29665 matches found
CVE-2026-50473: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-50389: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-50456: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-41087: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-33842: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
CVE-2026-57084: Use of Uninitialized Resource
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally...
PT-2026-58369
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...
PT-2026-58421
Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An issue in Windows File Explorer allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no...
PT-2026-58121
Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An issue in Windows File Explorer allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no...
PT-2026-58114
Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An authorized attacker can locally disclose sensitive information due to an exposure of sensitive information to an unauthorized actor within Windows File Explorer...
PT-2026-58448
Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An issue in Windows File Explorer allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no...
PT-2026-58120
Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description The use of an uninitialized resource in Windows File Explorer allows an authorized attacker with local access to disclose information locally...
KLA91153 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
KLA91145 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
PYSEC-2026-2327 Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries
Summary adx-mcp-server ListDictstr, Any: client = getkustoclient query = f"tablename | getschema" ListDictstr, Any: client = getkustoclient query = f"tablename | sample samplesize" ListDictstr, Any: client = getkustoclient query = f".show table tablename details" -- KQL injection resultset =...
PYSEC-2026-2531 Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
PT-2026-59189
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
Aim Stored XSS through TEXT EXPLORER
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the...
PYSEC-2026-1093 Aim Stored XSS through TEXT EXPLORER
A vulnerability, which was classified as problematic, was found in aimhubio aim up to 3.24. Affected is the function dangerouslySetInnerHTML of the file textbox.tsx of the component Text Explorer. The manipulation of the argument query leads to cross site scripting. It is possible to launch the...
