CVE-2026-39452

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

CVE-2026-47285

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-20715

Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...

CVE-2026-20702

Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56725

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

EUVD-2026-56583

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56404

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-56312

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

EUVD-2026-56310

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-58612

Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56302

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

EUVD-2026-56298

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

EUVD-2026-56293

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-65768

CVE-2026-65768 is a Microsoft Teams for Android path traversal leading to remote code execution over a network. The root cause is an improper limitation of a pathname to a restricted directory, enabling an unauthenticated, network-based attacker to run code. Public CVSS data assigns a high/critic...

CVE-2026-73082 Activepieces: Server-side request forgery in MCP tool validation endpoint

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can...

EUVD-2026-56533

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

CVE-2026-20795

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...