Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

Windows Narrator Braille Elevation of Privilege Vulnerability

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Application Information Services Elevation of Privilege Vulnerability

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint Server Spoofing Vulnerability

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-68386

A flaw was found in the Linux kernel. A local attacker with BPF program capabilities could exploit a vulnerability in the BPF sockmap feature. This occurs when a BPF program increments the reference count of an unbound UDP socket, and the socket is subsequently bound. This sequence of events caus...

CVE-2026-68103

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker could exploit a vulnerability where creating a user-queue with specific parameters overwrites an existing doorbell mapping. This could lead to misrouting of interrupt requests IRQs and incorrect cleanup processes,...

CVE-2026-72781

Craft CMS versions = 5.0.0-RC1 before 5.10.7 and = 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism. Because Craft marks the ElementInterface as safe via the AllowedInSandbox attribute and the sandbox allowlisting extends to the entire class...

CVE-2026-69109

A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

CVE-2026-68177

A flaw was found in the Linux kernel's tracing module. When a module with an active enable/disable event is removed, its data can be accessed after it has been freed, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service or potentially escalate...

CVE-2026-68197

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A remote attacker could exploit this by configuring a malicious Access Point AP that advertises HT Capabilities but lacks HT Operation elements. When a system attempts to set up a Tunneled Direct Link Setup TDLS connection, a NULL point...

CVE-2026-68344

A flaw was found in the Linux kernel's USB ATM Asynchronous Transfer Mode driver, specifically in the ueagle-atm module. A local attacker with physical access to a crafted USB device could exploit this vulnerability. By presenting inconsistent USB descriptors that confuse the driver's probe and...

CVE-2026-69109

A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...

CVE-2026-57262

The CVE-2026-57262 vulnerability affects LOGO! Soft Comfort (All versions

EUVD-2026-56117

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

CVE-2026-72545

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...