EUVD-2026-2558

The Makesweat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'makesweatclubid' setting in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level acce...

EUVD-2026-2573

EUVD-2026-2573...

EUVD-2026-2590

EUVD-2026-2590...

EUVD-2026-2595

EUVD-2026-2595...

EUVD-2026-2617

EUVD-2026-2617...

EUVD-2026-2619

EUVD-2026-2619...

EUVD-2026-2637

EUVD-2026-2637...

EUVD-2026-2639

EUVD-2026-2639...

EUVD-2026-2654

EUVD-2026-2654...

EUVD-2026-2067

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and...

EUVD-2026-2061

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

EUVD-2026-2056

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

EUVD-2026-2112

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-2117

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

EUVD-2026-2171

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-2108

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-2135

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

EUVD-2026-2176

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-2073

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

EUVD-2026-2228

Intermediate register values of secure workloads can be exfiltrated in workloads scheduled from applications running in the non-secure environment of a platform...