CVE-2026-74958

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the WebRTC component...

CVE-2026-74954

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure due to side-channel in the Storage: Cache API component...

CVE-2026-43679

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

EUVD-2026-63777

This issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts...

EUVD-2026-63731

Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/backend/src/clients/GoogleChat/GoogleChatClient.ts and in packages/backend/src/clients/MicrosoftTeams/MicrosoftTeamsClient.ts. In affected versions both call fetch on the stored...

EUVD-2026-63681

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl from src/shared/utils/ssrfGuard.js. That guard compares hostname strings only: it resolves no DNS, does not revalidate...

EUVD-2026-63628

Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63630

Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...

EUVD-2026-63617

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63691

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63623

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63734

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds read...

EUVD-2026-63738

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow...

EUVD-2026-63739

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...

EUVD-2026-63702

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

EUVD-2026-63643

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...

EUVD-2026-63700

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...

EUVD-2025-210758

The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability...

CVE-2026-77648

creationtimestamp| type| source ---|---|--- 2026-08-21 00:13:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2lst6uuj3pzwn...

CVE-2026-17152

creationtimestamp| type| source ---|---|--- 2026-08-21 00:09:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhswgbw22p 2026-08-21 00:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtkhupptqv2e...