1275566 matches found
CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability
...
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69519
Azure Stack HCI has an observable response discrepancy vulnerability allowing an unauthenticated remote attacker to disclose sensitive information over the network. CVSS 3.1 scores it HIGH (8.6) with network attack vector and no privileges required. No patch version or exploitation details are pr...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
...
CVE-2026-55489
BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton presenters could submit a presentationId through /api/graphql that identified a presentation belonging to another meeting...
CVE-2026-55491
BigBlueButton versions prior to 3.0.29 have a stored XSS flaw: the meetingName field is rendered unescaped in record-and-playback/screenshare/playback/index.html.erb, so a low-privileged user can inject script that runs when another user replays the recording. CVSS 3.1 scores 5.4 (Medium). Upgrad...
USN-8643-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; CVE-2026-53224, CVE-2026-53246, CVE-2026-53247, CVE-2026-64531...
CVE-2026-16935
A TOCTOU race condition in IBM AIX 7.2, 7.3 and PowerVM VIOS 4.1 allows a local attacker with low privileges to escalate privileges, yielding full confidentiality, integrity and availability impact (CVSS 7.8). No exploitation in the wild is reported; IBM support page referenced for patch guidance...
CVE-2026-16934
A local attacker with low privileges can exploit a heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 to gain elevated privileges, with high confidentiality, integrity, and availability impact. No specific exploit details or patch information are provided in the documents; monitor...
K000163015: libjpeg-turbo vulnerabilities CVE-2018-1152 and CVE-2020-13790
Security Advisory Description CVE-2018-1152 libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. CVE-2020-13790 libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via ...
Important: Red Hat Security Advisory: dracut security update
An update for dracut is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
EUVD-2026-63662
OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...
CVE-2026-77641
Tor versions before 0.4.9.9 ignore the return value of relay_send_command_from_edge() when sending a CONFLUX_SWITCH cell; on send failure, the circuit leg is freed via cfx_del_leg() while the caller still writes to it, causing a NULL write-after-free crash (TROVE-2026-017). The fix is included in...
CVE-2026-70653
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning of a scanline in scanlinereadold and read q-1 before any prior pixel exists. A crafted Radiance...
EUVD-2026-63652
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built with libultrahdr support can incorrectly size an output buffer in libvips/foreign/uhdrsave.c within vipsforeignsaveuhdrsetrawhdr when a pipeline enlarges an incoming JPEG to a very large outpu...
CVE-2026-76019
Incorrect authorization in Chrome's Workers component allows a remote attacker with a compromised renderer process to bypass the web origin policy via a crafted HTML page, requiring social engineering. Fixed in Chrome 151.0.7922.173 (desktop). No exploitation details are provided in the documents.
