145732 matches found
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
...
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
...
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
...
Heap Use-After-Free in the PKCS7_verify() Function
...
AES-OCB IV Ignored on EVP_Cipher() Path
...
Vim: Arbitrary Code Execution via Python Omni-Completion
...
Vim: Out-of-bounds Read in Terminal Screen Snapshot
...
OESA-2026-2614 catdoc security update
catdoc is program which reads one or more Microsoft word files and outputs text, contained insinde them to standard output. Therefore it does same work for.doc files, as unix cat command for plain ASCII files. It is now accompanied by xls2csv - program which converts Excel spreadsheet into...
SUSE CVE-2026-8863
Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...
Security Updates for Microsoft Dynamics 365 (on-premises) (June 2026)
The Microsoft Dynamics 365 on-premises is missing a security update. It is, therefore, affected by a vulnerability: - Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network. CVE-2026-4037...
Exploit for Untrusted Pointer Dereference in Microsoft
CVE...
Insufficient verification that responses belong to a query
...
Уязвимость браузеров Google Chrome и Microsoft Edge, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код
Уязвимость браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы через созданную HTML-страницу...
The vulnerability of the professional speech recognition and document automation platform Nuance PowerScribe, related to a significant loss of significance, allows a violator to execute arbitrary codes.
The vulnerability of the Nuance PowerScribe professional speech recognition and document automation platform is related to the lack of a disassembly mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...
CVE-2026-45466
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-45459
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-45455
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-45501
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...