CVE-2026-96363

The Drupal Webform module, specifically the Webform Entity Print submodule, is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient access limitations on its print templates. Affected versions include Webform 0.0.0 to 6.2.12 and 6.3.0 to 6.3.1 . To exploit this, an attacker must po...

EUVD-2026-107840

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96367

The Drupal Webform module is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient access restrictions on the custom attributes YAML editor . Specifically, users granted permission to create or edit webforms—but who lack permissions to edit the webform source—can add custom attribut...

CVE-2026-96367 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

EUVD-2026-107839

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96371

The Drupal Webform module is vulnerable to Stored Cross-site Scripting (XSS) because it does not sufficiently restrict access to raw webform source editing when the Webform UI module is disabled. An attacker with permissions to create or edit webforms can enter source configurations that are rend...

CVE-2026-96371 Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

EUVD-2026-107835

Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-109520

A flaw in Colorful iGameCenter version 2.0.0.82 affects the Dispatch Handler component. Specifically, the MmMapIoSpace function in the AMDRyzenMasterDriver.sys library is susceptible to manipulation of the SystemBuffer argument. This vulnerability allows for privilege defined with unsafe actions ...

CVE-2026-109520: Privilege Defined With Unsafe Actions

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack...

CVE-2025-7030: Privilege Defined With Unsafe Actions

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...