EUVD-2026-44234

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

...

EUVD-2026-44149

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...

CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability

...

CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability

...

CVE-2026-50370

CVE-2026-50370 is a heap-based buffer overflow in the Windows DHCP Server service that could allow an unauthenticated attacker on an adjacent network to execute code. The vulnerability is listed among the July 2026 Patch Tuesday disclosures and is included in Microsoft’s security updates (KB50995...

CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability

...

CVE-2026-49180

This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...

CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability

...

CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability

...

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5099539)

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems KB5099539...

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5099539)

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5099539...

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5099539)

2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5099539...

MAL-2026-10582 Malicious code in async-mutex-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df420be80a00abb5efead6e83b37885cc37a347641386c0633719197dcb3dc5 Package published as 'async-mutex-v2' advertises itself as a Promise-based mutex but ships no mutex implementation. The main entry index.js exports...

DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network...

MAL-2026-10578 Malicious code in @sqlite-group/sql-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bd76c01604d26251c1650c71f8a99ad32c5389c4e42795477ae660be33a2a The package is published under a scope that impersonates SQLite @sqlite-group and declares itself as "cloud definitions for node", but the shipped...

MAL-2026-10577 Malicious code in @sqlite-clone/nodesql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa13a1a0a588b94fe6f577ccd3fad94566f8db8d44848aa6421285795f15298d The package is published as @sqlite-clone/nodesql but its shipped index.js is a verbatim copy of the well-known feross/buffer polyfill with a single...

CVE-2026-11567

The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced variable/hidden payment amount, allowing unauthenticated users to underpay for the configured product or subscription. Forms using a fixed configured price are not...

RLSA-2026:38485 Important: gegl security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing CVE-2026-2050 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...