CVE-2026-66321

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66315

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-51144

Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...

CVE-2025-29296

H3C devices listed (BE18000 V200R007, NX400 V100R015, NX30 Pro V100R0011, R3010 V100R009, NX15 V100R017, R1510 V100R016, NE36 Pro V100R002) expose multiple command injection flaws in the /api/esps handler. Vulnerable interfaces include esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modi...

IBM Langflow Code Injection Vulnerability

Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments...

CVE-2026-18667

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...

CVE-2026-62870

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-62870 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2026-66326

CVE-2026-66326 affects Microsoft Edge (Chromium-based). The issue is a missing authorization vulnerability in Edge that could allow a remote attacker to execute code over a network. CVSS 3.1 indicates network access, low attack complexity, no privileges required, but user interaction is required;...

CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66326

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66315 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66312

CVE-2026-66312 affects Microsoft Edge (Chromium-based). The vulnerability is a buffer over-read in Edge that could allow an authorized attacker to execute code over a network. This is documented with a CVSS v3.1 base score of 6.5 (Medium) with network access and low privileges required, no user i...

CVE-2026-66321

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66321

CVE-2026-66321 is a Microsoft Edge (Chromium-based) remote code execution vulnerability caused by a resource access type confusion. The issue allows an unauthorized attacker to execute code over the network (attack vector: NETWORK) with no privileges required and user interaction needed, affectin...