CVE-2026-54373

The VitaFit Android application (com.vt.vitafit) versions prior to 2.8.1.0 is susceptible to a cleartext traffic vulnerability . The root cause is the absence of an Android network security configuration , which allows network-based attackers to intercept or modify unencrypted HTTP communications...

Tanium Server 7.7.3.x < 7.7.3.8351 / 7.8.2.x < 7.8.2.1263 / 7.8.4.x < 7.8.4.1399 Multiple Vulnerabilities

The version of Tanium Server installed on the remote host is 7.7.3.x prior to 7.7.3.8351, 7.8.2.x prior to 7.8.2.1263, or 7.8.4.x prior to 7.8.4.1399. It is, therefore, affected by multiple vulnerabilities: - Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. This...

CVE-2026-102020 Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

EUVD-2026-101456

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

CVE-2026-83998

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-80073

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...

CVE-2026-78463

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-77495

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-73012

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-69769

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...

CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69732

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

CVE-2026-69714

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69434

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network...

CVE-2026-69357

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

CVE-2026-78462

CVE-2026-78462 is an authorization bypass through a user-controlled key in Visual Studio Code that allows an unauthenticated network attacker to bypass a security feature . The underlying weakness is the use of a user-controllable key in an authorization check, enabling remote exploitation with l...

CVE-2026-72977

CVE-2026-72977 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized, network-based attacker to disclose information . The attack requires user interaction (e.g., opening a crafted file) but no prior authentication. CVSS 3.1 base score is 6.5 (MEDIUM) w...

EUVD-2026-73636

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-69427

CVE-2026-69427 is an out-of-bounds read vulnerability in the Windows VOLSNAP.SYS driver (Volume Shadow Copy service). An authorized attacker can exploit it over a network to elevate privileges . The CVSS 3.1 base score is 8.0 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicatin...

CVE-2026-69360

CVE-2026-69360 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a malicious document) but no prior authentication. The assigned CVSS v3.1 score is 8.8 ...