CVE-2026-32170

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

CVE-2026-7619

The CVE-2026-7619 entry details an authenticated SQL Injection in the Charitable WordPress plugin (

CVE-2026-7619

The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 1.8.10.4 due to insufficient escaping on the user supplied parameter and lack of...

EUVD-2026-29570

Double free in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

EUVD-2026-29547

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

CVE-2026-21530

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-32170

Technical details for CVE-2026-32170 are not publicly available in the provided documents beyond the basic description. No vendor, product, version, root cause, impact, or fix specifics are supplied here. Monitor official disclosures and CVE/Microsoft update guidance for updates.

CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-21530 Windows Rich Text Edit Elevation of Privilege Vulnerability

...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2026-40300 Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history

Zulip is an open-source team collaboration tool. Prior to 12.0, With messageedithistoryvisibilitypolicy set to "moves", /api/v1/messages/id/history still returns historical content values, allowing low-privilege users to recover text that was edited away from other users' messages. This...

Windows Rich Text Edit Elevation of Privilege Vulnerability

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

Windows Rich Text Edit Elevation of Privilege Vulnerability

Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally...

CVE-2026-42741

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aman Ninja Forms Views Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views Display & Edit Ninja Forms...

CVE-2026-42741

Technical details about CVE-2026-42741 are not publicly available in the provided documents; monitor for updates.

EUVD-2026-29413

The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access a...

CVE-2026-6932

CVE-2026-6932 affects the WordPress plugin WooCommerce Minimum Weight (versions

wger 安全漏洞

WGER is an open-source project developed by the WGER Team, built using Django for hosting self-hosted FLOSS fitness/exercise, nutrition, and weight tracking applications. Versions of WGER prior to 2.6 contained security vulnerabilities. These vulnerabilities stemmed from the use of Python object...