Windows BitLocker Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Secure Boot Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Information Disclosure Vulnerability

Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Active Directory Domain Services Remote Code Execution Vulnerability

Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

GHSA-W573-9FFJ-6FF9 vulnerabilities

Vulnerabilities for packages: cassandra, zipkin, celeborn, wavefront-proxy, druid, akhq, apache-pulsar, thingsboard, apache-nifi, infinispan, apache-activemq-artemis, kserve-modelmesh, neo4j, wildfly, trino, solr, cassandra-reaper, tez, zookeeper, flyway, strimzi-kafka-operator, keycloak, spark,...

CVE-2017-20249

creationtimestamp| type| source ---|---|--- 2026-06-09 13:23:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuc5f4p2p24...

GHSA-Q834-8QMM-V933 vulnerabilities

Vulnerabilities for packages: azure-functions-host...

CVE-2026-46324

creationtimestamp| type| source ---|---|--- 2026-06-09 13:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnub4iiajl2o...

CVE-2026-46316

creationtimestamp| type| source ---|---|--- 2026-06-09 12:56:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuaopfmsc2r 2026-06-10 18:48:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxes76jgq2d 2026-06-11 06:51:55+00:00| seen|...

ROOT-APP-NPM-CVE-2026-29086 CVE-2026-29086 in @rootio/hono - Patched by Root

Root has patched CVE-2026-29086 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

GHSA-G29C-RGQ6-GXGJ awxkit has a path traversal vulnerability

A path traversal vulnerability was found in awxkit, the CLI tool for AWX. The YAML !include directive does not sanitize file paths, allowing an attacker to craft a malicious YAML file that reads arbitrary YAML-formatted files from the local filesystem when a user imports it using "awx --conf.form...

CVE-2026-46322

In the Linux kernel, the following vulnerability has been resolved: tun: free page on buildskb failure in tunxdpone When buildskb fails in tunxdpone, the function sets ret to -ENOMEM and jumps to the out label, which returns without freeing the page that vhostnetbuildxdp allocated for the frame. ...

github.com/pallets/click: Pallets Click: Arbitrary command execution via command injection in click.edit()

A flaw was found in Pallets Click. This command injection vulnerability, located in the click.edit function, allows an attacker with an unprivileged account to execute arbitrary operating system OS commands. This could lead to unauthorized control over the affected system...

Exploit for Command Injection in Github Enterprise_Server

CVE-2026-3854 - GitHub Enterprise Server that allowed an Remot...

CVE-2026-42535

creationtimestamp| type| source ---|---|--- 2026-06-09 11:12:57+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mnu2uq6ygc2l 2026-06-09 12:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25 2026-06-09 18:00:00+00:00| seen|...

CVE-2026-49742 TYPO3 CMS - Broken Access Control in Media Module

Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer FAL via the Media Module. Since the fallback storage resolves paths relative to the server's document root, this could expose sensitive files such as log files. This...

CVE-2026-47352 TYPO3 CMS - Broken Access Control in Backend API

Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.50, 12.0.0-12.4.45,...