96 matches found
Security Updates for Microsoft Word Products (February 2026)
The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple spoofing vulnerabilities: - Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. CVE-2026-21511 - A spoofing...
Security Updates for Microsoft SharePoint Server Subscription Edition (February 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...
Security Updates for Microsoft SharePoint Server 2019 (February 2026)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2026-22903
creationtimestamp| type| source ---|---|--- 2026-02-09 08:18:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116039686717106372 2026-02-09 08:26:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mefzlumhku22...
CVE-2026-2235
creationtimestamp| type| source ---|---|--- 2026-02-09 06:59:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10704-d5aba-2.html...
Xpoda Studio SQL注入漏洞
Xpoda Studio is a visualization development environment provided by the Turkish company Xpoda. Versions of Xpoda Studio dated back to February 2026 and earlier contained an SQL injection vulnerability. This vulnerability stemmed from improper handling of special elements within SQL commands, whic...
CVE-2026-2157
creationtimestamp| type| source ---|---|--- 2026-02-08 16:30:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meee6tkpv324 2026-02-08 16:30:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/116035958545654657...
17% of 3rd-Party Add-Ons for OpenClaw Used in Crypto Theft and macOS Malware
Bitdefender Labs reveals that 17% of OpenClaw AI skills analyzed in February 2026 are malicious. With over 160,000…...
CVE-2026-23796
creationtimestamp| type| source ---|---|--- 2026-02-05 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/02/CVE-2026-23796/...
CVE-2026-20982
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege...
Microsoft Edge (Chromium) < 144.0.3719.115 (CVE-2026-1861)
The version of Microsoft Edge installed on the remote Windows host is prior to 144.0.3719.115. It is, therefore, affected by a vulnerability as referenced in the February 5, 2026 advisory. - Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to...
K000159076: Quarterly Security Notification (February 2026)
Security Advisory Description On February 4, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associate...
CVE-2026-20982
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege...
CVE-2026-20978
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application...
CVE-2026-20982
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege...
EUVD-2026-5393
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege...
CVE-2026-20980
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands...
EUVD-2026-5397
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...