72908 matches found
CVE-2026-45647
CVE-2026-45647 describes a time-of-check time-of-use (TOCTOU) race condition in Microsoft Defender for Endpoint (Mac) that can allow an authorized locally logged-in attacker to elevate privileges. The Red Hat, NVD, MSRC and CVE records consistently frame the issue as a local elevation of privileg...
CVE-2026-45654 Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-45455 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-45588 Secure Boot Security Feature Bypass Vulnerability
...
CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
...
CVE-2026-45645 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45639 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-45501 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-45490 .NET SDK Elevation of Privilege Vulnerability
...
CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
...
CVE-2026-45474 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-45475 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-48271 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser...
GHSA-438C-3975-5X3F
creationtimestamp| type| source ---|---|--- 2026-06-09 16:41:36+00:00| seen| https://gist.github.com/alon710/bdf9529c95cfcca7fc47d2945f8e9599 2026-06-09 16:51:31+00:00| seen| https://gist.github.com/alon710/8327e427344b759299d1377846fdfcd3...
USN-8409-1 uriparser vulnerability
It was discovered that uriparser incorrectly handled certain URI strings. An attacker could possibly use this issue to cause uriparser to crash, resulting in a denial of service...
CVE-2026-46546
creationtimestamp| type| source ---|---|--- 2026-06-09 16:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-46546...
CVE-2026-47644
creationtimestamp| type| source ---|---|--- 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-07-19 18:01:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mqzedczkbn2o...