Linux kernel driver Heap Buffer Overflow DoS

The vulnerability of the mlx5eResetTxqsqCCPCc function in the Linux kernel driver mlx5 is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...

NTLM Spoofing

The vulnerability of the NTLM protocol implementation in Windows operating systems is related to errors in information processing. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Microsoft Office Excel 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Exchange Server Auth Disclosure

The vulnerability of Microsoft Exchange Server servers is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Microsoft Defender for Endpoint for Mac Privilege Escalation

The vulnerability of Microsoft Defender for Endpoint for Mac is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Office Data Type Conversion Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Astro: Host header SSRF in prerendered error page fetch

Summary Astro SSR apps with prerendered error pages /404 or /500 using export const prerender = true fetch those pages over HTTP at runtime when an error occurs. The URL for this fetch is derived from request.url, which in turn gets its origin from the incoming Host header. When the Host header i...

CVE-2026-12303

Information disclosure due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...

CVE-2026-12297

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

CVE-2026-12297

Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Information Disclosure

Spring Web Services is vulnerable to Information Disclosure. The vulnerability is due to overly detailed authentication error handling in Spring Security integration paths, where account state information such as whether a user account is locked or disabled can be exposed through SOAP fault...

PT-2026-51506

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.7 Description A stored cross-site scripting issue exists in the monitor dashboard. The application renders crawl URLs and error messages using innerHTML without proper escaping. This allows an attacker to submit ...

ROS-20260616-73-0015

The vulnerability in ImageMagick7 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Push Notifications Privilege Escalation

The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

RuBackup Access Control Unauthorized Access

The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Local File Servers” panel...

Windows Push Notifications Privilege Escalation

The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

RuBackup Access Control Unauthorized Access

The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...

WebUI Domain Substitution

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...

Tab Strip Control XSS

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...