GTranslate < 2.8.65 - Cross-Site Scripting

In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...

CVE-2026-57084

Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally...

CVE-2026-50456

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50442

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-50389

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-40422

Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-41087

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-33842

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

CVE-2026-57084 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-57084

CVE-2026-57084 affects Windows File Explorer. Description: a use of an uninitialized resource leads to local information disclosure. CVSSv3.1 base score 5.5 (Medium); attack vector LOCAL, required user interaction, no confidentiality integrity or availability impact beyond disclosure per provided...

CVE-2026-57084 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50456 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50456 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50456

CVE-2026-50456 is a Windows File Explorer information disclosure vulnerability. A local attacker with low privileges and no user interaction can access sensitive information due to the underlying issue in Windows File Explorer. The CVSS.3.1 score is 5.5 (Medium), with attack vector Local, impact...

CVE-2026-50389 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50442 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50389 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50442 Windows File Explorer Information Disclosure Vulnerability

...

CVE-2026-50442

Public technical details about CVE-2026-50442 are not provided in the supplied documents. Monitor for updates from MSRC/NCSC and NVD; apply the available Windows File Explorer update when released.

CVE-2026-50389

CVE-2026-50389 affects Windows File Explorer and is a local information-disclosure vulnerability where an authorized attacker can disclose sensitive information. The issue is confirmed in Windows File Explorer (Explorer.exe) and is addressed by Microsoft security updates; multiple MSRC/MSKB entri...