CVE-2026-35417

CVE-2026-35417 describes a type confusion vulnerability in Windows Win32K — ICOMP, where an attacker with local access could elevate privileges. The initial description states an authorized user can benefit locally, indicating a local privilege escalation with high impact (CVSS v3.1 base score 7....

CVE-2026-33112

creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:28+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0144 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

CVE-2026-33833

creationtimestamp| type| source ---|---|--- 2026-05-12 15:53:04+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0142 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

CVE-2026-35424

creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

CVE-2026-45282

creationtimestamp| type| source ---|---|--- 2026-05-12 14:15:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a...

CVE-2026-7616

creationtimestamp| type| source ---|---|--- 2026-05-12 13:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlnvnmaz2s2s...

CVE-2026-7287

creationtimestamp| type| source ---|---|--- 2026-05-12 05:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mln3czbvcb2q...

CVE-2026-42564

creationtimestamp| type| source ---|---|--- 2026-05-12 05:38:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mln34rilvd2c...

CVE-2026-7257

creationtimestamp| type| source ---|---|--- 2026-05-12 05:16:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlmzwarkql2r...

CVE-2026-45391 Local privilege escalation in Cribl Edge for Linux

A command injection vulnerability in Cribl Edge for Linux versions 3.2.0 through 4.17.0 allows a local unprivileged user to execute arbitrary commands in the context of the Cribl Edge service account...

CVE-2026-28936

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Sonoma 14.8.8, macOS Tahoe 26.5, visionOS 26.5. Processing a maliciously crafted file may lead to unexpected app terminatio...

CVE-2026-44996

creationtimestamp| type| source ---|---|--- 2026-05-11 19:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxu2s6ga2c 2026-05-11 19:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllxu2s6ga2c...

CVE-2026-45002

creationtimestamp| type| source ---|---|--- 2026-05-11 18:55:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllx7csja72h...

CVE-2026-7815

creationtimestamp| type| source ---|---|--- 2026-05-11 16:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqoykwir2z 2026-05-26 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrd4azuq726...

CVE-2026-43466

creationtimestamp| type| source ---|---|--- 2026-05-11 15:42:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllmg7flbf2s 2026-08-03 07:13:07+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-8255

creationtimestamp| type| source ---|---|--- 2026-05-11 03:06:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkc5xzyid2k...

CVE-2026-8261

creationtimestamp| type| source ---|---|--- 2026-05-11 02:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkbrc3fdr2e...

CVE-2026-31368

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...

CVE-2026-45398

creationtimestamp| type| source ---|---|--- 2026-05-10 19:36:49+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4g37-7p2c-38r9 2026-05-16 10:00:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxllyrkbw2g...

CVE-2026-7263 DoS attack via DOMNode::C14N()

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, DOMNode::C14N method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial ...