CVE-2026-68897: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68878: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-68845: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68833: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-68787: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-68785: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67631: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-77482: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69522: Heap-based Buffer Overflow

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-62744: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-74239: Improper Limitation of a Pathname to a Restricted Directory

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

CVE-2026-77101: Stack-based Buffer Overflow

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-77102: Heap-based Buffer Overflow

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...

CVE-2026-17509: Improper Neutralization of Special Elements used in an SQL Command

The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes ...

CVE-2026-62650: Authentication Bypass Using an Alternate Path or Channel

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control RBAC restrictions to be bypassed through manipulation of request data. This could allow an...

CVE-2026-81798: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1...

CVE-2026-86509: Stack-based Buffer Overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

EUVD-2026-72912

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...

PT-2026-88343

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-88356

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...