CVE-2026-64382 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64382 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68209 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68209 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64352 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64352 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64189 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64189 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

GHSA-W7CW-XP7H-6J5J vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability

...

Win32k Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

EUVD-2026-54953

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...

CVE-2026-19333

A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality of the component generatetypes. The manipulation of the argument schema results in command injection. The...

CVE-2026-19335

CVE-2026-19335 concerns the Jane-xiaoer skill-vision-control project, affecting the function getSkillVersionsDir in src/svc/utils/config.ts. The vulnerability arises from how the argument skillName is handled, enabling a path traversal condition. The issue is restricted to a local attack vector a...

CVE-2026-19334

NightTrek Ollama-mcp is affected by a local command-injection in src/index.ts caused by manipulation of the argument name/model/file/source/destination. The issue exists up to the commit 80cf2e17cfc144963a475b619093a2d13c13dbc9, with no public version details due to rolling-release delivery. Expl...

CVE-2026-19333 NightTrek Supabase-MCP generate_types command injection

A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected by this issue is some unknown functionality of the component generatetypes. The manipulation of the argument schema results in command injection. The...

CVE-2026-19287

CVE-2026-19287 affects abrinsmead mindpilot-mcp 0.5.0, specifically the HistoryService component. The issue is triggered by manipulating the argument ID, enabling path traversal via a local attack. The description notes the attack must be launched locally and that the project was informed through...

CVE-2026-19270

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...

CVE-2026-19193

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...

CVE-2026-18785

A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is the function UAClientgetRemoteDataTypes of the file examples/customdatatype/clienttypescustom.c. Executing a manipulation can lead to use after free. It is possible to launch the attack on the loc...

CVE-2026-18784 o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...