Tint Component Protected Information Access

The Tint component vulnerability in Google Chrome and Microsoft Edge web browsers is related to reading protected information beyond its permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML...

DataTransfer Component Protected Information Access

The vulnerability in the DataTransfer component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Sources Component Protected Information Access

The vulnerability in the Sources component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WordPress DEPART authorization issue vulnerability

WordPress DEPART versions 1.0.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, enabling exploitation of improperly configured access control levels...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, and Apple tvOS versions prior to 27.2. This vulnerability stems from inadequate validation mechanisms and may allow applications to access...

ROS-20261026-73-0016

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0050

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20261026-73-0008

The vulnerability in openssh is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

WordPress Customer Coupons for WooCommerce authorization issue vulnerability

WordPress Customer Coupons for WooCommerce versions 1.3.14 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control security levels...

Meow Apps AI Engine authorization issue vulnerability

Meow Apps AI Engine versions 3.8.6 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks, which may allow attackers to exploit improperly configured access control security levels...

Isolated web component of

The vulnerability in the Isolated web browser components of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information, as well as cause a denial of service by using a specially...

ROS-20261026-73-0173

The vulnerability in openssh is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WordPress Geo Mashup authorization issue vulnerability

WordPress Geo Mashup versions 1.13.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may lead to exploitation of improperly configured access control levels...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

EUVD-2026-110069

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

PT-2026-123469

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrowwidth - 1 without rejecting that geometry. An...

Geometry component of Google

The Geometry component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

DeepSeek Harness permission and access control issue vulnerability

DeepSeek Harness versions 0.1.0-rc.5 and earlier contain a vulnerability related to permission escalation and access control. This issue stems from an operation within the createContext function in the file packages/extensions/cordis-host-runner/src/sandbox.ts, which leads to sandbox issues and m...

PT-2026-123194

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication. The attack is only possible with local...