CVE-2026-118176 Bypass of remote UNC path restriction in mailbox: URLs

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

EUVD-2026-54438

Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality “!ArcEntryMove” accepts an arbitrary path, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to...

BaseBindToMachine Privilege Escalation

The vulnerability of the BaseBindToMachine function in the advapi32.dll library of the WinReg client on Windows operating systems is related to the transfer of NTLM authentication data to the Active Directory Certificate Services ADCS service due to the use of outdated transport protocols...

Exploit for Improper Input Validation in Microsoft

Microsoft Outlook Remote Code Execution Vulnerability PoC Th...