CVE-2026-110141: Observable Discrepancy

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93905: Deserialization of Untrusted Data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-96186: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-70261: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-70260: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-83870: Out-of-bounds Read

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

CVE-2026-83639: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83787: Authentication Bypass Using an Alternate Path or Channel

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-54454: Unrestricted Upload of File with Dangerous Type

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessib...

CVE-2026-79607: Improper Restriction of Operations within the Bounds of a Memory Buffer

During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...

CVE-2026-97334: Improper Handling of Highly Compressed Data (Data Amplification)

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

CVE-2026-65162: Execution with Unnecessary Privileges

NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, da...

CVE-2026-65150: Out-of-bounds Read

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service...

CVE-2026-65149: Out-of-bounds Write

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering...

CVE-2026-65148: Stack-based Buffer Overflow

NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...

CVE-2026-65141: Improper Neutralization of Directives in Dynamically Evaluated Code

NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...

CVE-2026-65104: Use of Weak Hash

NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exploit of this vulnerability might lead to data tampering and partial information disclosure...

CVE-2026-89208: Out-of-bounds Read

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions = V2.3, Desigo PXC00-U All versions = V2.3, Desigo PXC001-E.D All versions = V2.3, Desigo PXC100-E.D All versions = V2.3, Desigo PXC12-E.D All versions = V2.3,...

CVE-2026-89204: Authorization Bypass Through User-Controlled Key

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...

CVE-2026-63354: Improper Neutralization of Input During Web Page Generation

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially...