CVE-2026-95394: Unchecked Input for Loop Condition

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Wireshark : CVE-2026-95394 : Microsoft Network Monitor file parser large loop

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95394

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-108989

Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-102928

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853: Unverified Ownership

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

VulnCheck KEV: CVE-2023-54400

Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated remote attackers to inject arbitrary SQL through the Name parameter of the getEmpByname action without any authentication. Attackers can exploit UNION-based SQL injection...

Microsoft SharePoint Server Code Execution

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Office Microsoft 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Visual Studio Code Source Editor Security Bypass

The vulnerability of Microsoft Visual Studio Code’s editor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security measures remotely...

Microsoft SQL Server Management Studio Privilege Escalation

The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Microsoft Exchange Server servers

The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v23.1 Release – August 2026 (KB5072939)

Update Rollup for Azure File Sync agent version 23.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168 , has called it an evolution of the threat actor's tradecraft. Th...

Microsoft Authenticator Authentication Bypass

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Azure CLI Code Execution

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...