EUVD-2026-32249

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix invalid deref of rawdata when exportbinary is unset If the exportbinary parameter is disabled on runtime, profiles that were loaded before that will still have their rawdata stored in apparmorfs, with a symbolic lin...

CVE-2026-42280

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-48972

creationtimestamp| type| source ---|---|--- 2026-05-27 15:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrmcxtdz2r...

CVE-2026-7365

creationtimestamp| type| source ---|---|--- 2026-05-27 15:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrklzls42s 2026-05-27 16:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtvfujfj62t 2026-06-02 23:37:06+00:00| seen|...

CVE-2026-42280 Improper Permission Checking in Auth.js SDK

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

EUVD-2026-32533

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-42280 Improper Permission Checking in Auth.js SDK

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-42280 Improper Permission Checking in Auth.js SDK

Auth0.js is a client-side JavaScript library for Auth0. From 8.11.0 to 9.32.0, under specific preconditions, the Auth0.js SDK may improperly return user profile information using a valid access token when a specifically crafted invalid ID token is provided. This vulnerability is fixed in 10.0.0...

CVE-2026-42280

The CVE reports an issue in auth0-js where versions 8.11.0–9.32.0 may improperly return user profile information when a valid access token is used with a crafted invalid ID token, in scenarios where access control relies on Auth0 Actions. Root cause: improper validation in the Auth0.js SDK. Impac...

CVE-2026-48904

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:37+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q 2026-06-22 05:32:06+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5vcertt2b 2026-08-12 22:22:01+00:00| seen|...

CVE-2026-48903

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:37+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q...

CVE-2026-48901

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q...

CVE-2026-48900

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q...

CVE-2026-32997

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b 2026-05-29 12:16:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116657815289026541 2026-06-23 12:05:28+00:00| seen|...

CVE-2026-45846

creationtimestamp| type| source ---|---|--- 2026-05-27 13:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtm2imnzu2r 2026-07-01 02:34:51+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:15:47+00:00| seen...

CVE-2026-48806

creationtimestamp| type| source ---|---|--- 2026-05-27 13:21:59+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtlzlisnd23 2026-07-27 09:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkfue7cy2o 2026-07-27 09:10:43+00:00| seen|...

CVE-2026-42727

creationtimestamp| type| source ---|---|--- 2026-05-27 12:18:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtiisvxik2n...

CVE-2026-45965 apparmor: fix invalid deref of rawdata when export_binary is unset

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix invalid deref of rawdata when exportbinary is unset If the exportbinary parameter is disabled on runtime, profiles that were loaded before that will still have their rawdata stored in apparmorfs, with a symbolic lin...

CVE-2026-8899

creationtimestamp| type| source ---|---|--- 2026-05-27 12:06:34+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmthsphcj52i...

CVE-2026-48747

creationtimestamp| type| source ---|---|--- 2026-05-27 10:03:58+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtaxinnso2w 2026-05-27 14:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h...