CVE-2026-44823

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-10143 kafka-python prior to 2.3.2 DoS via SCRAM Iteration Count in scram.py

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, ScramClient.processserverfirstmessage...

CVE-2026-46643

Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.7.1, on POSIX, escapeshellarg‘/usr/bin/wkhtmltopdf’ returns the literal string ‘/usr/bin/wkhtmltopdf’ with the single-quote characters included. isexecutable then looks for a file...

CVE-2026-45384 bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability via symlink attack on predictable temp files during archive update. This issue has been patched in version 4.0.12...

CVE-2026-49823

creationtimestamp| type| source ---|---|--- 2026-06-10 19:19:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgkin2lm2i 2026-06-11 09:04:32+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnyumzfwqu27...

CVE-2026-50567

creationtimestamp| type| source ---|---|--- 2026-06-10 19:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfwzd6yv24 2026-07-28 21:08:25+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mrqcyosxc22o...

CVE-2026-0266

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:22+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmvrimw25 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:52:29+00:00| seen|...

CVE-2026-0269

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:19+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmsfsr42z 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-07-13 15:14:20+00:00| seen|...

CVE-2026-49821

creationtimestamp| type| source ---|---|--- 2026-06-10 19:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxflcnabj26...

CVE-2026-49413

creationtimestamp| type| source ---|---|--- 2026-06-10 19:00:12+00:00| published-proof-of-concept| Telegram/s-lekdCMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0 2026-06-10 21:00:04+00:00| published-proof-of-concept| Telegram/vutlEkkKb9qIgYOqF4-LP04R3ngybqm9kGYUg8WL0zG7ih0 2026-06-27 09:51:59+00:00| see...

CVE-2026-11701

An insufficient validation of untrusted input flaw was found in the Guest View component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516413817...

CVE-2026-11694

An use after free flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517705966...

CVE-2026-11691

An insufficient validation of untrusted input flaw was found in the New Tab Page component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517585486...

CVE-2026-11679

An use after free flaw was found in the Codecs component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516997135...

CVE-2026-11654

An use after free flaw was found in the CameraCapture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513362710...

CVE-2026-45552

creationtimestamp| type| source ---|---|--- 2026-06-10 18:05:44+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnxcftj7pj2b...

CVE-2026-11638

An use after free flaw was found in the Printing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517047197...

CVE-2026-11417

OS command injection in the NodejsFunction local bundling pipeline of aws-cdk-lib (pre-2.245.0; 2.246.0 on Windows) allows a threat actor who controls bundling properties (externalModules, define, loader, inject, esbuildArgs) to execute arbitrary commands on the host running the CDK toolchain via...

CVE-2026-50568 Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory by calling strings.HasPrefixpath,...

CVE-2026-50567

CVE-2026-50567 affects Fission prior to 1.25.0. The vulnerability resides in Unarchive (pkg/utils/zip.go) where archive entry paths are joined with the destination path without validating that the final path stays under the destination. An attacker who can control a Package.Spec.Source.URL or Dep...