EUVD-2026-56484

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20739

Improper conditions check for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

EUVD-2026-56480

Improper initialization in some firmware for some IntelR Active Management Technology IntelR AMT, and some IntelR Standard Manageability may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This resul...

CVE-2026-20728

Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege...

CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

EUVD-2026-56475

Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...

CVE-2026-20715

Improper input validation in some firmware for some IntelR Active Management Technology IntelR AMT and some IntelR Standard Manageability may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result m...

CVE-2026-20708

CVE-2026-20708 affects the Intel AMT and Intel Standard Manageability subsystem. The issue is described as insertion of sensitive information into a log file, enabling information disclosure. The entry indicates a network-adjacent attacker with high privileges and high attack complexity could cau...

EUVD-2026-56472

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20707

Hardware logic contains race conditions for some 3rd Gen IntelR XeonR Scalable Processors within Ring 3: unprivileged software may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

CVE-2026-20702

Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...

CVE-2026-20702

Technical details about CVE-2026-20702 are not publicly available in the provided documents. No product/vendor/version specifics, exploit status, or remediation are described here. Monitor for updates.

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

CVE-2026-6727

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...

CVE-2026-6726

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...

CVE-2026-11739

A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker in the middle to compromise the confidentiality and integrity of the affected device...

UBUNTU-CVE-2026-6727

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...

CVE-2026-6727

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...

Malicious code in dakumangalsingh_virus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c32842af81f239247b0cb4980f29b20051e92fed5751d4c297ede4f5a9116d The tarball contains a 455 KB Windows PE64 executable named DakuMangalSingh.exe sha256 368320791e5c022ffabedb44eae6ca902fe3f524754a085b726617c2006dc7...

K000162870: Apache HTTP server vulnerability CVE-2026-43951

Security Advisory Description Out-of-bounds Read vulnerability in Apache HTTP Server with modheaders and modmime and multiple response languages. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. CVE-2026-43951 Impact A remote attacker may be able to disclose sensitive information...