2704 matches found
CVE-2026-46415
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...
CVE-2026-46415
The CVE-2026-46415 issue affects the Caddy Defender plugin for Caddy, prior to version 0.10.1. Defender evaluated blocking decisions using r.RemoteAddr (the immediate peer), which could be a trusted proxy in deployments behind proxies/CDNs/load balancers, allowing clients from blocked IP ranges t...
CVE-2026-46415 Caddy Defender trusted proxy client IP bypass
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...
CVE-2026-46415 Caddy Defender trusted proxy client IP bypass
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the client's IP address. Prior to version 0.10.1, Caddy Defender used r.RemoteAddr when evaluating whether a request should be blocked. RemoteAddr is the address of the immediate peer...
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...
Turning threat intelligence into decisive action with Defender Experts
In this article 1. Upstream: See the campaign before it reaches you 1. In your environment: Follow the threat everywhere it moves 2. See it live at Black Hat USA Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identities,...
vulnerabilities hidden in Microsoft Defender
Microsoft has addressed vulnerabilities in Defender. A malicious individual could exploit these vulnerabilities to gain enhanced privileges, execute arbitrary code with system rights, and/or access sensitive data. The malicious individual would need to deceive the victim into downloading and...
CVE-2026-56178
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-50657
Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-50658
Time-of-check time-of-use toctou race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally...
CVE-2026-55012
Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-55011
Integer underflow wrap or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-56178
CVE-2026-56178 corresponds to a toctou (time-of-check, time-of-use) race condition vulnerability in Microsoft Defender for Endpoint for Mac that allows an authorized local attacker to escalate privileges. The issue affects the Defender for Endpoint component on macOS and stems from a race conditi...
CVE-2026-56178 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-50658
The CVE-2026-50658 entry describes a Time-of-check Time-of-use (TOCTOU) race condition in Microsoft Defender, enabling an authorized local attacker to elevate privileges. Connected sources corroborate a Mac-focused Defender elevation-of-privilege vulnerability, with multiple advisories and CVE re...
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...
CVE-2026-50658 Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
...