28309 matches found
EUVD-2026-56449
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
EUVD-2026-56433
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-56430
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-56428
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-56414
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...
EUVD-2026-56307
Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...
CVE-2026-59124
Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...
EUVD-2026-56297
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-56295
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
CVE-2026-35502
Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...
EUVD-2026-56532
Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...
CVE-2026-35502
Deserialization of untrusted data for some IntelR Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege...
CVE-2026-35502
CVE-2026-35502 describes a deserialization vulnerability in Intel(R) Extension for PyTorch prior to 2.8.0, affecting Ring 3: User Applications. An unprivileged, unauthenticated user could achieve local privilege escalation with low impact to confidentiality, integrity, and availability. The issue...
CVE-2026-73066
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
CVE-2026-17061
A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution...
UBUNTU-CVE-2026-73066
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
EUVD-2026-56181
Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...
CVE-2026-17061
CVE-2026-17061 affects SIMULIA Execution Engine (Release 2023–2026). The issue is deserialization of untrusted data enabling unauthenticated remote code execution over a network with no user interaction. CVSS v3.1 base score 10.0 (CRITICAL), impact on confidentiality, integrity, and availability ...