EUVD-2026-2064

InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-20868

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-01-13 18:56:05+00:00| seen|...

EUVD-2026-2118

Improper link resolution before file access 'link following' in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally...

EUVD-2026-2102

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

EUVD-2026-2120

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-2137

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

EUVD-2026-2136

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-2138

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-2159

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-2200

Time-of-check time-of-use toctou race condition in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-2192

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...

CVE-2025-71089

creationtimestamp| type| source ---|---|--- 2026-01-13 17:35:59+00:00| seen| https://gist.github.com/Darkcrai86/bda549184c8e6e9f0f82c5da165ffeff 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/ 2026-03-16 03:00:00+00:00| seen|...

CVE-2025-71027

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

CVE-2025-71025

creationtimestamp| type| source ---|---|--- 2026-01-13 16:00:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888620742037036...

EUVD-2026-2213

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xeoaaddconfigioctl In xeoaaddconfigioctl, we accessed oaconfig-id after dropping metricslock. Since this lock protects the lifetime of oaconfig, an attacker could guess the id and call...

EUVD-2026-2251

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

EUVD-2026-2242

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

EUVD-2026-2290

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

EUVD-2026-2337

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

EUVD-2026-2377

Due to insufficient input handling, the SAP Identity Management REST interface allows an authenticated administrator to submit specially crafted malicious REST requests that are processed by JNDI operations without adequate input neutralization. This may lead to limited disclosure or modification...