CVE-2026-47284: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-45653: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-48583: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-45490: Improper Authorization

Improper authorization in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-45466: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-8045: Improper Restriction of XML External Entity Reference

CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an attacker with a Data Center Expert user account submits crafted XML payloads to SOAP service endpoints...

CVE-2026-7486: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This issue affects E-İmar: from 2.10.1.0 before 3.0.2...

CVE-2026-10731: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the ‘twostepsauthcode’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication 2FA functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queri...

CVE-2026-41986: Unchecked Input for Loop Condition

Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41982: Use After Free

Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41985: Improper Access Control

UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-41983: Undefined Security Weakness

Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41981: Heap-based Buffer Overflow

Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41974: Undefined Security Weakness

Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41973: Undefined Security Weakness

Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-62858: Stack-based Buffer Overflow

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions:...

CVE-2026-41539: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS...

CVE-2026-41979: Undefined Security Weakness

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality...

CVE-2026-41975: Undefined Security Weakness

Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2026-44275: Improper Link Resolution Before File Access

Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...