CVE-2026-64606

A deserialization vulnerability exists in Apache Fury (a high-performance serialization framework) versions prior to 1.4.0 . The root cause is insufficient validation of lambda expression classes during Java deserialization, specifically affecting the lambda capture class . An attacker can constr...

Security Bulletin: NVIDIA Transformers4Rec - July 2026

NVIDIA has released a software update for NVIDIA® Transformers4Rec. To protect your system, update NVIDIA Transformers4Rec to commit 8bf122f or later. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and their...

EUVD-2026-45978

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

dotnet: .NET: Local code execution via deserialization of untrusted data

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of...

dotnet: .NET: Local code execution via deserialization of untrusted data

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to execute code locally by exploiting a deserialization of untrusted data. This means that if an attacker can provide specially crafted data, the .NET application may process it in a way that leads to the execution of...

VulnCheck KEV: CVE-2026-50522

Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

ALSA-2026:41898 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10...

Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

SUSE CVE-2025-58218

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes - USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes - USPS Edition: from n/a through = 1.3.9...

Linux Distros Unpatched Vulnerability : CVE-2026-50649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. CVE-2026-50649 Note that Nessus relies on the presence of the...

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution RCE vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 Critical, results from the...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Unsafe Deserialization - RCE React 19.0.0...

NVIDIA DALI Deserialization RCE

The vulnerability of the library for acceleration of data loading and preprocessing in NVIDIA DALI is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

.NET Microsoft Visual Studio Deserialization RCE

The vulnerability of .NET and Microsoft Visual Studio software platforms is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Incorrect Authorization

Overview com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Incorrect Authorization in the deserialization process when handling...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the deserialization process when handling properties annotated with both @JsonView and @JsonUnwrapped. An attacker can modify data that should be restricted to a higher-privileged view by supplying crafted JSO...

CVE-2026-50649

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-24227

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution...

CVE-2026-24227

CVE-2026-24227 affects NVIDIA TensorRT. The vulnerability arises from deserializing untrusted data, potentially enabling code execution. Impact is high (CVSS v3.1 base score 9.8). NVIDIA’s security bulletin recommends updating to TensorRT v11.0 (and Polygraphy 0.50.0) to mitigate; affected Tensor...