CVE-2026-71362

Technical details are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-56844

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

EUVD-2026-56838

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (“link following”), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...

EUVD-2026-56826

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

CVE-2026-68325

A flaw was found in the Linux kernel's ivrsacpihid command-line parser. This vulnerability occurs because the parser does not properly bound the earlyacpihidmap array, allowing it to append more entries than its fixed four-element capacity. A local attacker could exploit this out-of-bounds write ...

CVE-2026-68428

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. A local attacker with privileges to load and unload kernel modules could exploit a use-after-free vulnerability. This occurs when a vendor module is unloaded while the KVM module remains loaded, and a subseque...

CVE-2026-68329

A flaw was found in the Linux kernel's iommu/amd component. A race condition in the iommucompletionwait function allows it to return prematurely without ensuring all previously queued commands have completed in hardware. This can lead to a use-after-free vulnerability, where the Input/Output Memo...

ELAN Touchpad Driver Vulnerability - Lenovo Support US

No description provided...

CVE-2026-68324

A flaw was found in the Intel IOMMU Input/Output Memory Management Unit driver within the Linux kernel. The dmarlatencydisable function incorrectly calculates the size for a memory clear operation, leading to an out-of-bounds write. A local attacker could exploit this vulnerability to corrupt...

CVE-2026-68294

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

CVE-2026-68360

A flaw was found in the Linux kernel's hwmon: corsair-cpro driver. A race condition can occur during the driver's initialization process if device input/output IO is started but then fails. This timing issue can lead to a use-after-free UAF vulnerability, where the system attempts to access memor...

CVE-2026-68413

A flaw was found in the ipw2100 wireless driver in the Linux kernel. Insufficient error handling in the ipw2100pciinitone function can lead to a memory leak. This occurs because memory allocated by ipw2100allocdevice is not properly released in specific error scenarios, potentially allowing a loc...

CVE-2026-68393

A flaw was found in the Bluetooth hcisync component of the Linux kernel. This vulnerability arises from the incorrect handling of Read-Copy-Update RCU protected pointers outside their designated critical sections without proper reference counting. An attacker could exploit this by triggering a ra...

CVE-2026-73216

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...

CVE-2026-73215

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...