EUVD-2026-98929

Podman: The podman run command can be instructed to disable almost all sandboxing by image annotation...

CVE-2021-4034

CVE-2021-4034 This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users. For in-depth study: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Run gcc poc.c -o poc && ./poc...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Correctly track subprogram poke descriptors and fix use-after-free Subprograms call mappoketrack, but during program release, there is no hook to call mappokeuntrack. However, during program release, the auxiliary memory and...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Boundary checks for the buffer were added to rununpack. rununpack checks runbuf runlast at the beginning of the while loop. However, it then reads sizesize and offsetsize bytes via rununpacks64, without verifying that thes...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: Fixed a bug where sleep was performed from an invalid context in btrfsqgroupinherit. Syzkaller reported the bug as follows: Bug: A sleep function is called from an invalid context at include/linux/sched/mm.h:274 Ca...

CVE-2026-79836

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-79836

The HPE NonStop SQL/MX Run-Time Statistics component is vulnerable to memory corruption and a null pointer dereference. This flaw may allow an attacker to cause a process crash , Denial of Service (DoS) , or information disclosure . Affected versions include SQL/MX Run-Time Statistics T1117 - T11...

EUVD-2026-102021

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability

A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or information disclosure...

CVE-2026-110841

The n8n platform (versions before 2.41.4 and 2.42.0 ) is vulnerable to an authorization bypass in the agent chat resume endpoint. The root cause is the failure to verify that a suspended checkpoint belongs to the caller when a run identifier is accepted from the request body. Authenticated projec...

CVE-2026-97774

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-88109

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-85340

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-70276

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

CVE-2026-88109

A use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.8. No specific exploit links or remediation details are provided in the documents...

CVE-2026-97774

A Time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Office Click-To-Run . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) . No specific details regarding the affected component, root cause file, or exploi...

EUVD-2026-99831

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

CVE-2026-70276

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...

vulnerabilities present in Microsoft Office

Microsoft has fixed xxx vulnerabilities in various Office products, such as Word, Excel, Access, Outlook, Visio, SharePoint, and PowerPoint, as well as subcomponents like Shell, Azure Key Vault, and Click-to-Run. A malicious actor could exploit these vulnerabilities to cause a denial-of, gain...