

CVE-2026-73070

Vim prior to version 9.2.0842 is affected by a local vulnerability in the socket server backend (src/socketserver.c). The socketserver_accept() function accepts unbounded client connections, which can cause descriptors to overflow fd_set structures (src/channel.c) and fixed-size struct pollfd arr...

CVE-2026-19161

A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data...

CVE-2026-11940

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2026-18640 Velociraptor directory traversal via the NewNotebook API

The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOKEDIT permission to write the notebook record outside the org's data store directory. The file written must have an extension of ".json.db" but can otherwise overwrite other metadata files...