CVE-2026-53633

Vitest CVE-2026-53633 affects Vitest Browser Mode (3.0.0–3.2.5, 4.1.8, and 5.0.0-beta.4), where a cdp() API exposes raw Chrome DevTools Protocol methods without gates. A remote client with exposed browser API metadata can use CDP Page.setDownloadBehavior and Runtime.evaluate to overwrite vite.con...

EUVD-2026-44117

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-44032

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-43981

Use after free in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-56642

Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network...

CVE-2026-56642 Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability

...

CVE-2026-55031 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-55017 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-55017

Mode C: CVE-2026-55017 is a heap-based buffer overflow affecting Microsoft Office, enabling a local attacker to execute code. The available connected documents confirm this vulnerability within Microsoft Office products (Office components cited in the NCSC advisory and multiple CVE trackers). Roo...

CVE-2026-50314 Microsoft Office Remote Code Execution Vulnerability

...

CVE-2026-50309 Windows NTFS Remote Code Execution Vulnerability

...

CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Windows OLE Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Windows OLE allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-15690

A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/uaclientconnect.c of the component Shared Client Library. Such manipulation of the argument ServerNamespaceArray leads to null pointer dereference. Th...

CVE-2026-15677 code-projects Online Job Portal JobSeekerInsert.php unrestricted upload

A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to t...

CVE-2026-15618

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/toolexec.go of the component exec Safety Guard. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The...

CVE-2026-15618

CVE-2026-15618 affects mosaxiv clawlet up to 0.2.10. The flaw is in the function guardExecCommand in the file tools/tool_exec.go of the exec Safety Guard component. The manipulation causes a protection mechanism failure and can be exploited remotely; the exploit has been released publicly. The re...

CVE-2026-15618 mosaxiv clawlet exec Safety Guard tool_exec.go guardExecCommand protection mechanism

A security flaw has been discovered in mosaxiv clawlet up to 0.2.10. The affected element is the function guardExecCommand of the file tools/toolexec.go of the component exec Safety Guard. The manipulation results in protection mechanism failure. It is possible to launch the attack remotely. The...

CVE-2026-6875

CVE-2026-6875 is a pre-auth remote code execution in ServiceNow AI Platform. The vulnerability stems from a sandbox escape in the /assessment_thanks.do endpoint, where a gadget using Object.defineProperty and Class.create.constructor chains to trigger Function(code)() and run arbitrary GlideContr...