CVE-2026-70320: Improper Input Validation

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70319: Improper Input Validation

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-70325: Improper Input Validation

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70314: Improper Input Validation

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-70318: Improper Input Validation

Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-70316: Improper Input Validation

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70313: Improper Input Validation

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70312: Improper Input Validation

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-65811: Improper Input Validation

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

CVE-2026-9214: Improper Input Validation

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...

CVE-2026-11737: Improper Input Validation

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality...

CVE-2026-11738: Improper Input Validation

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...

CVE-2026-48056: Improper Input Validation

Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...

CVE-2026-71217: Improper Input Validation

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

CVE-2026-4757: Incorrect Permission Assignment for Critical Resource

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after authenticating with an administrator-privileged service account...

PT-2026-70104

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud affected versions not specified Description An unauthenticated attacker can abuse a default authentication client by submitting specially crafted input to certain functions that lack sufficient validation. This flaw allows f...

CVE-2026-27765: Improper Input Validation

Improper input validation for some vLLM Hardware Plugin for IntelR GaudiR software before version 0.16.0 within Ring 3: User Applications may allow a denial of service. Authorized adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

CVE-2026-71217: Improper Input Validation

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

CVE-2026-63520: Improper Input Validation

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2026-20913: Improper Input Validation

Improper input validation for some IntelR Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...