44389 matches found
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
MAL-2026-10650 Malicious code in install-skia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b665b508eeae9e0e619ed7b68e3a43248cd81d67d40a0516bbd62981ddb2359f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
EUVD-2026-43897
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-50317
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages
Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk...
Malicious code in monitoring-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b39cb760b9b8a911efb3acc8389158d2a679ff9eb104da35496a6cccb1df6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335
CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5099539)
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5099539...