CVE-2026-54113

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...

CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability

...

EUVD-2026-56286

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery SSRF. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73084 Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

EUVD-2026-56537

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, potentially resulting in an application denial-of-service condition. The...

CVE-2026-39452

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

CVE-2026-39452

The vulnerability CVE-2026-39452 affects Intel’s Transfer Learning Tool prior to version v0.7. It is a protection mechanism failure that could allow a network-based escalation of privilege by an unauthenticated, unprivileged user with low attack complexity, without user interaction. The impact is...

EUVD-2026-56518

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-20891

Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

CVE-2026-20890

Improper privilege management for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege...

CVE-2026-20795

CVE-2026-20795 affects Intel PROSet/Wireless WiFi Software for Windows (Ring 2: Device Drivers). The vulnerability arises from improper buffer restrictions in the software, enabling a denial of service via adjacent-network access with unauthenticated, low-complexity attack: no user interaction re...

EUVD-2026-56502

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

CVE-2026-20786

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

EUVD-2026-56495

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

CVE-2026-20769

Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20739

Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20739

CVE-2026-20739 describes an issue in some Intel(R) PROSet/Wireless WiFi Software for Windows, where an improper conditions check in Ring 2: Device Drivers could allow a denial of service. The attack is network-adjacent, unauthenticated, low complexity, with no user interaction required, and may i...

CVE-2026-20702

Technical details about CVE-2026-20702 are not publicly available in the provided documents. No product/vendor/version specifics, exploit status, or remediation are described here. Monitor for updates.

CVE-2026-67179

Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits via DNS rebinding, can reach POST /api/runAction on the Dev UI server default port 4000 and execute any registered Genkit action and read the result. Fixed on 2026-06-...

CVE-2026-73080

SeaweedFS: Unauthenticated SSRF via VolumeServer.FetchAndWriteNeedle (weed/server/volume_grpc_remote.go) allows a caller to fetch a caller-supplied remote endpoint through s3_storage_client.go and read the response, without authentication or target validation on the gRPC port. This enables reachi...