wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include

A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...

CVE-2026-73212 coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCE

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

CVE-2026-73212

Coturn (TURN/STUN server) vulnerability CVE-2026-73212: The function good_peer_addr() in src/server/ns_turn_server.c fails to canonicalize IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms via ioa_addr_in_range() in src/client/ns_turn_ioaddr.c. This can let an authenticated RFC 6062 TCP...

CVE-2026-66808

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-62817

Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability

...

CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-68812

CVE-2026-68812 concerns a heap-based buffer overflow in Microsoft Excel (Office) that can allow a locally executed arbitrary code execution when a user opens or processes a malicious file. The root cause is memory corruption inside Excel’s handling of data structures, leading to control of the pr...

CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

EUVD-2026-56750

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-66807

CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...

CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability

...

CVE-2026-64920 Microsoft Access Remote Code Execution Vulnerability

...

CVE-2026-64915 Microsoft Office Word Remote Code Execution Vulnerability

...

CVE-2026-64908

In CVE-2026-64908, the vulnerability is a heap-based buffer overflow in Microsoft Office Access. The issue affects Access components handling data processing, allowing a local attacker to execute code on the affected system. This is described as a local, user-interaction-requiring flaw with high ...