EUVD-2026-56725

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

EUVD-2026-56583

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56413

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56404

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-56312

Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56310

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-58612

Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56302

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

EUVD-2026-56298

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

EUVD-2026-56293

Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-65768

CVE-2026-65768 is a Microsoft Teams for Android path traversal leading to remote code execution over a network. The root cause is an improper limitation of a pathname to a restricted directory, enabling an unauthenticated, network-based attacker to run code. Public CVSS data assigns a high/critic...

CVE-2026-73082 Activepieces: Server-side request forgery in MCP tool validation endpoint

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can...

EUVD-2026-56533

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

CVE-2026-39452

Protection mechanism failure for some IntelR Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable escalation of privilege. Thi...

CVE-2026-20795

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...

CVE-2026-20787

The CVE-2026-20787 affects Intel PROSet/Wireless WiFi Software for Windows (Ring 2: Device Drivers). It stems from a null pointer dereference that may allow a denial of service. An unauthenticated, network-adjacent attacker with low complexity and no user interaction could trigger the flaw, with ...

CVE-2026-20787

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

CVE-2026-20747

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...

EUVD-2026-56485

Improper conditions check for some IntelR PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent...