CVE-2026-70336

Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-70323

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-70325

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70322

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70319

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-70316

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70318

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-70320

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70314

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-70313

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70312

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-65811

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-62917

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-62914

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

UBUNTU-CVE-2026-62901

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-48384

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...

CVE-2026-48436

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...

CVE-2026-27765

Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-21273

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...