CVE-2026-65797: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

PT-2026-70366

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA affected versions not specified Cisco Secure Firewall Threat Defense FTD affected versions not specified Description Insufficient error checking when processing HTTP requests in the Remote...

CVE-2026-73215: Uncontrolled Resource Consumption

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...

CVE-2026-65798: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-62769: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-15561: Allocation of Resources Without Limits or Throttling

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

PT-2026-70705

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption or information disclosure. In this case, the...

VulnCheck KEV: CVE-2026-20349

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...

CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2026-56620

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

Undertow input validation error vulnerability

Undertow has a vulnerability related to input validation. This vulnerability stems from the parser in the ChunkReader component, which uses a single internal variable to store the remaining block size and status flags. Attackers can exploit this by sending specially crafted requests with an...

CVE-2026-56620

Technical details such as affected products, versions, root cause, or exploit information are not publicly provided in the supplied documents. Monitor for updates from official disclosures.

CVE-2026-56620

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-56620 HCL BigFix Mobile is vulnerable to information disclosure

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-56620 HCL BigFix Mobile is vulnerable to information disclosure

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

EUVD-2026-55662

HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting...

CVE-2026-68416

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

DEBIAN-CVE-2026-68416

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

CVE-2026-68413

In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100pciinitone The memory allocated in the ipw2100allocdevice function is not freed in some of the error paths in ipw2100pciinitone. Fix that by converting the direct return into a...