CVE-2026-26266 AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering

AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting XSS vulnerability was identified in the email rendering feature of AliasVault Web Client versions 0.25.3 and lower. When viewing received emails on an alias, the HTML content is rendered in ...

PT-2026-22839

Name of the Vulnerable Software and Affected Versions AliasVault versions 0.25.3 and lower Description AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting XSS issue exists in the email rendering feature of the AliasVault Web Client. When...

CVE-2026-25955

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfAppUpdateWindowFromSurface reuses a cached XImage whose data pointer references a freed RDPGFX surface buffer, because gdiDeleteSurface frees surface-data without invalidating the appWindow-image that...

CVE-2026-27730 esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route

esm.sh is a no-build content delivery network CDN for web development. Versions up to and including 137 have an SSRF vulnerability CWE-918 in esm.sh’s /https fetch route. The service tries to block localhost/internal targets, but the validation is based on hostname string checks and can be bypass...

esm.sh 代码问题漏洞

esm.sh is an open-source content distribution network developed by esm.sh. Versions of esm.sh 137 and earlier contained code vulnerabilities. These vulnerabilities stemmed from a server-side request forgeing vulnerability in the https routing mechanism of esm.sh. The service attempted to block...

The vulnerability of the AMD Secure Processor microprogramming software for graphics processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of AMD Secure Processor microprogramming software for graphics processors allows attackers to execute a brute-force attack and circumvent existing security restrictions.

The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability could allow an attacker to execute a brute-force attack and circumvent existing security restrictions...

The vulnerability of NVIDIA’s graphics driver series—NVS, Quadro, NVIDIA RTX, GeForce—is related to pointer aliasing, which allows attackers to trigger service failures.

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to trigger service failures...

The vulnerability in the implementation of the LDAP service protocol on the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Remote Access Connection Manager (RASMan) service on the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the Remote Access Connection Manager RASMan service in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_amdkfd_gpuvm_restore_process_bos() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c driver, which is part of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the amdgpuamdkfdgpuvmrestoreprocessbos function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c driver of the Direct Rendering Infrastructure DRI for AMD GPU cores in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow an...

The vulnerability in the function dcn401_init_hw() of the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a remote...

The vulnerability of the gl861_i2c_master_xfer() function in the drivers/media/usb/dvb-usb-v2/gl861.c file of the multimedia device driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the gl861i2cmasterxfer function in the drivers/media/usb/dvb-usb-v2/gl861.c file of the multimedia device driver for the Linux operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to unreliable pointer aliasing, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to an unreliable pointer assignment mechanism. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the trusted execution environment for Virtualization-Based Security (VBS) operating systems in Windows allows attackers to disclose sensitive information that is protected by this security mechanism.

The vulnerability of the trusted execution environment for Windows Virtualization-Based Security VBS operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

PT-2026-28481

Name of the Vulnerable Software and Affected Versions LIBPNG versions 1.2.1 through 1.6.55 Description LIBPNG is a library used by applications to read, create, and manipulate PNG raster image files. Versions 1.2.1 through 1.6.55 contain an issue where the png set tRNS and png set PLTE functions...

The vulnerability in the `drivers/iommu/intel/cache.c` file of the Linux operating system’s IOMMU kernel driver allows a hacker to cause a service failure.

The vulnerability in the drivers/iommu/intel/cache.c file of the Linux operating system’s IOMMU kernel driver is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gpiod_get_label() function in the drivers/gpio/gpiolib.c module of the Linux kernel’s GPIO support driver allows a attacker to cause a service failure.

The vulnerability of the gpiodgetlabel function in the drivers/gpio/gpiolib.c file of the Linux kernel’s GPIO support driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...