Skype for Business and Lync Denial of Service Vulnerability

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-33387 Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...

EUVD-2026-72761

A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...

Vulnerabilities present in Siemens products

Siemens has identified vulnerabilities in various products such as Desigo, Reyrolle, SIMATIC, SCALANCE, SINAMICS, and Siveillance. These vulnerabilities allow malicious actors to carry out attacks that can cause the following types of damage: Denial-of-Service DoS attacks Data manipulation Evasio...

CVE-2026-73321 XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser

XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...

EUVD-2026-72758

XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...

CVE-2026-73321

XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser . Authenticated attackers can submit a single post with deeply nested BBCode tags sufficient to exceed PHP's stack limit, causing fatal errors that repeatedly terminate PHP-FPM workers for all visitors ren...

CVE-2026-73315

XenForo before 2.3.13 contains a Server-Side Request Forgery (SSRF) vulnerability in the PayPal REST webhook handler . Unauthenticated attackers can submit a crafted POST to the PayPal webhook callback endpoint with a certificate URL lacking scheme, hostname, or allowlist validation, causing the ...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-77101

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77102

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-11573

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...

AZL-100947 CVE-2026-11573 affecting package qtbase 6.6.3-5

Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and QDomNodePrivate::save recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error...