151873 matches found
CVE-2026-54998: Incorrect Authorization
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network...
The vulnerability of the Cast component in browsers such as Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows attackers to carry out UXSS attacks.
The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute XSS attacks using a specially created HTML page...
The vulnerability of the Input component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...
The vulnerability of the Printing component in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.
The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...
The vulnerability of the Cast Streaming component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.
The vulnerability of the Cast Streaming component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
KLA91129 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Synapse can be exploited remotely ...
CVE-2026-50521 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-50521
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
EUVD-2026-41137
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
CVE-2026-50521
CVE-2026-50521 : Use-after-free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network. The vulnerability has a CVSS v3.1 base score of 8.3 (High) with network attack vector, low attack complexity, required privileges, no user interaction, and impact to co...
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
...
EUVD-2026-40882
UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme rfbUltraVNCMsLogonIIAuth. In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer DHMAXBITS controls the prime size. A 64-bit DH key can be brok...
PT-2026-54783
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based versions prior to 149.0.4022.98 Description A use-after-free issue exists in Microsoft Edge Chromium-based. This flaw allows an authorized attacker to execute arbitrary code over a network. Use-after-free is a...
VulnCheck KEV: CVE-2026-45659
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network...
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized attacker to execute code over a network...
The vulnerability of the PreviewTab component in Google Chrome browsers allows a hacker to bypass security measures.
The vulnerability of the PreviewTab component in Google Chrome and Microsoft Edge is related to deficiencies in the data source confirmation mechanism. Exploiting this vulnerability can allow an attacker to bypass security measures through a specially created HTML page...
CVE-2026-50521: Use After Free
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
EUVD-2026-40365
The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a circular schema reference can cause proce...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the parsing process. An attacker can cause process termination by submitting a crafted OpenAPI document containing circular schema references. Remediation Upgrade Microsoft.OpenApi to version 2.7.5, 3.5.4 or...