EUVD-2026-56449

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

EUVD-2026-56430

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-56428

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-56418

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

CVE-2026-62900 .NET Information Disclosure Vulnerability

...

CVE-2026-62900

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

EUVD-2026-56297

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56295

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-56275

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

CVE-2026-68384

A flaw was found in the drm/xe/vf component of the Linux kernel. This vulnerability involves race conditions during the attachment and detachment of Cache Coherency System CCS batch buffers when Buffer Objects BOs are moved, particularly during Virtual Function VF migration events. These race...

CVE-2026-68167

A flaw was found in the Linux kernel's btrfs filesystem. A local user could trigger a kernel panic by performing specific filesystem operations that involve data relocation. This occurs because the system attempts to compress and inline data for relocation inodes, which are not designed for such...

CVE-2026-68247

A flaw was found in the Linux kernel's drm/i915/bios component. This component, responsible for display-related operations, failed to perform a necessary range check on the paneltype2 field within the LFP Data Block. This oversight could result in the selection of an incorrect panel type,...

CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170txprocessstatus function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing...

MAL-2026-13767 Malicious code in sui-bcs-codec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a215fced265f75473130d499c7d6ea6097f63aa19c595fc5445a56633b1c6e On require'sui-bcs-codec', a hidden IIFE labeled 'compat-probe' in index.js reads /.sui/sui.keystore, /.sui/suiconfig/.yaml, and.env files under cwd...

MAL-2026-13759 Malicious code in bs58-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d59b2d561269e6779eed82e12abe726403e9a2419936c01a4deaea9c3e70b2c Package bs58-12 presents itself as the popular bs58 base58 library README copied from bs58, advertising npm i --save bs58 but its own code is a thin...

CVE-2025-31114

creationtimestamp| type| source ---|---|--- 2026-08-11 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst2jrpkgr2u 2026-08-14 04:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mszeav5rli2f...

netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker could exploit this vulnerability by sending a specific sequence of HTTP responses 103, followed by a 200 with a GET body, then another 200 for a HEAD request when the client pipelines GET the...

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

Valve warns Steam hardware buyers: Expect fake delivery scams

Most of us are wise to phishing emails that don't contain much personal information. Generic "your account is suspended" messages usually get binned on sight. But what about the phishing emails that use your real name and address, and reference the specific product you bought last month? Even for...