EUVD-2026-43843

Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...

EUVD-2026-43825

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-43962

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...

EUVD-2026-43704

A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limitation of file save operations within the API. An authenticated attacker could exploit this vulnerability to write arbitrary files to restricted system directories outside of the...

CVE-2026-50454

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

CVE-2026-50310

Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...

tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...

EUVD-2025-33183

Wasmtime: Memory leak in C API with externref and anyref types...

CVE-2026-58595

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-50350

Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...

CVE-2026-15427

An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...

CVE-2026-15428

An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with...

CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability

...

CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability

...

CVE-2026-50454

The CVE-2026-50454 entry describes a Privilege Elevation via Relative Path Traversal in Windows User Interface Core. Affected component: Windows User Interface Core; attack requires local access (LOCAL) with LOW privileges and no user interaction per the CVSS v3.1 vector. Impact is Elevation of P...

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability

...

CVE-2026-50310 Windows Human Interface Device Information Disclosure Vulnerability

...

CVE-2026-50310

CVE-2026-50310 describes an integer overflow/wraparound in Windows Devices Human Interface which allows an authorized local attacker to disclose information. Affected component is the Windows Devices Human Interface; root cause is an overflow condition that can leak data locally. Microsoft has re...