154434 matches found
CVE-2026-44820
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-44823
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-42986
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-41092
Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally...
Free Spotify Premium hacks on social media are spreading infostealers
Short-form video platforms like TikTok and Instagram Reels have become the latest way cybercriminals spread malware. We've already seen attackers move away from traditional phishing emails and toward tactics that trick people into installing malware themselves. Now they're being lured with slick...
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft on Tuesday released fixes for a record 206 security vulnerabilities impacting its software portfolio, including three flaws that have been publicly disclosed at the time of release. Of the 206 flaws, 39 are rated Critical, and 167 are rated Important in severity. This includes 63...
net: gro: don't merge zcopy skbs
...
flow_dissector: do not dissect PPPoE PFC frames
...
crypto: caam - guard HMAC key hex dumps in hash_digest_key
...
The vulnerability of the Link Preview function in browsers Google Chrome and Microsoft Edge allows a hacker to bypass security restrictions.
The vulnerability of the Link Preview function in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
The vulnerability of the Actor component in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.
The vulnerability of the Actor component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
The vulnerability of the WebML component in Google Chrome and Microsoft Edge browsers on macOS operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the WebML component in Google Chrome and Microsoft Edge browsers on MacOS operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker, acting remotely, to gain unauthorized access to protected information...
Flaws hidden in Microsoft Dynamics
Microsoft has identified a vulnerability in Dynamics on-premise. A malicious individual could exploit this vulnerability to gain increased privileges on the system. It is possible for a malicious person to gain privileges as a System Administrator. For successful exploitation, the malicious...
EUVD-2026-35528
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35508
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-35505
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-35506
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-35690
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...