CVE-2026-62787: Use After Free

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

CVE-2026-48375: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...

CVE-2026-51584: Improper Authentication

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...

CVE-2026-13716: Path Traversal: '.../...//'

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...

CVE-2026-65665: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-65663: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-62837: Relative Path Traversal

Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-62839: Insufficiently Protected Credentials

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-63520: Improper Input Validation

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

PT-2026-70403

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

CVE-2026-62897

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-62886

Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...

CVE-2026-6727: Observable Timing Discrepancy

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys,...

CVE-2026-70355: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-62827: Improper Authentication

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-62800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

CVE-2026-66770: Improper Neutralization of Special Elements used in an SQL Command

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL Data Definition Language string into the underlying database without further authorization. Successful exploitation could allow the attacker to make malicious changes to th...

PT-2026-70302

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...