Win32k Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

Microsoft Excel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2014-2338

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

CVE-2026-78131

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

CVE-2026-78130

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:18+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-15 20:00:58+00:00| seen|...

kernel: vfio/pci: Clean up DMABUFs before disabling function

A flaw was found in the Linux kernel's vfio/pci subsystem. During device shutdown, an improper order of operations in cleaning up Direct Memory Access Buffers DMABUFs before disabling the function creates a brief window. In this window, a device's Base Address Registers BARs could still be access...

CVE-2026-86207

creationtimestamp| type| source ---|---|--- 2026-09-08 12:12:11+00:00| seen| https://bsky.app/profile/stephenfewer.bsky.social/post/3muyymguz422s 2026-09-08 16:56:24+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117236471187412679 2026-09-09 00:00:04+00:00| confirmed|...

kernel: nvmet-auth: validate reply message payload bounds against transfer length

A flaw was found in the Linux kernel's nvmet-auth component. A remote attacker, by sending a specially crafted NVMe-oF NVMe over Fabrics authentication reply message, can cause an out-of-bounds read in the kernel's memory. This vulnerability, exploitable pre-authentication, can lead to the...

CVE-2026-67367

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrnvi23q2f 2026-09-08 17:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkexsema2f 2026-09-18 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-62645

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrn57bab2n 2026-09-08 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117234953398567351 2026-09-08 10:30:27+00:00| seen|...

CVE-2026-77132

creationtimestamp| type| source ---|---|--- 2026-09-08 09:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ea6eeuqonpoxa 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CVE-2026-74859

creationtimestamp| type| source ---|---|--- 2026-09-08 09:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/djsi4xpzhl7nj...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

CVE-2019-1010022

creationtimestamp| type| source ---|---|--- 2026-09-08 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muymr7evht2t...

CVE-2026-71646

creationtimestamp| type| source ---|---|--- 2026-09-08 08:22:24+00:00| seen| https://gist.github.com/DongJiaxin0422/747d8e6c8afc0a364454b741b39bb98c...

WordPress User Profile Builder plugin <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability

Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field vulnerability discovered by daroo in WordPress Plugin Profile Builder versions = 3.15.7...

GHSA-P498-V437-472G

creationtimestamp| type| source ---|---|--- 2026-09-08 06:19:12+00:00| seen| https://gist.github.com/citadelculture/59ba3685c4ac125fd240e01b8fcee60a 2026-09-08 06:19:13+00:00| seen| https://gist.github.com/citadelculture/5ad0a838a902eb1cbf2ff2ff33472c61 2026-09-08 06:19:13+00:00| seen|...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-16006

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...