CVE-2026-72963: Use After Free

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...

CVE-2026-73003: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73022: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-69460: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...

PT-2026-87878

Name of the Vulnerable Software and Affected Versions Windows Modern Execution Server affected versions not specified Description A use-after-free issue exists in the Windows Modern Execution Server. This allows an authorized local attacker to perform a privilege escalation, enabling them to gain...

CVE-2026-70577: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-69674: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69377: Missing Authorization

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-73339

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73339

Affected product: Modern Events Calendar plugin for WordPress. Root cause: SQL injection vulnerability exploitable without authentication in versions below 7.35.0. Impact: CVSS 9.3 (CRITICAL), network-exploitable with no privileges or user interaction, enabling high confidentiality impact. Remedi...

CVE-2026-73339 WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73339 WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73339

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

EUVD-2026-60770

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73339: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

PT-2026-77085

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by VanTastic in WordPress Plugin Modern Events Calendar versions 7.35.0...

CVE-2026-62707: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

MAL-2026-13633 Malicious code in modern-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be23667d11e7ef3357641973b9188175c2068bd2b580a5628773bcdf03533a5 On server-side require of modern-localization, the package's main entry runs a top-level async IIFE syncLanguageSystem that performs an HTTP GET...

CVE-2026-14587: Improper Handling of Length Parameter Inconsistency

Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected protocol version followed by 32 continuation bytes in the capability mask, the decoder resets the reader index and waits for mo...