171247 matches found
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept PoC for yet another zero-day in Microsoft Defender. The vulnerability, codenamed ShieldCrash , is assessed to be a patch bypass for CVE-2026-69414 CVSS score: 7.8, also called ShieldBreak, which the researcher reporte...
EUVD-2026-74551
Tanium addressed an improper access controls vulnerability in Comply...
PT-2026-89034
Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description Authenticated users with edit permissions but without checkout permissions can bypass authorization checks when updating assets. By sending specific parameters to the 'PATCH /api/v1/hardware/id'...
PT-2026-89045
News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...
Linux Distros Unpatched Vulnerability : CVE-2026-69439
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 Note that Nessus relie...
Linux Distros Unpatched Vulnerability : CVE-2026-19614
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3. CVE-2026-19614 Not...
Linux Distros Unpatched Vulnerability : CVE-2026-87581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...
CVE-2026-86765: Missing Authorization
Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...
Linux Distros Unpatched Vulnerability : CVE-2026-87466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...
Linux Distros Unpatched Vulnerability : CVE-2026-87477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-87589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass...
PT-2026-88777
Tanium addressed an information disclosure vulnerability in Comply...
Linux Distros Unpatched Vulnerability : CVE-2026-82061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write...
Linux Distros Unpatched Vulnerability : CVE-2026-11573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion CWE-674 in the QDomDocument/QDomNode serialization path of the Qt XML module QtXml, qtbase. QDomElementPrivate::save and...
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-63074 affecting package edk2 for versions less than 20240524git3e722403cd16-19
CVE-2026-63074 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...