214338 matches found
CVE-2026-73072
CVE-2026-73072 affects Vim prior to 9.2.0846. The vulnerability arises in set_sofo() within src/spellfile.c, which reuses sl_sal_first[] without resetting values left by set_sal_first(). A crafted spell file that places an SN_SAL section before an SN_SOFO section can cause under-counted mapping l...
CVE-2026-68169
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. A race condition in the mptcppmuserspacegetlocalid function allows a memory address entry to be freed while still being referenced. A local attacker could exploit this use-after-free vulnerability, potentially leading to a syst...
CVE-2026-6726 An information leakage vulnerability in the TCG TPM 2.0 reference code.
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key such as an Attestation Key, DevID Key or TLS authentication key and falsify other TPM 2...
CVE-2026-6727
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2026-18127
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage...
CVE-2026-18129
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections...
CVE-2026-19153
A flaw was found in Google Chrome. Insufficient validation of untrusted input in the Workers component could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This could enable the attacker to access sensitive information or further compromise th...
CVE-2026-19143
A flaw was found in Google Chrome on Android. This vulnerability, related to insufficient validation of untrusted input in WebAPKs, allows a local attacker to perform a sandbox escape. By crafting and using a malicious file, an attacker can bypass security restrictions designed to isolate...
CVE-2026-19142
A flaw was found in Google Chrome. A remote attacker could exploit a use-after-free vulnerability in the Views component by convincing a user to interact with specific user interface elements through a specially crafted HTML page. This could lead to heap corruption, potentially allowing the...
CVE-2026-5134
A flaw was found in CMS. This vulnerability, known as SQL injection, allows a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements in SQL queries. This can lead to unauthorized access to sensitive data, modification of database content, and disrupti...
CVE-2026-11739 Command injection vulnerability in some NETGEAR Nighthawk devices
A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker in the middle to compromise the confidentiality and integrity of the affected device...
CVE-2026-51583
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...
Microsoft PowerShell Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft PowerShell allows an authorized attacker to execute code locally...
Windows DHCP Server Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...