CVE-2026-63514

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-62910

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-57105

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-27765

Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-21399

Heap-based buffer overflow for the IntelR Open Volume Kernel Library IntelR Open VKL library maintained by intelR before version 2.0.2 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may...

CVE-2025-31938

Insufficient granularity of access control in some subsystem for some IntelR XeonR 6 Scalable processors with IntelR TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentiall...

EUVD-2026-56780

TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign preview phone number tied to another preview...

EUVD-2026-56777

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56775

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56769

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

EUVD-2026-56731

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...

EUVD-2026-56669

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

EUVD-2026-56646

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56425

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56402

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally...

EUVD-2026-56380

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56295

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-57105

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-73087 Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible...