146730 matches found
CVE-2026-26134
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally...
can: ucan: Fix infinite loop from zero-length messages
...
scsi: core: Fix refcount leak for tagset_refcnt
...
Vim affected by Command injection via newline in glob()
...
Grafana MSSQL Data Source Plugin 安全漏洞
The Grafana MSSQL Data Source Plugin is an open-source plugin from Grafana that allows for connecting to Microsoft SQL Server. There is a security vulnerability in the Grafana MSSQL data source plugin. This vulnerability stems from a logical flaw that allows low-privilege users to bypass API...
The vulnerability of the vmbus_acpi_add() function in the drivers/hv/vmbus_drv.c module of the Microsoft HyperV Linux operating system kernel allows a attacker to cause a service failure.
The vulnerability of the vmbusacpiadd function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse
Cybersecurity researchers are calling attention to an active device code phishing campaign that's targeting Microsoft 365 identities across more than 340 organizations in the U.S., Canada, Australia, New Zealand, and Germany. The activity, per Huntress, was first spotted on February 19, 2026, wit...
Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw
It’s only on rare occasions that anyone pays attention to the acknowledgment section of a vulnerability disclosure. But for the person who found the bug, it's often the conclusion of hours of work, trial and error, searching for recognition, and finally seeing the vulnerability get patched. Bug...
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
...
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
...
The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...
The vulnerability of the rendering mechanism of Blink in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.
The vulnerability of the rendering mechanism in Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Microsoft Office Code Execution Vulnerability (CNVD-2026-16159)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Base component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.
The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Support Statement — Exchange Web Services (EWS) Deprecation
Challenge Microsoft has announced the deprecation of Exchange Web Services EWS in Exchange Online, with the initial phase-out target of October 1, 2026. Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365 currently leverage EWS for Exchange Online backup functionality. Note: Thi...
How to Safely Perform Snapshot Rollback of Veeam Backup for Microsoft 365
Purpose This article provides step-by-step guidance for performing a snapshot rollback of a Veeam Backup for Microsoft 365 deployment in the event of a disaster. Critical Warning Rolling back to a snapshot is a complex and highly risky process that should only be performed in rare disaster...
CVE-2026-0898
An arbitrary file-write vulnerability exists in the Pega Browser Extension (PBE) affecting Pega Robot Studio developers automating Google Chrome or Microsoft Edge on versions 22.1 or R25. Robot Runtime is not affected. The issue arises from a malicious website that could be loaded by a developer ...